shieldly-io/mcp
🎖️ 📇 ☁️ - Official Shieldly MCP server: analyzeiampolicy and analyzecloudformationtemplate tools flag AWS IAM privilege-escalation paths, wildcards, and over-permissive access. Free demo mode, no signup or API key needed. npx -y @shieldly/mcp.
Quick Install
{
"mcpServers": {
"shieldly-io-mcp": {
"command": "npx",
"args": [
"-y",
"shieldly-io-mcp"
]
}
}
}Using an AI coding agent (Claude Code, Cursor, etc.)? Copy a ready-made prompt that tells it to fetch the setup instructions and install this server for you.
Documentation Overview
@shieldly/mcp
AI-Powered Security Analysis for AWS — official MCP server.
Gives any MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor, etc.) two tools to analyze AWS IAM policies and CloudFormation templates for security risks — privilege escalation paths, wildcards, and other over-permissive access. Powered by Shieldly.
Setup
Add to your MCP client config (e.g. Claude Desktop's claude_desktop_config.json,
or Claude Code's .mcp.json):
{
"mcpServers": {
"shieldly": {
"command": "npx",
"args": ["-y", "@shieldly/mcp"]
}
}
}
Try it free — no account needed
Both tools run in demo mode without an API key (rate-limited, no signup). For
higher limits, set SHIELDLY_API_KEY:
{
"mcpServers": {
"shieldly": {
"command": "npx",
"args": ["-y", "@shieldly/mcp"],
"env": { "SHIELDLY_API_KEY": "sk_live_..." }
}
}
}
Get an API key (Builder plan or above): https://www.shieldly.io/app/api
Tools
analyze_iam_policy
Analyzes an IAM identity policy, or a cross-account trust+identity pair.
| Argument | Type | Description |
|---|---|---|
policy | string | The IAM policy JSON as a string. |
policyType | identity | cross_account | Defaults to identity. |
analyze_cloudformation_template
Analyzes a CloudFormation template — extracts IAM roles/policies and flags over-permissive access.
| Argument | Type | Description |
|---|---|---|
template | string | The CloudFormation template JSON as a string. |
Also available as
License
MIT