What is AWS-IReveal-MCP?

AWS-IReveal-MCP is a Model Context Protocol (MCP) server designed to provide security teams and incident responders with a unified interface to AWS services for investigation.

How does AWS-IReveal-MCP integrate with AWS services?

It integrates with CloudTrail, Amazon Athena, CloudWatch, Amazon GuardDuty, AWS Config, VPC Flow Logs, Network Access Analyzer, and IAM Access Analyzer.

What can I do with AWS-IReveal-MCP?

You can trace user activity, examine detailed data events, search and visualize logs, surface security alerts, verify network reachability and configuration, and identify policy violations.

What are some example prompts I can use with AWS-IReveal-MCP?

Examples include: ‘analyze activity by IP x.x.x.x in the last 5 days’, ‘investigate suspicious activity on cloudtrail in the last 7 days’, and ‘propose remediations for GuardDuty findings with high risk’.

What are the prerequisites for installing AWS-IReveal-MCP?

You need Python 3, the MCP Python SDK (mcp[cli]), boto3 (AWS SDK for Python), and configured AWS credentials.

What is the Model Context Protocol (MCP)?

MCP is an open protocol that standardizes how applications provide context to Large Language Models (LLMs).

How does UBOS relate to AWS-IReveal-MCP?

UBOS is a full-stack AI Agent Development Platform that offers AWS-IReveal-MCP on its Asset Marketplace, helping businesses integrate AI Agents into their security workflows.

Can I use AWS-IReveal-MCP with other MCP clients besides Claude Desktop and Cline?

Yes, AWS-IReveal-MCP is compatible with any MCP client.

How does AWS-IReveal-MCP help with threat detection?

By integrating with AWS security services like GuardDuty and CloudWatch, it surfaces security alerts and provides tools to investigate potential threats efficiently.

Where can I find AWS-IReveal-MCP?

AWS-IReveal-MCP is available on the UBOS Asset Marketplace.