Secure ANY Cloud at AI Speed. World's most widely adopted cloud security platform | Prowler
This listing identifies a third-party MCP server. MCPBundles is not affiliated with, sponsored by, or endorsed by the service or its operator unless stated on this page.
This server may ask you to sign in when your AI client connects.
Last probed Nov 3, 2026 · mcp.prowler.com
100tools discovered
For AI agents — MCPBundles Directory API
For MCP client apps (human connect):
MCP connect URL: https://mcp.prowler.com/mcp
Skill page: https://www.mcpbundles.com/skills/prowler-mcp-28c147a76a
Explore capabilities (100)
other 25
Showing 25 of 100
Showing 25 of 100 tools from the public preview. Connect the server to inspect the full live tool list.
Prowler25
Prowler Hub List Checks
other
prowler_hub_list_checks
List security Prowler Checks with filtering capabilities.
IMPORTANT: This tool returns LIGHTWEIGHT check data. Use this for fast browsing and filtering.
For complete details including risk, remediation guidance, and categories use `prowler_hub_get_check_details`.
IMPORTANT: An unfiltered request returns 1000+ checks. Use filters to narrow results.
Returns:
{
"count": N,
"checks": [
{
"id": "check_id",
"provider": "provider_id",
Prowler Hub List Checks — List security Prowler Checks with filtering capabilities.
IMPORTANT: This tool returns LIGHTWEIGHT check data. Use this for fast browsing and filtering.
For complete details including risk, remediation guidance, and categories use `prowler_hub_get_check_details`.
IMPORTANT: An unfiltered request returns 1000+ checks. Use filters to narrow results.
Returns:
{
"count": N,
"checks": [
{
"id": "check_id",
"provider": "provider_id",
Prowler Hub Semantic Search Checks — Search for security checks using free-text search across all metadata.
IMPORTANT: This tool returns LIGHTWEIGHT check data. Use this for discovering checks by topic.
For complete details including risk, remediation guidance, and categories use `prowler_hub_get_check_details`.
Searches across check titles, descriptions, risk statements, remediation guidance,
and other text fields. Use this when you don't know the exact check ID or want to
explore checks related to a topic.
Returns:
{
Prowler Hub Get Check Details — Retrieve comprehensive details about a specific security check by its ID.
IMPORTANT: This tool returns COMPLETE check details.
Use this after finding a specific check ID, you can get it via `prowler_hub_list_checks` or `prowler_hub_semantic_search_checks`.
Returns:
{
"id": "string",
"title": "string",
"description": "string",
"provider": "string",
"service": "string",
"severity": "low",
"risk": "string",
"reference": [
"string"
Prowler Hub Get Check Code — Fetch the Python implementation code of a Prowler security check.
The check code shows exactly how Prowler evaluates resources for security issues.
Use this to understand check logic, customize checks, or create new ones.
Returns:
{
"content": "Python source code of the check implementation"
}
Prowler Hub Get Check Fixer — Fetch the auto-remediation (fixer) code for a Prowler security check.
IMPORTANT: Not all checks have fixers. A check with no auto-remediation code fails
with a message saying so - this is normal for many checks and not a problem to
report or retry.
Fixer code provides automated remediation that can fix security issues detected by checks.
Use this to understand how to programmatically remediate findings.
Returns:
{
"content": "Python source code of the auto-remediation implementati
Get your MCP into directories
A working endpoint is step one. Directory coverage is the coordinated launch across ChatGPT, Claude, Cursor, the MCP Registry, and community indexes.
What is the Secure ANY Cloud at AI Speed | Prowler MCP server?
Secure ANY Cloud at AI Speed. World's most widely adopted cloud security platform | Prowler
How do I connect Secure ANY Cloud at AI Speed | Prowler to my AI agent?
Use the MCP endpoint listed on this page in your MCP client configuration. One-click install pills support Claude, Cursor, VS Code, and other hosts. Copy the remote MCP URL if your client needs a manual entry.
How many tools does Secure ANY Cloud at AI Speed | Prowler provide?
Operate this server?
Request removal if you do not want Secure ANY Cloud at AI Speed | Prowler listed here, or claim the listing if you want to manage it on MCPBundles.
Operate Secure ANY Cloud at AI Speed | Prowler?
This server appears in the MCPBundles directory. Verify you operate it to take over the listing — name, description, logo, contact email, and skill content. We email a 6-digit code to a maintainer address your server publishes in /.well-known/security.txt or /.well-known/mcpbundles.json. Free, takes about a minute.
MCPBundles publishes this directory for MCP discovery. Except where we host or operate an offering, third-party services run under their own terms. Product and company names on this page are used in a descriptive, identifying way (including under nominative fair use where applicable); they remain the property of their owners. Nothing here grants you rights in those marks, and nothing here is an offer to sell a third party's services. Terms · Request removal
More in developer tools
Other MCP servers in this category from the directory index
Prowler Hub List Compliances — List compliance frameworks supported by Prowler.
IMPORTANT: This tool returns LIGHTWEIGHT compliance data. Use this for fast browsing and filtering.
For complete details including requirements use `prowler_hub_get_compliance_details`.
Compliance frameworks define sets of security requirements that checks map to.
Use this to discover available frameworks for compliance reporting.
WARNING: An unfiltered request may return a large number of frameworks. Use the provider with not more than 3 diffe
Prowler Hub Semantic Search Compliances — Search for compliance frameworks using free-text search.
IMPORTANT: This tool returns LIGHTWEIGHT compliance data. Use this for discovering frameworks by topic.
For complete details including requirements use `prowler_hub_get_compliance_details`.
Searches across framework names, descriptions, and metadata. Use this when you
want to find frameworks related to a specific regulation, standard, or topic.
Returns:
{
"count": N,
"compliances": [
{
"id
Prowler Hub Get Compliance Details — Retrieve comprehensive details about a specific compliance framework by its ID.
IMPORTANT: This tool returns COMPLETE compliance details.
Use this after finding a specific compliance via `prowler_hub_list_compliances` or `prowler_hub_semantic_search_compliances`.
Returns:
{
"id": "string",
"name": "string",
"framework": "string",
"provider": "string",
"version": "string",
"description": "string",
"total_checks": int,
"total_re
Prowler Hub List Providers — List all providers supported by Prowler.
This is a reference tool that shows available providers (aws, azure, gcp, kubernetes, etc.)
that can be scanned for finding security issues.
Use the provider IDs from this tool as filter values in other tools.
Returns:
{
"count": N,
"providers": [
{
"id": "aws",
"name": "Amazon Web Services"
},
{
"id": "azure",
"name": "Microsoft Azur
Prowler Hub Get Provider Services — Get the list of services IDs available for a specific cloud provider.
Services represent the different resources and capabilities that Prowler can scan
within a provider (e.g., s3, ec2, iam for AWS or keyvault, storage for Azure).
Use service IDs from this tool as filter values in other tools.
Returns:
{
"provider_id": "aws",
"provider_name": "Amazon Web Services",
"count": N,
"services": ["s3", "ec2", "iam", "rds", "lambda", ...]
}
Prowler Get Attack Paths Cartography Schema — Retrieve the Cartography graph schema for a completed attack paths scan.
This tool fetches the full Cartography schema (node labels, relationships,
and properties) so the LLM can write accurate custom openCypher queries
for attack paths analysis.
Two-step flow:
1. Calls the Prowler API to get schema metadata (provider, version, URLs)
2. Fetches the raw Cartography schema markdown from GitHub
Returns:
- id: Schema resource identifier
- provider: Cloud provider type
- cartography_version: Schem
Prowler List Attack Paths Queries — Discover available Attack Paths queries for a completed scan.
IMPORTANT: The scan must be in 'completed' state to list queries.
Attack Paths covers AWS providers only, so only an AWS provider has an
Attack Paths scan to name here, and every query is an AWS one.
Each query includes:
- id: Query identifier to use with run_attack_paths_query
- name: Human-readable name describing what the query finds
- description: Detailed explanation of the security analysis
- parameters: List of required param
Prowler List Attack Paths Scans — List Attack Paths scans with filtering capabilities.
Default behavior:
- Returns COMPLETED scans (ready for attack paths analysis)
- Returns 50 scans per page
- Shows the latest scan per provider
Each scan includes:
- Core identification: id (UUID for get/query operations)
- Execution context: state, progress
- Provider info: provider_id, provider_alias, provider_type, provider_uid
Workflow:
1. Use this tool to find completed attack paths scans
2. Use prowler_list_attack_paths_queries to see
Prowler Run Attack Paths Query — Execute an Attack Paths query and analyze the results.
IMPORTANT: This is the PRIMARY tool for attack paths analysis.
It executes a Cypher query against the Neo4j graph database and returns
the attack path graph with security findings.
Prerequisites:
- Scan must be in 'completed' state
- query_id must be valid for the scan's provider type
- All required parameters must be provided
Returns:
- nodes: Cloud resources, findings, and virtual nodes in the attack path
- relationships: Connections be
Prowler Get Compliance Framework State Details — Get detailed requirement-level breakdown for a specific compliance framework.
IMPORTANT: This tool returns DETAILED requirement information for a single compliance framework,
focusing on FAILED requirements and their associated FAILED finding IDs.
Use this after prowler_get_compliance_overview to drill down into specific frameworks.
The markdown report includes:
1. Framework Summary:
- Compliance ID and scan ID used
- Overall pass/fail/manual counts
2. Failed Requirements Breakdown:
Prowler Get Compliance Overview — Get high-level compliance overview across all frameworks for a specific scan.
This tool provides a HIGH-LEVEL OVERVIEW of compliance status across all frameworks.
Use this when you need to understand overall compliance posture before drilling into
specific framework details.
You have two options to specify the scan context:
1. Provide a specific scan_id to get compliance data for that scan.
2. Provide a provider_id to get compliance data from the latest completed scan for that provider.
The m
Prowler Get Finding Group Details — Get complete details for one finding group by exact check ID.
Uses `filter[check_id]` exact matching against latest data by default,
or historical data when dates are provided. Fully muted groups are
included by default so accepted risk does not look like a missing group.
Prowler List Finding Group Resources — List resources affected by a finding group.
Without dates this uses `/finding-groups/latest/{check_id}/resources`.
With `date_from` or `date_to`, this uses
`/finding-groups/{check_id}/resources` with a maximum 2-day date window.
Default behavior returns FAIL, unmuted resources so the result is
actionable. Set `include_muted=True` to include accepted/suppressed
resources too. Each row includes nested resource and provider data plus
`finding_id`. Use `prowler_get_finding_details(finding_id)` to
Prowler List Finding Groups — List finding groups aggregated by check ID.
Default behavior returns the latest non-muted FAIL groups for fast triage.
Without dates this uses `/finding-groups/latest`. With `date_from` or
`date_to`, this uses `/finding-groups` with a maximum 2-day date window.
Use this tool to find noisy or high-impact checks, then call
prowler_get_finding_group_details for complete counters or
prowler_list_finding_group_resources to drill into affected resources.
Prowler Get Finding Details — Retrieve comprehensive details about a specific security finding by its ID.
IMPORTANT: This tool returns COMPLETE finding details.
Use this after finding a specific finding via prowler_search_security_findings
This tool provides ALL information that prowler_search_security_findings returns PLUS:
1. Check Metadata (information about the check script that generated the finding):
- title: Human-readable phrase used to summarize the check
- description: Detailed explanation of what the chec
Prowler Get Findings Overview — Get aggregate statistics and trends about security findings as a markdown report.
This tool provides a HIGH-LEVEL OVERVIEW without retrieving individual findings. Use this when you
need to understand the overall security posture, trends, or remediation progress across all findings.
The markdown report includes:
1. Summary Statistics:
- Total number of findings
- Failed checks (security issues) with percentage
- Passed checks (no issues) with percentage
- Muted findings (user-suppr
Prowler Search Security Findings — Search and filter security findings across all cloud providers with rich filtering capabilities.
IMPORTANT: This tool returns LIGHTWEIGHT findings. Use this for fast searching and filtering across many findings.
For complete details use prowler_get_finding_details on specific findings.
Default behavior:
- Returns latest findings from most recent scans (no date parameters needed)
- Filters to FAIL status only (security issues found)
- Returns 50 results per page
Date filtering:
- Without dates
Prowler Create Amazon S3 Integration — Create an Amazon S3 integration to export scan outputs to an S3 bucket.
After every scan of an attached provider, Prowler uploads the generated reports to
's3://{bucket_name}/{output_directory}/'.
IMPORTANT: The connection is checked right after creation, and the result is part of
the response. The check writes and deletes a small test object in the bucket, so the
credentials need s3:PutObject, s3:ListBucket and s3:DeleteObject on it.
Default behavior:
- The integration is created enabled
- A
Prowler Create Aws Security Hub Integration — Create an AWS Security Hub integration to send findings to Security Hub in ASFF format.
After every scan of the attached provider, Prowler pushes its findings to Security Hub
in every region where the Prowler partner integration is enabled.
IMPORTANT: The Prowler integration must be enabled in AWS Security Hub beforehand, in
each region where findings should land. The connection check performed right after
creation is what discovers those regions and fills 'enabled_regions'.
Default behavior:
Prowler Create Jira Integration — Create a Jira integration to open Jira work items from Prowler findings.
Unlike the other integration types, Jira is tenant-wide: it is not attached to any
provider and applies to every finding the role can see.
IMPORTANT: Jira integrations do not send anything automatically. Work items are only
created on demand with prowler_send_findings_to_jira.
IMPORTANT: The connection is checked right after creation, and that check is what
discovers the available Jira projects. If 'connected' comes back
Showing the first 25 tools — full list and schemas: Directory API.
MCPBundles probed 100 tools on the live server. The tool list on this page reflects what was discovered at the last refresh — connect your client to see the full set available to your session.
What authentication does Secure ANY Cloud at AI Speed | Prowler require?
Secure ANY Cloud at AI Speed | Prowler may require signing in to the provider before tools can run. Connect through MCPBundles or your MCP client and complete any provider login when prompted.
Don't want this listed?
Request removal from the MCPBundles directory. We stop publishing this listing on mcpbundles.com.
MCPBundles is an independent platform built on the open Model Context Protocol standard. MCPBundles is not affiliated with, sponsored by, or endorsed by Anthropic PBC.