npm @shieldly/mcpstdioMITupdated 1mo ago
AI-Powered Security Analysis for AWS — official MCP server.
What can you do with shieldly io?
@shieldly/mcp
AI-Powered Security Analysis for AWS — official MCP server.
Gives any MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor, etc.) two tools to analyze AWS IAM policies and CloudFormation templates for security risks — privilege escalation paths, wildcards, and other over-permissive access. Powered by Shieldly.
Setup
Add to your MCP client config (e.g. Claude Desktop's claude_desktop_config.json,
or Claude Code's .mcp.json):
{
"mcpServers": {
"shieldly": {
"command": "npx",
"args": ["-y", "@shieldly/mcp"]
}
}
}
Try it free — no account needed
Both tools run in demo mode without an API key (rate-limited, no signup). For
higher limits, set SHIELDLY_API_KEY:
{
"mcpServers": {
"shieldly": {
"command": "npx",
"args": ["-y", "@shieldly/mcp"],
"env": { "SHIELDLY_API_KEY": "sk_live_..." }
}
}
}
Get an API key (Builder plan or above): https://www.shieldly.io/app/api
Tools
analyze_iam_policy
Analyzes an IAM identity policy, or a cross-account trust+identity pair.
| Argument | Type | Description |
|---|---|---|
policy |
string | The IAM policy JSON as a string. |
policyType |
identity | cross_account |
Defaults to identity. |
analyze_cloudformation_template
Analyzes a CloudFormation template — extracts IAM roles/policies and flags over-permissive access.
| Argument | Type | Description |
|---|---|---|
template |
string | The CloudFormation template JSON as a string. |
Also available as
License
MIT
Install
Add shieldly io to your client. Pick the one you use.
claude mcp add mcp -- npx -y @shieldly/mcpcodex mcp add mcp -- npx -y @shieldly/mcpamp mcp add mcp -- npx -y @shieldly/mcp{
"mcpServers": {
"mcp": {
"command": "npx",
"args": [
"-y",
"@shieldly/mcp"
]
}
}
}Add to `claude_desktop_config.json`, then restart Claude Desktop.
{
"mcpServers": {
"mcp": {
"command": "npx",
"args": [
"-y",
"@shieldly/mcp"
]
}
}
}Add to `~/.cursor/mcp.json`, or `.cursor/mcp.json` for a single project.
code --add-mcp '{"name":"mcp","command":"npx","args":["-y","@shieldly/mcp"]}'Or add the block manually to `.vscode/mcp.json` under `servers`.
{
"mcpServers": {
"mcp": {
"command": "npx",
"args": [
"-y",
"@shieldly/mcp"
]
}
}
}Add to `~/.codeium/windsurf/mcp_config.json`.
{
"mcpServers": {
"mcp": {
"command": "npx",
"args": [
"-y",
"@shieldly/mcp"
]
}
}
}Add to `cline_mcp_settings.json` via the MCP Servers panel.
{
"mcpServers": {
"mcp": {
"command": "npx",
"args": [
"-y",
"@shieldly/mcp"
]
}
}
}Add to `~/.gemini/settings.json`.
{
"mcpServers": {
"mcp": {
"type": "local",
"command": "npx",
"args": [
"-y",
"@shieldly/mcp"
],
"tools": [
"*"
]
}
}
}Add to `~/.copilot/mcp-config.json`, or run `/mcp add` inside the CLI.
{
"context_servers": {
"mcp": {
"command": {
"path": "npx",
"args": [
"-y",
"@shieldly/mcp"
]
}
}
}
}Add to your Zed `settings.json`.
npx -y @shieldly/mcpRun `goose configure`, choose **Add Extension → Command-line Extension**, and paste this command.
Score
39 / 100
Incomplete
- Documentation22/25
- Maintenance16/25
- Trust16/20
- Capability0/15
- Install experience12/15
- Documents what it does and how to connect
- Has a resolvable package or endpoint
- Exposes at least one tool, prompt or resource
- README has substantive content
- Includes a code example
- Documents its configuration
- Mentions credentials or security posture
- Last commit 45 days ago
- Has a release history
- Repository is not archived
- Licensed MIT
- Namespace verified in the official MCP registry
- Claimed by its owner
- Published under an organisation
- 0 tool(s) documented
- Provides prompt templates
- Provides resources
- 12 documented install method(s)
- Published to a package registry
- Offers a hosted endpoint — no local install
Version history
| Versions | Published |
|---|---|
| 1.0.1Latest | Jul 11, 2026 |