MCP Cloud Compliance

@uprightsleepy

Basic information

About MCP Cloud Compliance

Conversational cloud security compliance auditing. MCP server enabling natural language queries about AWS security posture via Claude and other AI assistants.

#aws #nist #security-audit #spring-boot #mcp #compliance #cloud-security#soc2#cis-benchmark#model-context-protocol

MCP Cloud Compliance config

No standard config provided

This server doesn't expose a parseable MCP config block in its README. See the repository for install instructions.

Repository

MCP Cloud Compliance tools

Verify server is running

Get supported compliance frameworks

Get available resource types for compliance checking

List S3 buckets with detailed metadata by region

Check compliance status against specific standards

Overview

What is MCP Cloud Compliance?

MCP Cloud Compliance is a Model Context Protocol (MCP) server for AWS cloud compliance auditing. It automates compliance reporting for SOC2, NIST, and CIS frameworks, currently focusing on S3 bucket checks, with plans to expand to full AWS service coverage. It is designed for cloud engineers, security auditors, and compliance teams who want to run conversational compliance checks via Claude.

How to use MCP Cloud Compliance?

Install Java 21+, Maven 3.6+, and configure AWS credentials. Clone the repository, build with mvn clean package, then run with mvn spring-boot:run or java -jar target/cloud-compliance-mcp-0.1.0.jar. Add the server configuration to your Claude Desktop config file, restart Claude, and use conversational queries like “Check SOC2 compliance for storage resources.”

Key features of MCP Cloud Compliance

Supports SOC2, CIS, and NIST compliance frameworks
Lists S3 buckets with detailed metadata by region
Checks S3 bucket compliance against multiple standards in real time
Filters resources by AWS region
Provides a conversational interface for reports and queries

Use cases of MCP Cloud Compliance

Generate SOC2 Type II compliance reports for AWS infrastructure
Check NIST 800-53 compliance status across S3 buckets
Identify all non-compliant S3 resources in a production environment
List S3 buckets by region with creation dates and metadata
Produce a compliance summary with high-severity findings

Frequently asked questions

Which compliance standards are supported?

SOC2, CIS (Center for Internet Security Benchmarks), and NIST (NIST Cybersecurity Framework).

What AWS resources can it audit?

Currently only S3 buckets. Support for compute, database, and network resources is planned for future releases.

What are the prerequisites?

Java 21 or higher, Maven 3.6+, and configured AWS credentials.

How do I connect it to Claude Desktop?

Add the server configuration with the path to the built JAR to your Claude Desktop `claude_desktop_config.json` file, then restart Claude.

How does it authenticate with AWS?

It relies on standard AWS credentials configured on the machine where the server runs (e.g., via `~/.aws/credentials` or environment variables).

Comments

More Other MCP servers

Senso MCP for Joomla

sensomedia

Senso MCP turns a Joomla 5 or 6 site into a remote MCP server. It runs inside Joomla itself (no extra server, no Node.js bridge) and is secured with OAuth 2.1 and Joomla's own ACL. The free pack lets an AI assistant crea

🚀 Model Context Protocol (MCP) Curriculum for Beginners

microsoft

This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and Python. Designed for developers, it focuses on practical techniques for building modular, scalable,

16.7K