MCP.Market

Shieldly Io MCP server

by shieldly-io·io.github.shieldly-io/mcp·v1.0.1
No reviews yet

AI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation.

B77/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B77/100

full report

Adoption
New

0 stars34 downloads/wk

Reviews

Write one

Nobody has reviewed Shieldly Io yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Shieldly Io tools (2)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • analyze_cloudformation_template

    AI-Powered security analysis of a CloudFormation template \u2014 extracts IAM roles/policies and flags over-permissive access. Runs in demo mode (rate-limited, no signup) if SHIELDLY_API_KEY is not set.

  • analyze_iam_policy

    AI-Powered security analysis of an AWS IAM policy (identity policy or cross-account trust+identity pair). Flags privilege-escalation paths, wildcards, and other over-permissive access. Runs in demo mode (rate-limited, no signup) if SHIELDLY_API_KEY is not set.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan2 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 70 days ago12/15
  • Maintainer identityregistry namespace matches repository owner7/10
Overall 77/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Shieldly Io compares

Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
77/100
higher than 45% of 1,119 Developer tools servers
Tools
2
the typical Developer tools server has 7
Tools that change things
0%
typical: 5%. Fewer write tools means less an agent can break
Downloads a week
34
more than 19% of 436 Developer tools servers with a package

What its tools let an agent do: 2 read

Install Shieldly Io in Claude Code, Cursor or VS Code

Runs npx -y @shieldly/mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp -- npx -y @shieldly/mcp
Add to Cursor

What the publisher says

From the Shieldly Io repository's README, as published. We do not edit it. Read it on GitHub

@shieldly/mcp

AI-Powered Security Analysis for AWS — official MCP server.

Gives any MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor, etc.) two tools to analyze AWS IAM policies and CloudFormation templates for security risks — privilege escalation paths, wildcards, and other over-permissive access. Powered by Shieldly.

Setup

Add to your MCP client config (e.g. Claude Desktop's claudedesktopconfig.json, or Claude Code's .mcp.json):

{
  "mcpServers": {
    "shieldly": {
      "command": "npx",
      "args": ["-y", "@shieldly/mcp"]
    }
  }
}

Try it free — no account needed

Both tools run in demo mode without an API key (rate-limited, no signup). For higher limits, set SHIELDLYAPIKEY:

{
  "mcpServers": {
    "shieldly": {
      "command": "npx",
      "args": ["-y", "@shieldly/mcp"],
      "env": { "SHIELDLY_API_KEY": "sk_live_..." }
    }
  }
}

Get an API key (Builder plan or above): https://www.shieldly.io/app/api

Tools

analyzeiampolicy

Analyzes an IAM identity policy, or a cross-account trust+identity pair.

analyzecloudformationtemplate

Analyzes a CloudFormation template — extracts IAM roles/policies and flags over-permissive access.

Also available as

  • CLI
  • VS Code extension
  • GitHub Action
  • CDK Guard
  • Web app

License

MIT

Nothing above is checked by us. What we check is on the safety report.

Shieldly Io: common questions

Is Shieldly Io MCP server safe?
Mostly: it is graded B (77/100). Read the Shieldly Io safety report
How do I install Shieldly Io?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Shieldly Io need an API key?
Yes. The registry entry asks for SHIELDLY_API_KEY.
Is Shieldly Io maintained?
The last commit was 109 days ago (2026-07-18). The latest release is v1.0.1.
What can I use instead of Shieldly Io?
Servers from other publishers that do the same job: cloud-audit MCP server, Grasp — Code Architecture & Dependency Analysis MCP server and Emfirge MCP server.
How does Shieldly Io compare with other Developer tools MCP servers?
safety score 77/100 (higher than 45% of 1,119 Developer tools servers); tools 2 (the typical Developer tools server has 7); tools that change things 0% (typical: 5%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Shieldly Io

Same job from other publishers: the closest match first, then the best rated.

  • cloud-audit
    AWS security scanner with attack chain detection, IAM privilege escalation, and fixes
    A
  • Grasp — Code Architecture & Dependency Analysis
    Codebase analysis: dependency graphs, security scanning, and refactor plans for GitHub and GitLab.
    C
  • Emfirge
    Git branch for your cloud. Understand AWS risk, prove fixes, and ship safer changes.
    A
  • TerraVision
    Draw cloud architecture diagrams with official AWS, Azure and GCP icons from a prompt or Terraform.
    A
  • Observatory
    MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.
    B