English Français العربية

io.github.shieldly-io/mcp

Official registry Cloud and DevOps

AI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation.

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package @shieldly/mcp
Claude Code 
claude mcp add io-github-shieldly-io-mcp -e 'SHIELDLY_API_KEY=<your shieldly_api_key>' -- npx -y @shieldly/mcp@1.0.1
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "io-github-shieldly-io-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "@shieldly/mcp@1.0.1"
            ],
            "env": {
                "SHIELDLY_API_KEY": "<your shieldly_api_key>"
            }
        }
    }
}

Environment variables

  • SHIELDLY_API_KEY secret Shieldly API key (optional — without it the server runs in rate-limited demo mode, no signup needed)

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. @shieldly/mcp
  2. Setup
  3. Try it free — no account needed
  4. Tools
  5. Also available as
  6. License

@shieldly/mcp

AI-Powered Security Analysis for AWS — official MCP server.

Gives any MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor, etc.) two tools to analyze AWS IAM policies and CloudFormation templates for security risks — privilege escalation paths, wildcards, and other over-permissive access. Powered by Shieldly.

Setup

Add to your MCP client config (e.g. Claude Desktop's claude_desktop_config.json, or Claude Code's .mcp.json):

{
  "mcpServers": {
    "shieldly": {
      "command": "npx",
      "args": ["-y", "@shieldly/mcp"]
    }
  }
}

Try it free — no account needed

Both tools run in demo mode without an API key (rate-limited, no signup). For higher limits, set SHIELDLY_API_KEY:

{
  "mcpServers": {
    "shieldly": {
      "command": "npx",
      "args": ["-y", "@shieldly/mcp"],
      "env": { "SHIELDLY_API_KEY": "sk_live_..." }
    }
  }
}

Get an API key (Builder plan or above): https://www.shieldly.io/app/api

Tools

analyze_iam_policy

Analyzes an IAM identity policy, or a cross-account trust+identity pair.

ArgumentTypeDescription
policystringThe IAM policy JSON as a string.
policyTypeidentity \cross_accountDefaults to identity.
analyze_cloudformation_template

Analyzes a CloudFormation template — extracts IAM roles/policies and flags over-permissive access.

ArgumentTypeDescription
templatestringThe CloudFormation template JSON as a string.

Also available as

License

MIT

Frequently asked questions

What is io.github.shieldly-io/mcp?

AI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation.

How do I install io.github.shieldly-io/mcp?

It runs on your machine. In Claude Code: claude mcp add io-github-shieldly-io-mcp -e 'SHIELDLY_API_KEY=<your shieldly_api_key>' -- npx -y @shieldly/mcp@1.0.1. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.shieldly-io/mcp need an API key?

Yes. It expects SHIELDLY_API_KEY, which you set in its configuration.

Is io.github.shieldly-io/mcp open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains io.github.shieldly-io/mcp?

It is published by shieldly-io. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.