Skip to content
AI & MLAuto-generatedScore: 46

Amazon Detective MCP Server

Amazon Detective is a fully managed security service provided by Amazon Web Services (AWS) that employs machine learning, statistical analysis, and graph theory to automatically collect, normalize, and analyze log data from critical AWS workloads.

Quick Start Summary

The Amazon Detective MCP server is a Model Context Protocol bridge that connects AI assistants — including Claude Desktop, Cursor, Windsurf, and VS Code Copilot — to the Amazon Detective API through natural language. It exposes 10 API endpoints as callable tools, such as AcceptInvitation, BatchGetGraphMemberDatasources, BatchGetMembershipDatasources, and more. No authentication is required — setup takes approximately 30 seconds. The server uses STDIO transport and can be installed by running npx -y @mcp/amazonaws-com-detective. This integration is sourced from the auto Amazon Detective OpenAPI specification (v2018-10-26) and has a quality score of 46/99 (fair documentation coverage).

10Endpointstools mapped
NoneAuthopen access
46/99Qualityfair
~30 secSetupno auth

Server Details

Category
AI & ML
Authentication
None
Endpoints
10 operations
Transport
STDIO
Spec Version
v2018-10-26
Install Command
npx -y @mcp/amazonaws-com-detective

Environment Variables

AMAZON_DETECTIVE_API_KEY

Example: your_amazon_detective_api_key

Top Endpoints

PUT
/invitation

AcceptInvitation

POST
/graph/datasources/get

BatchGetGraphMemberDatasources

POST
/membership/datasources/get

BatchGetMembershipDatasources

POST
/graph

CreateGraph

POST
/graph/members

CreateMembers

Own this API?

Verify ownership of this listing to control the description, configuration details, and documentation links. Choose between free manual verification or instant premium placement.

Option 1: Free Verification

Slow manual review. Requires creating a GitHub issue with verified documentation or domain verification.

  • • Verified badge on page
  • • Standard search sorting
  • • 2-3 business days review
Start Free Claim →
Instant & Boosted

Option 2: Featured Upgrade($9/mo)

Instant verification plus premium styling, featured badges, and directory placement boost.

  • • ★ Featured star & amber highlight border
  • • Top of directory search placement
  • • Instant activation via claim token

📖 Detailed MCP Integration Guide

A technical breakdown of capabilities, agent workflows, and security/configuration best practices.

Capabilities & Use Cases
Amazon Detective is a fully managed security service provided by Amazon Web Services (AWS) that employs machine learning, statistical analysis, and graph theory to automatically collect, normalize, and analyze log data from critical AWS workloads. Its core capability lies in transforming raw, disconnected logs from services like Amazon CloudTrail, VPC Flow Logs, and Amazon GuardDuty into interactive, correlated visualizations. These visualizations provide a cohesive view of the underlying network, user, and API activity across an account or organization over time. Typical use cases are centered on security operations (SecOps) and incident response within enterprise environments. Security analysts and incident responders use Detective to rapidly investigate potential security findings—such as unusual API call patterns, instance connection attempts, or compromised credentials—by understanding the context, timeline, and impact of these events without manually querying disparate log sources. It significantly reduces the mean time to resolution (MTTR) for security incidents by providing a pre-built investigative framework.
🤖AI Agent Value
When exposed as tools to an AI coding assistant via the Model Context Protocol (MCP), the Amazon Detective API gains a powerful new interface for programmatic and automated security analysis. An AI model with access to this MCP server can act as an intelligent security analyst co-pilot. Instead of a developer manually writing AWS CLI commands or navigating the console, they can issue natural language instructions to the AI. The AI, leveraging its understanding of the API's structure and purpose, translates these instructions into precise API calls. This integration provides immense value by enabling rapid, automated querying of complex security graphs and relationships, automating routine data source collection tasks, and programmatically managing investigation scopes and access—all within a development or incident response workflow. It bridges the gap between complex security data and actionable, automated insights.
💬Example Workflows
A developer can instruct an AI agent to perform dynamic, context-aware security tasks using this MCP server. For example, a developer could ask, "AI agent, query the activity graph for the IAM user 'dev-lead' over the last 24 hours and summarize any calls made to Amazon S3 outside our standard IP range," prompting the AI to use the graph-related endpoints to fetch and analyze the relevant nodes and edges. Another workflow could be: "AI agent, update the membership for Detective to include all accounts in our 'Workloads' OU and ensure the primary data sources are enabled." This would instruct the AI to automate the configuration of Detective across multiple accounts. Furthermore, a developer could say, "AI agent, describe the current organization configuration for Detective and disable administrative access for the 'audit-role' account to follow our least privilege policy," allowing the AI to programmatically enforce security governance.
🛡️Security & Auth
Critical to implementing this integration securely is the authentication and configuration layer. Although the provided API listing specifies "None" for authentication, this represents the interface to the MCP server itself. All calls from the MCP server to the actual AWS Detective service must be authorized using AWS Identity and Access Management (IAM). Developers must create an IAM role with precisely scoped permissions—following the principle of least privilege—that grants the MCP server only the necessary Detective actions (e.g., detective:Graph, detective:UpdateMembership). The MCP server should be configured to use this role via an AWS profile or environment variables. Furthermore, developers should ensure that all sensitive data and access tokens are handled securely, and that the MCP server's endpoint is not exposed to the public internet. All investigative actions and configuration changes executed by the AI agent should be logged and auditable, reinforcing a robust security posture even while leveraging powerful automation.

Similar APIs

Other APIs in the AI & ML category.

OpenAI API

Generate text, images, and embeddings. Integrate GPT models and DALL-E into your AI agent.

API Key

Anthropic API

Access Claude AI models for text generation, analysis, and code assistance through the Anthropic API.

API Key

OpenAI API

The OpenAI API, developed and maintained by OpenAI, provides programmatic access to a suite of advanced artificial intelligence capabilities centered around large language models (LLMs). Its core functions enable developers to integrate state-of-the-art natural language processing and generation into applications. Key endpoints support text generation (completions, chat completions), content transformation (edits, classifications), semantic analysis (embeddings), and multimodal processing (audio transcriptions and translations). The API serves a broad spectrum of users, from individual developers and startups building conversational agents or content tools to large enterprises automating complex workflows, enhancing customer support, conducting sentiment analysis on large text corpora, or generating synthetic data for training. Use cases span consumer applications like intelligent writing assistants and enterprise-grade solutions for automated document summarization, code generation, and multilingual communication platforms.

Amazon CodeGuru Profiler

Amazon CodeGuru Profiler is an advanced application performance profiling service provided by Amazon Web Services (AWS). It continuously collects runtime performance data—such as CPU utilization, memory allocation, and thread contention—from live production applications, then analyzes this data using machine learning algorithms to pinpoint performance bottlenecks and inefficiencies. The API serves as the programmatic interface for managing the profiling lifecycle, allowing developers to create and configure profiling groups, adjust agent settings, retrieve performance metrics and findings, and manage notification configurations. Enterprise use cases include optimizing microservice latency in high-traffic systems, reducing cloud compute costs by identifying inefficient code paths, and maintaining application health in continuous deployment pipelines where performance regressions must be detected early. For development teams, it provides actionable insights to guide code optimization efforts based on real-world usage rather than synthetic benchmarks.

Related MCP Server Integrations

OpenAI API MCP Setup

Generate text, images, and embeddings. Integrate GPT models and DALL-E into your AI agent.

AI & MLConfigure →

Anthropic API MCP Setup

Access Claude AI models for text generation, analysis, and code assistance through the Anthropic API.

AI & MLConfigure →

OpenAI API MCP Setup

The OpenAI API, developed and maintained by OpenAI, provides programmatic access to a suite of advanced artificial intelligence capabilities centered around large language models (LLMs). Its core functions enable developers to integrate state-of-the-art natural language processing and generation into applications. Key endpoints support text generation (completions, chat completions), content transformation (edits, classifications), semantic analysis (embeddings), and multimodal processing (audio transcriptions and translations). The API serves a broad spectrum of users, from individual developers and startups building conversational agents or content tools to large enterprises automating complex workflows, enhancing customer support, conducting sentiment analysis on large text corpora, or generating synthetic data for training. Use cases span consumer applications like intelligent writing assistants and enterprise-grade solutions for automated document summarization, code generation, and multilingual communication platforms.

AI & MLConfigure →

Amazon CodeGuru Profiler MCP Setup

Amazon CodeGuru Profiler is an advanced application performance profiling service provided by Amazon Web Services (AWS). It continuously collects runtime performance data—such as CPU utilization, memory allocation, and thread contention—from live production applications, then analyzes this data using machine learning algorithms to pinpoint performance bottlenecks and inefficiencies. The API serves as the programmatic interface for managing the profiling lifecycle, allowing developers to create and configure profiling groups, adjust agent settings, retrieve performance metrics and findings, and manage notification configurations. Enterprise use cases include optimizing microservice latency in high-traffic systems, reducing cloud compute costs by identifying inefficient code paths, and maintaining application health in continuous deployment pipelines where performance regressions must be detected early. For development teams, it provides actionable insights to guide code optimization efforts based on real-world usage rather than synthetic benchmarks.

AI & MLConfigure →

Amazon CodeGuru Reviewer MCP Setup

The Amazon CodeGuru Reviewer API is a powerful programmatic interface to Amazon's automated code analysis service, designed to elevate code quality and developer productivity. This API exposes the core functionalities of a managed service that combines deep static analysis, machine learning models trained on vast code repositories, and pattern recognition to identify complex defects, security vulnerabilities, and non-idiomatic code patterns that are often missed in manual reviews. Specifically targeting Java and Python codebases, CodeGuru Reviewer analyzes code changes submitted through integrated repositories like AWS CodeCommit, GitHub, or Bitbucket, and generates actionable recommendations. Its primary enterprise use cases are integrated into continuous integration and continuous delivery (CI/CD) pipelines for automated, mandatory code quality gates; conducting security and compliance audits on critical application code; and providing scalable, consistent feedback during the pull request process, thereby reducing the burden on human reviewers and accelerating safe code deployments.

AI & MLConfigure →