mcpField
S
Shieldly

Shieldly

Local
shieldly.ioCloud & Infra0Updated 17w ago
DocsRepositoryVisit website

About Shieldly

Shieldly is an MCP server for security analysis of AWS IAM policies and CloudFormation templates. It serves teams using MCP-compatible AI assistants and flags risks such as privilege escalation paths and overly broad permissions.

Key features

  1. 01Analyze IAM identity policies
  2. 02Check cross-account trust and identity policies
  3. 03Analyze CloudFormation templates
  4. 04Flag privilege escalation and broad access

Use cases

  1. 01Review an IAM policy for excessive permissions
  2. 02Assess cross-account access configuration
  3. 03Inspect template-defined IAM roles and policies

MCP support

Exposes two security-analysis tools to MCP clients: one for IAM policies and one for CloudFormation templates. Demo mode works without an API key, with rate limits.

#aws#security#iam#cloudformation#policy-analysis

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "shieldly-io": {
      "command": "npx",
      "args": [
        "-y",
        "@shieldly/mcp"
      ],
      "env": {
        "SHIELDLY_API_KEY": "<SHIELDLY_API_KEY>"
      }
    }
  }
}
Run commandnpx -y @shieldly/mcp
Environment variables to set
SHIELDLY_API_KEYSecretShieldly API key (optional — without it the server runs in rate-limited demo mode, no signup needed)

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npm@shieldly/mcp1.0.1

Tools

2

Saved tool list · updated 5w ago

ParameterTypeRequiredDescription
policystringYesThe IAM policy JSON as a string. For cross_account, a JSON object with identityPolicy and trustPolicy.
policyTypeenumNoidentity (default) for a normal IAM/resource policy, or cross_account.identity | cross_account

Details

From the project README

@shieldly/mcp

AI-Powered Security Analysis for AWS — official MCP server.

Gives any MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor, etc.) two tools to analyze AWS IAM policies and CloudFormation templates for security risks — privilege escalation paths, wildcards, and other over-permissive access. Powered by Shieldly.

Setup

Add to your MCP client config (e.g. Claude Desktop's claude_desktop_config.json, or Claude Code's .mcp.json):

{
  "mcpServers": {
    "shieldly": {
      "command": "npx",
      "args": ["-y", "@shieldly/mcp"]
    }
  }
}

Try it free — no account needed

Both tools run in demo mode without an API key (rate-limited, no signup). For higher limits, set SHIELDLY_API_KEY:

{
  "mcpServers": {
    "shieldly": {
      "command": "npx",
      "args": ["-y", "@shieldly/mcp"],
      "env": { "SHIELDLY_API_KEY": "sk_live_..." }
    }
  }
}

Get an API key (Builder plan or above): https://www.shieldly.io/app/api

Tools

analyze_iam_policy

Analyzes an IAM identity policy, or a cross-account trust+identity pair.

ArgumentTypeDescription
policystringThe IAM policy JSON as a string.
policyTypeidentity | cross_accountDefaults to identity.
analyze_cloudformation_template

Analyzes a CloudFormation template — extracts IAM roles/policies and flags over-permissive access.

ArgumentTypeDescription
templatestringThe CloudFormation template JSON as a string.

Also available as

License

MIT

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.