io.github.shieldly-io/mcp
AI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation.
Installation
Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).
@shieldly/mcpclaude mcp add io-github-shieldly-io-mcp -e 'SHIELDLY_API_KEY=<your shieldly_api_key>' -- npx -y @shieldly/mcp@1.0.1
{
"mcpServers": {
"io-github-shieldly-io-mcp": {
"command": "npx",
"args": [
"-y",
"@shieldly/mcp@1.0.1"
],
"env": {
"SHIELDLY_API_KEY": "<your shieldly_api_key>"
}
}
}
}
Variables d'environnement
SHIELDLY_API_KEYsecret Shieldly API key (optional — without it the server runs in rate-limited demo mode, no signup needed)
Documentation
Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.
@shieldly/mcp
AI-Powered Security Analysis for AWS — official MCP server.
Gives any MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor, etc.) two tools to analyze AWS IAM policies and CloudFormation templates for security risks — privilege escalation paths, wildcards, and other over-permissive access. Powered by Shieldly.
Setup
Add to your MCP client config (e.g. Claude Desktop's claude_desktop_config.json,
or Claude Code's .mcp.json):
{
"mcpServers": {
"shieldly": {
"command": "npx",
"args": ["-y", "@shieldly/mcp"]
}
}
}
Try it free — no account needed
Both tools run in demo mode without an API key (rate-limited, no signup). For
higher limits, set SHIELDLY_API_KEY:
{
"mcpServers": {
"shieldly": {
"command": "npx",
"args": ["-y", "@shieldly/mcp"],
"env": { "SHIELDLY_API_KEY": "sk_live_..." }
}
}
}
Get an API key (Builder plan or above): https://www.shieldly.io/app/api
Tools
analyze_iam_policy
Analyzes an IAM identity policy, or a cross-account trust+identity pair.
| Argument | Type | Description | |
|---|---|---|---|
policy | string | The IAM policy JSON as a string. | |
policyType | identity \ | cross_account | Defaults to identity. |
analyze_cloudformation_template
Analyzes a CloudFormation template — extracts IAM roles/policies and flags over-permissive access.
| Argument | Type | Description |
|---|---|---|
template | string | The CloudFormation template JSON as a string. |
Also available as
License
MIT
Questions fréquentes
Qu'est-ce que io.github.shieldly-io/mcp ?
AI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation.
Comment installer io.github.shieldly-io/mcp ?
Il s'exécute sur votre machine. Dans Claude Code : claude mcp add io-github-shieldly-io-mcp -e 'SHIELDLY_API_KEY=<your shieldly_api_key>' -- npx -y @shieldly/mcp@1.0.1. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.
Faut-il une clé API pour io.github.shieldly-io/mcp ?
Oui. Il attend SHIELDLY_API_KEY, à renseigner dans sa configuration.
io.github.shieldly-io/mcp est-il open source ?
Oui. Son code est sur GitHub sous licence MIT.
Qui maintient io.github.shieldly-io/mcp ?
Il est publié par shieldly-io. AI.tn le référence sans le maintenir ni le recommander.
Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.