audytx is a context-aware Terraform security scanner for AWS. It reviews every pull request, suppresses false positives with cross-resource reasoning, flags cost waste, and runs as a hosted MCP server for coding agents.
This listing identifies a third-party MCP server. MCPBundles is not affiliated with, sponsored by, or endorsed by the service or its operator unless stated on this page.
This server may ask you to sign in when your AI client connects.
Last probed Nov 3, 2026 · audytx.com
10tools discovered
For AI agents — MCPBundles Directory API
For MCP client apps (human connect):
MCP connect URL: https://audytx.com/mcp
Skill page: https://www.mcpbundles.com/skills/audytx-mcp-2f4f2e0658
Explore capabilities (10)
read 8
write 2
Scan
3
Autofix
2
Dry Run Autofix
2
Other capabilities
3
Scan AWS Terraform
read
scan_terraform
Scan AWS Terraform files for security misconfigurations, IAM privilege-escalation paths, cross-resource attack paths, and cost risks. Returns findings with file/line evidence, severity, remediation and fix snippets — plus, in `context_suppressed`, the findings audytx's context layer suppressed as false positives, each with its rationale, and separately, in `pragma_suppressed`, the findings an inline `# audytx:ignore=RULE_ID reason="…" expires=YYYY-MM-DD` comment suppressed, each with the author'
Description may be truncated on the public preview.
Scan AWS Terraform — Scan AWS Terraform files for security misconfigurations, IAM privilege-escalation paths, cross-resource attack paths, and cost risks. Returns findings with file/line evidence, severity, remediation and fix snippets — plus, in `context_suppressed`, the findings audytx's context layer suppressed as false positives, each with its rationale, and separately, in `pragma_suppressed`, the findings an inline `# audytx:ignore=RULE_ID reason="…" expires=YYYY-MM-DD` comment suppressed, each with the author'
Scan AWS CloudFormation — Scan AWS CloudFormation templates (JSON or YAML, including SAM templates and whole CDK cloud assemblies — cdk.out manifests welcome) for security misconfigurations, IAM privilege-escalation paths, cross-resource attack paths, and cost risks. Findings reuse the SAME AWS_* rule ids as scan_terraform — the engine normalizes CloudFormation into the same Terraform-shaped resource vocabulary before evaluating, so explain_finding and your existing rule-id triage both just work. Returns findings with fi
Scan an AWS IaC workspace — Scan one complete workspace containing Terraform, CloudFormation, or both as ONE parent operation and one quota unit. Pass the globally capped applicable file set in one `files` array: Terraform configuration and automatic variables, named -var-file bodies selected through `terraform_var_files` in command-line order, confirmed CloudFormation, JSON files exactly referenced by Terraform jsondecode(file(...)), and valid CDK cloud-assembly controls. Omit unselected named variable files. audytx deriv
Autofix AWS Terraform — Apply audytx's sound one-click fixes to the given Terraform files and re-scan, looping until no auto-applicable findings remain (max 3 passes). Preserve selected named -var-file order through `terraform_var_files` and omit unselected named files; the same provenance is retained on every fix pass. Only precisely line-anchored fixes are applied — the same soundness bar as GitHub one-click suggestions, never a corrupting edit. Returns the fixed file contents, which findings were fixed, and the find
Autofix AWS CloudFormation — Apply audytx's sound one-click fixes to the given CloudFormation templates and re-scan, looping until no auto-applicable findings remain (max 3 passes). Only precisely line-anchored single-line fixes on authored YAML property lines are applied — a value behind an intrinsic (!Ref/!If/Fn::), an unresolved Condition, SAM or CDK synthesis, or a block scalar is never edited, the same never-corrupting bar as GitHub one-click suggestions. Findings on JSON templates carry no line spans and are reported
Get your MCP into directories
A working endpoint is step one. Directory coverage is the coordinated launch across ChatGPT, Claude, Cursor, the MCP Registry, and community indexes.
audytx is a context-aware Terraform security scanner for AWS. It reviews every pull request, suppresses false positives with cross-resource reasoning, flags cost waste, and runs as a hosted MCP server for coding agents.
How do I connect audytx to my AI agent?
Use the MCP endpoint listed on this page in your MCP client configuration. One-click install pills support Claude, Cursor, VS Code, and other hosts. Copy the remote MCP URL if your client needs a manual entry.
How many tools does audytx provide?
Operate this server?
Request removal if you do not want audytx listed here, or claim the listing if you want to manage it on MCPBundles.
Operate audytx?
This server appears in the MCPBundles directory. Verify you operate it to take over the listing — name, description, logo, contact email, and skill content. We email a 6-digit code to a maintainer address your server publishes in /.well-known/security.txt or /.well-known/mcpbundles.json. Free, takes about a minute.
MCPBundles publishes this directory for MCP discovery. Except where we host or operate an offering, third-party services run under their own terms. Product and company names on this page are used in a descriptive, identifying way (including under nominative fair use where applicable); they remain the property of their owners. Nothing here grants you rights in those marks, and nothing here is an offer to sell a third party's services. Terms · Request removal
More in security
Other MCP servers in this category from the directory index
Preview Autofix Changes — Preview what autofix_terraform would do — returns a unified diff per file showing the precise line changes, without modifying any content. Preserve selected named -var-file order through `terraform_var_files` and omit unselected named files so the preview uses the same values as Terraform. Use this before autofix_terraform to review and confirm the changes. Optionally pass `only` (a list of rule ids) to preview just those fixes, so the diff you review is the diff you will apply. Optionally pass
Preview CloudFormation Autofix Changes — Preview what autofix_cloudformation would do — returns a unified diff per template showing the precise line changes, without modifying any content. Use this before autofix_cloudformation to review and confirm the changes. Only authored YAML property-line fixes are previewed; a value behind an intrinsic, unresolved Condition, SAM/CDK synthesis, or block scalar is never edited, and JSON templates and CDK-synthesized output produce no preview edits. Optionally pass `only` (a list of rule ids) to pr
Explain a Finding — Return structured explanation and remediation guidance for a rule ID (e.g. 'AWS_IAM_020'). Useful when scan_terraform returns a finding and you want the full context: severity, what the rule checks, why it matters, and how to fix it. Catalog rule ids return the full catalog entry. Ids minted by the engine's cross-resource analysis layer (e.g. ATTACK_PATH_*, AWS_XREF_*) have no catalog entry — for those the response says so and points back at the finding itself, which already carries the complete
Get Cross-Resource Context Graph — Return the full relationship graph audytx built for the given Terraform or CloudFormation files (schema v0.3). For Terraform, preserve selected named -var-file order through `terraform_var_files` and omit unselected named files. Nodes cover all block kinds — resource, data source, ephemeral resource (Terraform 1.10), module call, variable, local, output, provider. Edges carry their Terraform-module or CloudFormation-template scope plus kind tags: 'reference' (attribute-level syntactic reference
Estimate AWS Terraform cost savings — Estimate monthly and annual AWS cost-savings opportunities in the given Terraform: storage tiering (gp2→gp3 on EBS/RDS, S3 lifecycle + intelligent-tiering), EC2 right-sizing on non-prod, NAT Gateway vs VPC endpoints, over-provisioned/non-prod RDS (multi-AZ, long backup retention) and DynamoDB, and missing cost-allocation tags. Returns a dollar savings range per finding plus a total, with Terraform remediation. NOTE: estimates use us-east-1 on-demand list pricing (before Savings Plans / Reserved
MCPBundles probed 10 tools on the live server. The tool list on this page reflects what was discovered at the last refresh — connect your client to see the full set available to your session.
What authentication does audytx require?
audytx may require signing in to the provider before tools can run. Connect through MCPBundles or your MCP client and complete any provider login when prompted.
Don't want this listed?
Request removal from the MCPBundles directory. We stop publishing this listing on mcpbundles.com.
MCPBundles is an independent platform built on the open Model Context Protocol standard. MCPBundles is not affiliated with, sponsored by, or endorsed by Anthropic PBC.