Cloud security audit tools for AI agents — AWS, Azure, GCP misconfiguration detection via MCP. 38 tools, 60+ checks. The agent finds vulns, not you.

MCP server for Cloud Agent — an AI software engineer that writes code, opens PRs, reviews code, generates tests, runs security scans, and answers codebase questions. Connect from any MCP client (Claude Code, Cursor, Windsurf) and delegate engineering task

Unified multi-cloud abstraction framework providing secure, dynamic access to AWS, Azure, and OCI through Model Context Protocol servers with AST-based sandboxin

Cloud security posture from a config export (public buckets, open SGs, weak IAM)

Model Context Protocol (MCP) server giving any LLM secure, audited access to the Qualys Cloud Platform (VM, PM, WAS, TotalCloud, Container Security, CSAM, and more).

AI-native unified cloud governance platform — multi-cloud discovery, 6R migration planning, IaC security, FinOps, compliance audit, and executive AI chat. Built on Claude Opus 4.7. EU AI Act Annex IV ready. Zero paid SaaS dependencies.

Self-hosted MCP server for secure AI access to Salesforce Marketing Cloud.

An MCP server to enumerate AWS IAM data, analyze effective permissions, and visualize access relationships across users, roles, and resources. Built for cloud security engineers who want fast, easy and effective insights into AWS identity risk

Production-shaped, multi-tenant MCP server: OAuth 2.1, tenant isolation enforced by Postgres row-level security, stateless Streamable HTTP on Cloud Run, OpenTelemetry tracing, and an eval scorecard.

Comprehensive MCP (Model Context Protocol) server for cloud services management. Supports AWS, Azure, and GCP with resource management, cost analysis, monitoring, and security features.

MCP server that acts as your Azure cloud engineer. Plans, provisions, analyzes, and optimizes Azure resources using az CLI with security, DevSecOps, and FinOps best practices.

A Model Context Protocol (MCP) server for secure BigQuery access across multiple Google Cloud projects with advanced analytics, security controls, and Docker support.

Provide healthcare data access and querying capabilities by integrating with Google Cloud Healthcare FHIR APIs and public medical research databases. Enable seamless retrieval of patient records, clinical data, and research articles through a secure and authenticated MCP interface. Enhance healthcare applications with real-time clinical insights and research information.

A production-ready Model Context Protocol (MCP) server for Idira (formerly CyberArk) Privilege Cloud integration. Enables AI assistants and MCP clients to securely interact with privileged account management, safe operations, and platform configurations.

A Model Context Protocol (MCP) server for automated security scanning and live validation of LLM API keys and cloud endpoints

Cloud189 Agent Storage — secure, reliable, extensible, free cloud storage for AI agents, powered by Tianyi Cloud 189 / 天翼云盘

Tailpipe MCP server to query cloud and security logs using AI.

MCP server for Wiz cloud security platform — query vulnerability findings by repo and severity

Rust MCP server with 168 security tools for Claude — DNS/DNSSEC, TLS, email security, OSINT, threat intelligence, supply chain & cloud. 0 API keys.

Security rules for AI coding agents: 681 rules, 21 platforms, MCP server, Claude Code plugin. Web, mobile, databases, cloud, AI, banking.

Async Rust MCP server for HPE Juniper Security Director Cloud — a mechub project

An MCP (Model Context Protocol) server that brings powerful AWS FinOps capabilities directly into your AI assistant. Analyze cloud costs, audit for waste, and get budget insights using natural language, all while keeping your credentials secure on your local machine.

MCP server with specialized judges to evaluate AI-generated code for security, cost, scalability, cloud readiness, and best practices.

A power tool for web security testing — scanner, repeater, intruder, and AI agent in one Rust binary. No accounts, no telemetry, no cloud.

The largest Claude Code plugin marketplace. 500 plugins, 600+ developer tools in one MCP server. Security, testing, DevOps, databases, frontend, backend, ML/AI, mobile, cloud, and more.

MCP guard & vibe coding security tool for Cursor and Claude Code. Fail-closed human-in-the-loop approval for shell commands and MCP tools—local daemon, YAML policy, no cloud.

A universal multi-cloud data MCP Server supporting over 40 types of data source connections, providing secure, unified data access in a single platform.
Supports full range of Alibaba Cloud services and Mainstream databases/data warehouses.

Persistent memory + security layer for Claude Code (MCP plugin). Agents remember your project across sessions (~87% fewer context tokens), every tool call lands in a tamper-evident HMAC audit chain, and skills are AST-scanned + HMAC-verified before they run. 100% local: PostgreSQL + Ollama, no cloud, MIT.

A secure, cross-platform SSH credential manager and terminal with cloud sync and MCP

Run code in isolated cloud containers. ConTree gives AI agents secure sandboxed execution environments with full root access, network, and persistent images.

🤖 AI-powered, multi-cloud security & compliance co-pilot. 🏆 Submission for the HackerEarth Global MCP Hackathon (Theme 2).

.NET MCP Server for Jira Cloud. Expose Jira REST/Agile APIs to MCP clients (Claude Code, Cursor) with secure permission controls, stdio & HTTP transport.

An AWS CDK MCP server that provides guidance on AWS Cloud Development Kit best practices, infrastructure as code patterns, and security compliance with CDK Nag. This server offers tools to validate...

🔌 MCP Server for Oracle DB on SAP BTP — secure, read-only database access via Model Context Protocol with XSUAA auth, table whitelisting & Cloud Connector support

MCP server for secure SSH remote management — 337 tools across 74 groups for DevOps, Docker, Kubernetes, databases, systemd, Windows, cloud, compliance & more. Built in Rust.

Secure Model Context Protocol (MCP) server & gateway for Claude, Cursor, and ChatGPT. Unlimited local file editing, testing, and dev tools without cloud limits.

MCP server for MASV. Provides tools to use MASV API. MASV is an easy-to-use, secure, and ultra-reliable cloud-based and on-prem managed file transfer service for large file workflows.

An enterprise-grade, autonomous AI agent built to detect, audit, and remediate cloud security misconfigurations (like public S3 buckets) in a completely isolated, simulated AWS environment.

150-tool MCP server for codebase analysis — dependency graphs, architecture layers, security scanning, refactor plans, git history, and more. Works with GitHub and GitLab repos (cloud + self-hosted) and local directories.

An agentic AI–powered IaC scanner that evaluates cloud infrastructure against security and compliance benchmarks. It also delivers cost analysis and AWS Well-Architected recommendations, with support for custom policies, checks, and configurable exceptions.

A locally-deployed, offline security intelligence server powered by a quantized LLM + RAG pipeline over CVE feeds and logs, exposed as an MCP server. Plugs into Claude Desktop, Cursor, or any MCP client - no cloud, no data leaks.

MCP server that lets AI agents (Claude Code, GitHub Copilot) model Dataverse and the Power Platform: tables, views, security roles, solutions, workflows, business process flows, cloud flows. Delegated auth, read-only mode, production guard.

The largest Claude Code plugin marketplace. 500 plugins, 600+ developer tools in one MCP server. Security, testing, DevOps, CI/CD, databases, frontend, backend, API design, ML/AI, mobile, cloud, serverless, authentication, monitoring, and more.

GoBuildWP (formerly WPPilot): WordPress MCP server & AI agent for ChatGPT, Claude, Cursor, Codex. Build and edit full websites in Elementor and Gutenberg, run SEO, PageSpeed checks, safe updates, backups and security, many sites via GoBuildWP Cloud. Safety profiles, human approval, undo. Free core; Pro adds WooCommerce and more builders.

Open-source, read-only AWS security scanner. 110 checks across 25 services, 31 attack-chain rules, 64 IAM escalation methods (incl. lateral AssumeRole graph), Proof Mode exploitability verification, data perimeter and Bedrock AgentCore checks, Blast Radius CLI, Threat Feed, What-If simulator, AI-SPM, 6 compliance frameworks, breach-cost estimation, MCP server. CLI + Terraform remediation on every finding.

—

Self-hosted Chromium MCP server with isolated browser profiles, OAuth, and human-approved remote browsing. DrissionPage terms apply.

MCP server for AWS security auditing — IAM role/policy analysis and S3 Public Access Block scanning via Boto3.

AWS Security MCP Server – GuardDuty/SecurityHub/Inspector findings, security service status checks, and S3/EBS encryption audits for security investigations

Open-Source AI Platform for DevOps, SRE, Cloud, and Platform Engineering

Multi-cloud cost report, anomaly detection, and FOCUS export

Find leaked cloud keys (AWS/GCP/Azure) + classify blast radius

A Model Context Protocol server that connects AI assistants like Claude to AWS security services, allowing them to autonomously query, inspect, and analyze AWS infrastructure for security issues and misconfigurations.

Kubernetes cost and rightsizing advisor with no Prometheus dependency

AWS CloudTrail MCP Server – audit log lookup, CloudTrail Lake SQL analytics, and event data store management for security investigations

AWS Network MCP Server – VPC inspection, security group analysis, ENI details, flow log queries, and IP address lookup for security investigations

Multi-account AWS security scanning and infrastructure ledger with Prowler integration, taggable scan history, multi-backend storage (SQLite, PostgreSQL, MySQL, MSSQL), and an MCP server for querying scan data.

AWS Lambda MCP Server – function discovery, configuration inspection, resource policy analysis, event source mapping enumeration, and function URL exposure checks for security investigations

MCP server for interacting with Turbot Guardrails.

[DEPRECATED] MCP server for exploring the FedRAMP docs repository. Consolidated into GRC Clanker and myctrl.tools — see README.