How do I install Mcp?

Mcp is a local plugin. Install it using npm package: @shieldly/mcp and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Mcp scored 6.8/10 (moderate risk) in MCP Marketplace's automated security scan. It has 1 high or critical finding to review. It's listed, but review the security report on this page before installing.

What credentials does Mcp need?

Mcp requires the following credentials or environment variables: SHIELDLY_API_KEY. You can find setup instructions on the server detail page.

What AI apps work with Mcp?

Mcp uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Mcp MCP Server

by Shieldly Io

Developer ToolsModerate6.8MCP RegistryLocal

Free

Server data from the Official MCP Registry

AI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation.

About

AI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation.

Security Report

6.8

Moderate6.8Moderate Risk

The MCP server is well-structured with appropriate authentication mechanisms and no critical security vulnerabilities. The server requires optional API key authentication for production use, supports demo mode, and makes reasonable network calls to the Shieldly API. The code is compiled/minified which prevents easy source code review, but the available metadata, package.json, and README indicate a legitimate security analysis tool from an established vendor. Minor code quality considerations around error handling in the compiled bundle, but these do not materially impact security posture. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

3 files analyzed · 4 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Shieldly API key (optional — without it the server runs in rate-limited demo mode, no signup needed)Required

Environment variable: SHIELDLY_API_KEY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-shieldly-io-mcp": {
      "env": {
        "SHIELDLY_API_KEY": "your-shieldly-api-key-here"
      },
      "args": [
        "-y",
        "@shieldly/mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

@shieldly/mcp

AI-Powered Security Analysis for AWS — official MCP server.

Gives any MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor, etc.) two tools to analyze AWS IAM policies and CloudFormation templates for security risks — privilege escalation paths, wildcards, and other over-permissive access. Powered by Shieldly.

Setup

Add to your MCP client config (e.g. Claude Desktop's claude_desktop_config.json, or Claude Code's .mcp.json):

{
  "mcpServers": {
    "shieldly": {
      "command": "npx",
      "args": ["-y", "@shieldly/mcp"]
    }
  }
}

Try it free — no account needed

Both tools run in demo mode without an API key (rate-limited, no signup). For higher limits, set SHIELDLY_API_KEY:

{
  "mcpServers": {
    "shieldly": {
      "command": "npx",
      "args": ["-y", "@shieldly/mcp"],
      "env": { "SHIELDLY_API_KEY": "sk_live_..." }
    }
  }
}

Get an API key (Builder plan or above): https://www.shieldly.io/app/api

Tools

`analyze_iam_policy`

Analyzes an IAM identity policy, or a cross-account trust+identity pair.

Argument	Type	Description
`policy`	string	The IAM policy JSON as a string.
`policyType`	`identity` \| `cross_account`	Defaults to `identity`.

`analyze_cloudformation_template`

Analyzes a CloudFormation template — extracts IAM roles/policies and flags over-permissive access.

Argument	Type	Description
`template`	string	The CloudFormation template JSON as a string.

Also available as

License

MIT

Reviews

No reviews yet

Be the first to review this server!

More Developer Tools MCP Servers

Git

Free

by Modelcontextprotocol · Developer Tools

Read, search, and manipulate Git repositories programmatically

Toleno

Free

by Toleno · Developer Tools

Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.

mcp-creator-python

Free

by mcp-marketplace · Developer Tools

Create, build, and publish Python MCP servers to PyPI — conversationally.

Mcp MCP Server

About

Security Report

Findings (4)Action required

Permissions Required

What You'll Need

How to Install

Documentation

@shieldly/mcp

Setup

Try it free — no account needed

Tools

`analyze_iam_policy`

`analyze_cloudformation_template`

Also available as

License

Reviews

No reviews yet

More Developer Tools MCP Servers

Git

Toleno

mcp-creator-python

MarkItDown

MCP Marketplace

FinAgent