What is aws-audit-scanner?
aws-audit-scanner is a MCP server by whatsinmycloud that read-only AWS audit scanner: public S3 buckets, root and user MFA gaps, unused access keys, world-open security groups, CloudTrail gaps, and forgotten EC2/EBS/RDS spend across every. It is listed under Security and has no public popularity data yet.
| Type | Mcp server |
|---|---|
| Author | whatsinmycloud |
| Repository | whatsinmycloud/aws-audit-scanner |
| Popularity | no public popularity data yet |
| Category | Security |
| Security | Low risk (80/100) |
| Rank | #4,302 of 4,418 MCP servers; #249 in Security |
| License | MIT |
| Last commit | 2026-09-21 |
| Runs | Locally |
| Language | TypeScript |
| Platforms | macOS, Linux |
Is aws-audit-scanner safe to install?
aws-audit-scanner scores 80/100 on the MCPMods security check: Low risk. Things to review: can take actions such as send, write or deploy. It passed 3 of 6 checks.
MCP server results come from listing signals: who publishes it, where your data goes and what it can do. The code itself is not scanned yet.
| Check | Result |
|---|---|
| Community-built server | Note |
| Runs on your machine only | Pass |
| Needs an API key or account login | Note |
| Can take actions such as send, write or deploy | Review |
| No code execution | Pass |
| Source on GitHub | Pass |
How do I install aws-audit-scanner?
- Find the launch command. The README says how the server starts (npx, uvx, docker or a remote URL) and which API keys it needs.
https://github.com/whatsinmycloud/aws-audit-scanner
- Add it to Claude Code. Replace the part after -- with the command from the README. Remote servers use --transport http with a URL.
claude mcp add aws-audit-scanner -- <command from README> claude mcp add --transport http aws-audit-scanner <server-url>
- Check it connected. This lists your MCP servers and their status.
claude mcp list
Or ask Claude to set it up
Paste this into Claude Code and it installs aws-audit-scanner for you:
Add the "aws-audit-scanner" MCP server from https://github.com/whatsinmycloud/aws-audit-scanner to Claude Code. Read its README for the launch command and any API keys I need, run claude mcp add, then check that it connects.