AWS CloudTrail MCP
Official AWS Labs MCP for CloudTrail: 90 days of management events via lookup_events and Trino-compatible SQL queries against CloudTrail Lake Event Data Stores. 3 commits on the server path in the last 30 days. Pairs with the IAM MCP for security audit workflows.
INSTALL THIS SERVER
{
"mcpServers": {
"awslabs.cloudtrail-mcp-server": {
"command": "uvx",
"args": [
"awslabs.cloudtrail-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "default",
"AWS_REGION": "us-east-1"
}
}
}
}
{
"mcpServers": {
"awslabs.cloudtrail-mcp-server": {
"command": "uvx",
"args": [
"awslabs.cloudtrail-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "default",
"AWS_REGION": "us-east-1"
}
}
}
}
{
"mcpServers": {
"awslabs.cloudtrail-mcp-server": {
"command": "uvx",
"args": [
"awslabs.cloudtrail-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "default",
"AWS_REGION": "us-east-1"
}
}
}
}
{
"mcpServers": {
"awslabs.cloudtrail-mcp-server": {
"command": "uvx",
"args": [
"awslabs.cloudtrail-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "default",
"AWS_REGION": "us-east-1"
}
}
}
}
{
"mcpServers": {
"awslabs.cloudtrail-mcp-server": {
"command": "uvx",
"args": [
"awslabs.cloudtrail-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "default",
"AWS_REGION": "us-east-1"
}
}
}
}
5 SELECTED TOOLS
OUR ASSESSMENT
The CloudTrail MCP covers the CloudTrail Events API for management-event lookup over the last 90 days, plus CloudTrail Lake for SQL analytics across longer retention windows. Lookup supports filtering by username, event name, resource name, and other criteria. Lake queries use Trino-compatible SQL syntax for advanced analytics. List, status, and results tools handle the asynchronous Lake query lifecycle. Required IAM permissions are documented in the README: cloudtrail:LookupEvents, cloudtrail:ListEventDataStores, cloudtrail:GetEventDataStore, cloudtrail:StartQuery, cloudtrail:DescribeQuery, cloudtrail:GetQueryResults.
- Apache-2.0 licence.
- Official AWS Labs maintenance.
- Two access patterns: 90-day lookup via lookup_events, plus full Lake SQL via lake_query.
- Trino-compatible SQL syntax for Lake queries.
- Async query lifecycle with explicit status and results tools.
- Pagination support on both lookup and Lake results for large result sets.
- Clear IAM permission table in the README.
- 3 commits on the server path in the last 30 days, modest cadence.
- 90-day cap on the lookup_events API; longer windows require CloudTrail Lake (separate infrastructure).
- CloudTrail Lake pricing covers query and storage; large queries carry cost.
- Read-only by design; remediation actions live elsewhere.
The MCP is read-only for CloudTrail data; it carries no mutation surface. Scope the AWS profile to the listed IAM permissions; reserve broader CloudTrail permissions (e.g., cloudtrail:DeleteTrail) for dedicated administrative roles separate from the MCP. CloudTrail Lake queries can return sensitive operational data; treat the MCP results stream as sensitive in the host LLM context. Lake query results contain raw event payloads; redact or filter columns when surfacing to broad agent contexts.
Security teams running CloudTrail Lake who want agent-driven audit queries with SQL-native flexibility; incident response workflows: trace what happened, who acted, when, across the last 90 days of management events; compliance reporting where the agent pulls evidence from CloudTrail Lake under operator-scoped IAM.
TECHNICAL DETAILS
RECORDED ADOPTION METRICS
Saved directory snapshots. Record last checked MAY 1, 2026. The review date above does not refresh these figures.
// Recorded note8,924 stars on the awslabs/mcp parent monorepo. 3 commits on the CloudTrail server path in the last 30 days.
// Recorded noteFifth-ranked in security. Tier 2 cadence; Tier 1 vendor signal. Pairs with IAM MCP for audit and incident response.
SOURCES & RECORDED CHECKS
These are the directory listings and check details held in this record. Client compatibility, directory listings and installation testing are separate signals. Recorded client names describe the scope of a check; they do not establish a security assessment or a recurring test schedule.
The same server, 4 different lenses. We reconcile these signals into our editorial score, which is why our number sometimes diverges from a directory-aggregate star count.
| Source | Their rating | Their star count | Their downloads | Last synced |
|---|---|---|---|---|
| AutomationSwitch This page | 4editorial | 8,924 | — | MAY 1, 2026 |
| PulseMCP | — unrated | unavailable | unavailable | MAY 1, 2026 |
| MCP.so | — unrated | unavailable | unavailable | MAY 1, 2026 |
| Glama | — unrated | unavailable | unavailable | MAY 1, 2026 |
| Official MCP Registry | — unrated | unavailable | unavailable | MAY 1, 2026 |
// Counts are directory-reported; we don't adjust them. Discrepancies usually come from different snapshot times or star-caching.
OTHER SECURITY MCP SERVERS
Prowler MCP
Cloud Security Posture Management (CSPM) platform with 1000+ security checks across multiple cloud providers and 70+ compliance frameworks, exposed through MCP. Three deployment options: Prowler Cloud (recommended), local stdio, self-hosted HTTP. 13,717 stars, Apache-2.0.
Snyk Agent Scan
Snyk's security scanner for AI agents, MCP servers, and agent skills. Scans MCP server manifests and agent skill files for known security risks. 2,366 GitHub stars and 81 commits on main in the last 30 days.
CrowdStrike Falcon MCP
Official CrowdStrike Falcon MCP server. Connect AI agents to CrowdStrike Falcon for automated security analysis and threat hunting. 148 stars and 8 commits on main in the last 30 days.
HexStrike AI
Advanced MCP server that lets AI agents perform offensive security tasks and red-team workflows. 8,695 GitHub stars and 1 commit on main in the last 30 days.
Auth0 MCP Server
Official Auth0 MCP server connecting Claude, Cursor, Windsurf, VS Code, and Gemini to Auth0 Management APIs. Create apps, deploy Actions, debug logs, and query users with natural-language commands. Read-only mode and tool-glob filtering supported. Beta software per Auth0.
HashiCorp Vault MCP
Official HashiCorp MCP for Vault: secrets, mounts, KV, and PKI management with stdio and Streamable HTTP transports. 9 commits on main in the last 30 days. MPL-2.0 with HashiCorp official-vendor signal.
DISCUSS YOUR
MCP REQUIREMENTS.
Evaluating a server, scoping an internal deployment, or working out whether MCP is the right fit at all. Start the conversation and we will point you at the right piece of the ecosystem.