Shieldly
About
AI-Powered Security Analysis for AWS — official MCP server. Analyze IAM policies and CloudFormation templates from any MCP client.
Details
- Author
- shieldly-io
- Downloads
- 247
- Categories
- Cloud Service, Security
Jump to
- CLI
- VS Code extension
- GitHub Action
- CDK Guard
- Web app
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
ShieldlyCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
The README includes setup instructions such as "command": "npx",.
analyze_iam_policy
AI-Powered security analysis of an AWS IAM policy (identity policy or cross-account trust+identity pair). Flags privilege-escalation paths, wildcards, and other over-permissive access. Runs in demo mode (rate-limited, no signup) if SHIELDLY_API_KEY is not set.
analyze_cloudformation_template
AI-Powered security analysis of a CloudFormation template — extracts IAM roles/policies and flags over-permissive access. Runs in demo mode (rate-limited, no signup) if SHIELDLY_API_KEY is not set.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"shieldly": {
"shieldly": {
"command": "npx",
"args": [
"-y",
"@shieldly/mcp"
]
}
}
}
}McpServers
{
"shieldly": {
"command": "npx",
"args": [
"-y",
"@shieldly/mcp"
]
}
}@shieldly/mcp
AI-Powered Security Analysis for AWS — official MCP server.
Gives any MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor,
etc.) two tools to analyze AWS IAM policies and CloudFormation templates for
security risks — privilege escalation paths, wildcards, and other
over-permissive access. Powered by Shieldly.
Setup
Add to your MCP client config (e.g. Claude Desktop's claude_desktop_config.json,
or Claude Code's .mcp.json):
{
"mcpServers": {
"shieldly": {
"command": "npx",
"args": ["-y", "@shieldly/mcp"]
}
}
}
Try it free — no account needed
Both tools run in demo mode without an API key (rate-limited, no signup). For
higher limits, set SHIELDLY_API_KEY:
{
"mcpServers": {
"shieldly": {
"command": "npx",
"args": ["-y", "@shieldly/mcp"],
"env": { "SHIELDLY_API_KEY": "sk_live_..." }
}
}
}
Get an API key (Builder plan or above): https://www.shieldly.io/app/api
Tools
analyze_iam_policy
Analyzes an IAM identity policy, or a cross-account trust+identity pair.
| Argument | Type | Description |
| --- | --- | --- |
| policy | string | The IAM policy JSON as a string. |
| policyType | identity \| cross_account | Defaults to identity. |
analyze_cloudformation_template
Analyzes a CloudFormation template — extracts IAM roles/policies and flags
over-permissive access.
| Argument | Type | Description |
| --- | --- | --- |
| template | string | The CloudFormation template JSON as a string. |
Also available as
- CLI
- VS Code extension
- GitHub Action
- CDK Guard
- Web app
License
MIT
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
