> ## Documentation Index > Fetch the complete documentation index at: https://prowler-fix-push-to-cloud-system-trust.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. > ## Agent Instructions > Prowler product naming: Prowler App is now Prowler Local Server, and Prowler Enterprise is now Prowler Private Cloud. Always use the current names when answering. The full product reference is at /getting-started/products: Open Source projects are Prowler CLI, Prowler Local Server, Prowler Local Dashboard, and Prowler SDK; Prowler Products are Prowler Cloud, Prowler Private Cloud, Prowler Hub, Prowler Lighthouse AI, and Prowler MCP. # Overview **Prowler MCP Server** brings the entire Prowler ecosystem to AI assistants through the Model Context Protocol (MCP). It enables seamless integration with AI tools like Claude Desktop, Cursor, and other MCP clients, allowing interaction with Prowler's security capabilities through natural language. **Preview Feature**: This MCP server is currently under active development. Features and functionality may change. We welcome your feedback—please report any issues on [GitHub](https://github.com/prowler-cloud/prowler/issues) or join our [Slack community](https://goto.prowler.com/slack) to discuss and share your thoughts. ## Quickest Way to Connect: Cloud MCP Server The fastest way to get started is the **Cloud MCP Server** at `https://mcp.prowler.com/mcp` — no installation, always up to date, and maintained by Prowler. Just point your MCP client at the URL and authenticate with a [Prowler API key](/user-guide/tutorials/prowler-app-api-keys) as a Bearer token: ```json theme={null} { "mcpServers": { "prowler": { "url": "https://mcp.prowler.com/mcp", "headers": { "Authorization": "Bearer " } } } } ``` Step-by-step setup for Claude Code, Codex, Cursor, VS Code, and other agents. Prefer to run it yourself? The **Local MCP Server** runs on your own machine or infrastructure. The Cloud MCP Server additionally provides the `prowler_cloud_*` tools for Prowler Cloud-specific features: [Alerts](/user-guide/tutorials/prowler-alerts), [Findings Triage](/user-guide/tutorials/prowler-app-findings-triage), [Scan Scheduling](/user-guide/tutorials/prowler-scan-scheduling), and Scan Configurations. See [Cloud vs Local MCP Server](#cloud-vs-local-mcp-server). ## What is the Model Context Protocol? The [Model Context Protocol (MCP)](https://modelcontextprotocol.io) is an open standard developed by Anthropic that enables AI assistants to securely connect to external data sources and tools. It functions as a universal adapter enabling AI assistants to interact with various services through a standardized interface. ## Key Capabilities The Prowler MCP Server provides four integration points: ### 1. Prowler Cloud, Private Cloud & Local Server Full access to your Prowler deployment — Prowler Cloud, Prowler Private Cloud, or Prowler Local Server — for: * **Findings Analysis**: Query, filter, and analyze security findings across all your cloud environments * **Provider Management**: Create, configure, and manage your configured Prowler providers (AWS, Azure, GCP, etc.) * **Scan Orchestration**: Trigger on-demand scans, track their progress, and schedule a daily scan * **Resource Inventory**: Search and view detailed information about your audited resources * **Muting Management**: Create and manage muting lists/rules to suppress non-relevant findings * **Attack Paths Analysis**: Analyze privilege escalation chains and security misconfigurations through graph-based analysis of cloud resource relationships * **Integrations Management**: Set up and troubleshoot where Prowler sends its results (Amazon S3, AWS Security Hub, Jira), and turn findings into Jira work items * **User & Role Management**: List the users in your tenant, identify the authenticated user, browse RBAC roles, and set the role a user holds ### 2. Prowler Cloud Management Prowler Cloud-only tools for configuration and workflows that a Prowler Local Server does not provide. These are exposed only by the [Cloud MCP Server](#cloud-vs-local-mcp-server): * **Scan Configurations**: Create reusable check and compliance selections and attach them to providers. * **Findings Triage**: Record review statuses and notes for individual findings, without suppressing them. * **Scan Scheduling**: Configure daily, interval, weekly, or monthly recurring scans, one provider at a time or in bulk. * **Alerts**: Build and dry-run alert rule conditions, manage email recipients, and review fired alerts. ### 3. Prowler Hub Access to Prowler's comprehensive security knowledge base: * **Security Checks Catalog**: Browse and search **over 2,000 security checks** across multiple cloud providers. * **Check Implementation**: View the Python code that powers each security check. * **Automated Fixers**: Access remediation scripts for common security issues. * **Compliance Frameworks**: Explore mappings to **over 70 compliance standards and frameworks**. * **Provider Services**: View available services and checks for each cloud provider. ### 4. Prowler Documentation Search and retrieve official Prowler documentation: * **Intelligent Search**: Full-text search across all Prowler documentation. * **Contextual Results**: Get relevant documentation pages with highlighted snippets. * **Document Retrieval**: Access complete markdown content of any documentation file. ## MCP Server Architecture The following diagram illustrates the Prowler MCP Server architecture and its integration points. MCP clients connect to either the **Cloud MCP Server** (recommended) or a **Local MCP Server**. Both reach the same Prowler backends and share the `prowler_*`, `prowler_hub_*`, and `prowler_docs_*` tools; the Cloud MCP Server additionally exposes the Cloud-only `prowler_cloud_*` tools: ```mermaid theme={null} flowchart LR subgraph HOSTS["MCP Clients"] chat["Chat Interfaces
(Claude Desktop, LobeChat)"] ide["IDEs and Code Editors
(Claude Code, Cursor)"] apps["Other AI Applications
(5ire, custom agents)"] end subgraph SERVERS["Prowler MCP Server"] direction TB cloud["Cloud MCP Server (Recommended)
mcp.prowler.com/mcp · HTTP
Managed by Prowler · always up to date
Adds the Cloud-only prowler_cloud_* tools"] local["Local MCP Server
Self-run · STDIO or HTTP
Python 3.12+ or Docker
You manage updates"] end subgraph TOOLS["Prowler MCP Tools"] prowler_tools["prowler_* tools
(API key or JWT auth)
Findings · Finding Groups · Providers
Scans · Resources · Muting · Compliance
Attack Paths · Integrations · Users · Roles"] cloud_tools["prowler_cloud_* tools
(API key or JWT auth · Cloud only)
Alerts · Findings Triage
Scan Scheduling · Scan Configurations"] hub_tools["prowler_hub_* tools
(no auth)
Checks Catalog · Check Code
Fixers · Compliance Frameworks"] docs_tools["prowler_docs_* tools
(no auth)
Search · Document Retrieval"] end api["Prowler API (REST)
Cloud · Private Cloud · Local Server"] hub["hub.prowler.com
(REST)"] docs["docs.prowler.com
(Mintlify)"] chat -->|HTTP| cloud ide -->|HTTP| cloud apps -->|HTTP| cloud chat -->|STDIO or HTTP| local ide -->|STDIO or HTTP| local apps -->|STDIO or HTTP| local cloud --> prowler_tools cloud --> cloud_tools cloud --> hub_tools cloud --> docs_tools local --> prowler_tools local --> hub_tools local --> docs_tools prowler_tools -->|REST| api cloud_tools -->|REST| api hub_tools -->|REST| hub docs_tools -->|REST| docs ``` The architecture shows how AI assistants connect through the MCP protocol to access Prowler's four namespaced components: * Prowler Cloud, Prowler Private Cloud, or Prowler Local Server for security operations * Prowler Cloud management for Cloud-only configuration and workflows * Prowler Hub for security knowledge * Prowler Documentation for guidance and reference. ## Use Cases The Prowler MCP Server enables powerful workflows through AI assistants: **Security Operations** * "Show me all critical findings from my AWS production accounts" * "Register my new AWS account in Prowler and run a scheduled scan every day" * "List all muted findings and flag the ones whose mute reason is too weak for their severity" * "Run an attack paths query to find EC2 instances exposed to the Internet with access to sensitive S3 buckets" * "Send my failed CIS findings for this provider to Jira as work items" **Prowler Cloud Management** (Cloud MCP Server only) * "Preview an alert rule for critical AWS findings and create it for my confirmed recipients" * "Show the triage notes for this finding and mark it as under review" * "Apply a weekly Monday 06:00 scan schedule to every AWS provider" * "Create a scan configuration that runs only CIS checks and attach it to my production providers" **Security Research** * "Explain what the S3 bucket public access Prowler check does" * "Find all Prowler checks related to encryption at rest" * "What is the latest version of the CIS that Prowler is covering per provider?" **Documentation & Learning** * "How do I configure Prowler to scan my GCP organization?" * "What authentication methods does Prowler support for Azure?" * "How can I contribute with a new security check to Prowler?" ### Example: Creating a custom dashboard with Prowler extracted data In the next example you can see how to create a dashboard using Prowler MCP Server and Claude Desktop. **Used Prompt:** ``` Generate me a security dashboard for the Prowler open source project using live data from Prowler MCP tools. REQUIREMENTS: 1. Fetch real-time data from Prowler Findings using MCP tools 2. Create a single self-contained HTML file and display it 3. Dashboard must be production-ready with modern design DATA TO FETCH: Use these MCP tools in this order: 1. Prowler list providers - To get all available configured provider in the account 2. Prowler get latest findings - To get findings information, if there are so many you can use the filter_fields to get less information, or pagination to get in different batches 3. For most critical findings you can get more context and remediation with Prowler Hub to get remediations for example DESIGN REQUIREMENTS: - Dark theme (gradient background: #0a0e27 to #131830) - Card-based layout with glassmorphism effects - Color scheme:  * Primary green  * Secondary purple - Modern, professional look - Animated "LIVE DATA" indicator (pulsing green badge) - Hover effects on all cards (lift, glow, border color change) - Responsive grid layout - Mobile-responsive breakpoints at 768px - Single HTML file with all CSS and JavaScript embedded - No external dependencies SPECIFIC DETAILS TO INCLUDE: - Show actual counts from the data (don't hardcode numbers) - Add timestamp showing when dashboard was generated - Link to GitHub repository: https://github.com/prowler-cloud/prowler OUTPUT: Generate the complete HTML file and display it ``` **Video:**