MCP Cloud Compliance

@uprightsleepy

Basic information

About MCP Cloud Compliance

Conversational cloud security compliance auditing. MCP server enabling natural language queries about AWS security posture via Claude and other AI assistants.

#aws #nist #security-audit #spring-boot #mcp #compliance #cloud-security#soc2#cis-benchmark#model-context-protocol

MCP Cloud Compliance config

No standard config provided

This server doesn't expose a parseable MCP config block in its README. See the repository for install instructions.

Repository

MCP Cloud Compliance tools

Verify server is running

Get supported compliance frameworks

Get available resource types for compliance checking

List S3 buckets with detailed metadata by region

Check compliance status against specific standards

Overview

What is MCP Cloud Compliance?

MCP Cloud Compliance is a Model Context Protocol (MCP) server for AWS cloud compliance auditing. It automates compliance reporting for SOC2, NIST, and CIS frameworks, currently focusing on S3 bucket checks, with plans to expand to full AWS service coverage. It is designed for cloud engineers, security auditors, and compliance teams who want to run conversational compliance checks via Claude.

How to use MCP Cloud Compliance?

Install Java 21+, Maven 3.6+, and configure AWS credentials. Clone the repository, build with mvn clean package, then run with mvn spring-boot:run or java -jar target/cloud-compliance-mcp-0.1.0.jar. Add the server configuration to your Claude Desktop config file, restart Claude, and use conversational queries like “Check SOC2 compliance for storage resources.”

Key features of MCP Cloud Compliance

Supports SOC2, CIS, and NIST compliance frameworks
Lists S3 buckets with detailed metadata by region
Checks S3 bucket compliance against multiple standards in real time
Filters resources by AWS region
Provides a conversational interface for reports and queries

Use cases of MCP Cloud Compliance

Generate SOC2 Type II compliance reports for AWS infrastructure
Check NIST 800-53 compliance status across S3 buckets
Identify all non-compliant S3 resources in a production environment
List S3 buckets by region with creation dates and metadata
Produce a compliance summary with high-severity findings

Frequently asked questions

Which compliance standards are supported?

SOC2, CIS (Center for Internet Security Benchmarks), and NIST (NIST Cybersecurity Framework).

What AWS resources can it audit?

Currently only S3 buckets. Support for compute, database, and network resources is planned for future releases.

What are the prerequisites?

Java 21 or higher, Maven 3.6+, and configured AWS credentials.

How do I connect it to Claude Desktop?

Add the server configuration with the path to the built JAR to your Claude Desktop `claude_desktop_config.json` file, then restart Claude.

How does it authenticate with AWS?

It relies on standard AWS credentials configured on the machine where the server runs (e.g., via `~/.aws/credentials` or environment variables).

Comments

More Other MCP servers

Yuppsy

Yuppsy MCP: build and publish real estate websites from your AI assistant. Yuppsy lets your AI assistant create live websites for real estate agents and individual property listings. You don't need a designer or any code

DeepMark

DeepMark helps teachers deliver rapid, consistent marking with meaningful feedback for every student — in a fraction of the time. What once took a week, now takes one free period.