Which compliance standards are supported?
SOC2, CIS (Center for Internet Security Benchmarks), and NIST (NIST Cybersecurity Framework).
MCP Cloud Compliance
@uprightsleepy
Basic information
About MCP Cloud Compliance
Conversational cloud security compliance auditing. MCP server enabling natural language queries about AWS security posture via Claude and other AI assistants.
MCP Cloud Compliance config
No standard config provided
This server doesn't expose a parseable MCP config block in its README. See the repository for install instructions.
RepositoryMCP Cloud Compliance tools
5Verify server is running
Get supported compliance frameworks
Get available resource types for compliance checking
List S3 buckets with detailed metadata by region
Check compliance status against specific standards
Overview
What is MCP Cloud Compliance?
MCP Cloud Compliance is a Model Context Protocol (MCP) server for AWS cloud compliance auditing. It automates compliance reporting for SOC2, NIST, and CIS frameworks, currently focusing on S3 bucket checks, with plans to expand to full AWS service coverage. It is designed for cloud engineers, security auditors, and compliance teams who want to run conversational compliance checks via Claude.
How to use MCP Cloud Compliance?
Install Java 21+, Maven 3.6+, and configure AWS credentials. Clone the repository, build with mvn clean package, then run with mvn spring-boot:run or java -jar target/cloud-compliance-mcp-0.1.0.jar. Add the server configuration to your Claude Desktop config file, restart Claude, and use conversational queries like “Check SOC2 compliance for storage resources.”
Key features of MCP Cloud Compliance
- Supports SOC2, CIS, and NIST compliance frameworks
- Lists S3 buckets with detailed metadata by region
- Checks S3 bucket compliance against multiple standards in real time
- Filters resources by AWS region
- Provides a conversational interface for reports and queries
Use cases of MCP Cloud Compliance
- Generate SOC2 Type II compliance reports for AWS infrastructure
- Check NIST 800-53 compliance status across S3 buckets
- Identify all non-compliant S3 resources in a production environment
- List S3 buckets by region with creation dates and metadata
- Produce a compliance summary with high-severity findings
Frequently asked questions
What AWS resources can it audit?
Currently only S3 buckets. Support for compute, database, and network resources is planned for future releases.
What are the prerequisites?
Java 21 or higher, Maven 3.6+, and configured AWS credentials.
How do I connect it to Claude Desktop?
Add the server configuration with the path to the built JAR to your Claude Desktop `claude_desktop_config.json` file, then restart Claude.
How does it authenticate with AWS?
It relies on standard AWS credentials configured on the machine where the server runs (e.g., via `~/.aws/credentials` or environment variables).
More Other MCP servers
Lemon.io
lemon-ioRequest dedicated senior developers to work on your project, write job descriptions, and prep technical interviews — all without leaving your Claude chat. Just describe what you need, and Lemon.io MCP does the rest. 1–3
Soar Flight Booking MCP
Soar Flight Booking MCP is a remote MCP server available at https://mcp.soar.flights.
CryptoAd Network
CryptoAdvertisingNetAgent-native crypto ads: reach real crypto users from $0.05, paid in USDC via x402. No account.
Screenpipe
screenpipeYC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power your agents' context
22.0K
Health by Dr Brad
Dr Brad StanfieldHealth by Dr Brad works out a health plan from your own results: which screening is due at your age, and evidence-based suggestions, each with the reason and the published guideline or study behind it. Your record is one
Comments