@tocharianou/aws-security-mcp
v1.0.1
Published
AWS Security MCP Server – GuardDuty/SecurityHub/Inspector findings, security service status checks, and S3/EBS encryption audits for security investigations
Maintainers
Readme
aws-security-mcp
AWS Security MCP Server for SOC/DFIR investigations.
Tools
| Tool | Description |
|------|-------------|
| check_security_services | Check if GuardDuty, Security Hub, Inspector, Access Analyzer are enabled |
| get_security_findings | Retrieve findings from any supported security service |
| check_storage_encryption | Audit S3 buckets and EBS volumes for encryption |
Configuration
| Variable | Description |
|----------|-------------|
| AWS_ACCESS_KEY_ID | AWS access key |
| AWS_SECRET_ACCESS_KEY | AWS secret key |
| AWS_DEFAULT_REGION | Default region (e.g. us-east-1) |
| AWS_SESSION_TOKEN | Optional session token |
| MAX_TOKEN_CALL | Token limit per call (default: 20000) |
Usage
npx aws-security-mcp