# shieldly-io/mcp [Health: Active]

**Category:** 🔒 Security  
**Repository:** https://github.com/shieldly-io/mcp  
**GitHub Stars:** 0  
**npm Downloads (last month):** 178  
**Views:** 2  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/shieldly-io-mcp

## Description
Official Shieldly MCP server: analyzeiampolicy and analyzecloudformationtemplate tools flag AWS IAM privilege-escalation paths, wildcards, and over-permissive access. Free demo mode, no signup or API key needed. npx -y @shieldly/mcp.

## Tools
Capabilities this server exposes over MCP:

- **analyze_iam_policy** — Analyzes an IAM identity policy, or a cross-account trust+identity pair.
- **analyze_cloudformation_template** — Analyzes a CloudFormation template — extracts IAM roles/policies and flags

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "mcp": {
    "command": "npx",
    "args": ["-y","@shieldly/mcp"]
  }
}
```

## Documentation & README

# @shieldly/mcp

**AI-Powered Security Analysis for AWS — official MCP server.**

Gives any MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor,
etc.) two tools to analyze AWS IAM policies and CloudFormation templates for
security risks — privilege escalation paths, wildcards, and other
over-permissive access. Powered by [Shieldly](https://www.shieldly.io).

## Setup

Add to your MCP client config (e.g. Claude Desktop's `claude_desktop_config.json`,
or Claude Code's `.mcp.json`):

```json
{
  "mcpServers": {
    "shieldly": {
      "command": "npx",
      "args": ["-y", "@shieldly/mcp"]
    }
  }
}
```

## Try it free — no account needed

Both tools run in demo mode without an API key (rate-limited, no signup). For
higher limits, set `SHIELDLY_API_KEY`:

```json
{
  "mcpServers": {
    "shieldly": {
      "command": "npx",
      "args": ["-y", "@shieldly/mcp"],
      "env": { "SHIELDLY_API_KEY": "sk_live_..." }
    }
  }
}
```

Get an API key (Builder plan or above): https://www.shieldly.io/app/api

## Tools

### `analyze_iam_policy`

Analyzes an IAM identity policy, or a cross-account trust+identity pair.

| Argument | Type | Description |
| --- | --- | --- |
| `policy` | string | The IAM policy JSON as a string. |
| `policyType` | `identity` \| `cross_account` | Defaults to `identity`. |

### `analyze_cloudformation_template`

Analyzes a CloudFormation template — extracts IAM roles/policies and flags
over-permissive access.

| Argument | Type | Description |
| --- | --- | --- |
| `template` | string | The CloudFormation template JSON as a string. |

## Also available as

- [CLI](https://www.npmjs.com/package/@shieldly/cli)
- [VS Code extension](https://marketplace.visualstudio.com/items?itemName=shieldly.shieldly)
- [GitHub Action](https://github.com/shieldly-io/action)
- [CDK Guard](https://www.npmjs.com/package/@shieldly/cdk-guard)
- [Web app](https://www.shieldly.io)

## License

MIT