LocalFree

AWS Audit Scanner MCP server

whatsinmycloud/aws-audit-scanner

Read-only AWS audit scanner: public S3 buckets, root and user MFA gaps, unused access keys, world-open security groups, CloudTrail gaps, and forgotten EC2/EBS/RDS spend across every region. Only makes Describe/List/Get calls and runs locally with your own credentials.

0 GitHub stars
Source code

Install AWS Audit Scanner in Claude Code

This server doesn't publish a package to a registry, so follow the install steps in its README. Once it runs, register it with Claude Code:

Claude Code
claude mcp add aws-audit-scanner -- <command to start the server>

Frequently asked questions

What does the AWS Audit Scanner MCP server do?

Read-only AWS audit scanner: public S3 buckets, root and user MFA gaps, unused access keys, world-open security groups, CloudTrail gaps, and forgotten EC2/EBS/RDS spend across every region. Only makes Describe/List/Get calls and runs locally with your own credentials.

Is the AWS Audit Scanner MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does AWS Audit Scanner run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add AWS Audit Scanner to Claude Code?

Follow the install steps in the project's README at https://github.com/whatsinmycloud/aws-audit-scanner, then register it with "claude mcp add".

More security & identity MCP servers

View all

Basescope

0

chasdaddy/basescope

Read-only safety checks for Base and EVM: honeypot and rug-pull detection, risky approvals, verified source, balances, ENS and Basenames, gas and prices.

LocalAccount neededTypeScript

Avp SDK

creatorrmode-lead/avp-sdk

Trust, W3C DID identity and EigenTrust reputation for AI agents, with attestations, disputes, sybil detection and IPFS audit anchoring.

LocalAccount neededTypeScript

Beelzebub

mariocandela/beelzebub

Honeypot framework for building decoy MCP tools that an agent would never use in normal work, to detect prompt injection and malicious agent behavior.

LocalAccount needed

Audit Gateway

0

elang2/mcp-audit-gateway

Transparent MCP proxy that keeps a signed, hash-chained audit trail of agent tool calls, with YAML policy enforcement and OpenTelemetry export.

LocalFreeTypeScript

Blastradius

0

Jimil-Joshi/blastradius-mcp

Zero-trust security proxy, pre-execution blast radius simulation, DLP secret redaction, and cryptographic audit logging for MCP.

LocalFreeTypeScript

Attestable

co-browser/attestable-mcp-server

Demonstrates remote attestation of an MCP server running in a Gramine TEE via RA-TLS, so clients can verify the server before connecting.

LocalAccount neededPython