{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_fr7kjcmmvkzv","handle":"iflow-mcp-aws-samples-security-scanner-mcp-serve","url":"https://wellknown.network/agents/iflow-mcp-aws-samples-security-scanner-mcp-serve","links":{"self":"https://wellknown.network/agents/iflow-mcp-aws-samples-security-scanner-mcp-serve/record.json","html":"https://wellknown.network/agents/iflow-mcp-aws-samples-security-scanner-mcp-serve","markdown":"https://wellknown.network/agents/iflow-mcp-aws-samples-security-scanner-mcp-serve/record.md","api":"https://wellknown.network/api/v1/agents/iflow-mcp-aws-samples-security-scanner-mcp-serve","status":"https://wellknown.network/api/v1/agents/iflow-mcp-aws-samples-security-scanner-mcp-serve/status","claim":"https://wellknown.network/agents/iflow-mcp-aws-samples-security-scanner-mcp-serve/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/iflow-mcp-aws-samples-security-scanner-mcp-serve/claim.json","badge":"https://wellknown.network/agents/iflow-mcp-aws-samples-security-scanner-mcp-serve/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/iflow-mcp-aws-samples-security-scanner-mcp-serve/history","tools":"https://wellknown.network/api/v1/agents/iflow-mcp-aws-samples-security-scanner-mcp-serve/tools"},"ard":{"identifier":"urn:air::server:iflow-mcp-aws-samples-security-scanner-mcp-serve","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"iflow-mcp_aws-samples-security_scanner_mcp_server","summary":"A Model Context Protocol (MCP) server for security scanning with Checkov, Semgrep, and Bandit","description":"# MCP Security Scanner: Real-Time Protection for AI Code Assistants\n\nThis pattern describes how to implement a Model Context Protocol (MCP) server that integrates three industry-standard security scanning tools (Checkov, Semgrep, and Bandit) to provide comprehensive code security analysis. The server enables AI coding assistants to automatically scan code snippets and Infrastructure as Code (IaC) configurations for security vulnerabilities, misconfigurations, and compliance violations.\n\nThe solution combines Checkov for scanning IaC files (including Terraform, CloudFormation, and Kubernetes manifests), Semgrep for analyzing multiple programming languages (such as Python, JavaScript, Java, and others), and Bandit for specialized Python security scanning.\n\nIt provides a unified interface for security scanning with standardized response formats, making it easier to integrate security checks into development workflows. The pattern uses Python and the MCP framework to deliver automated security feedback, helping developers identify and address security issues early in the development process while learning about security best practices through detailed findings.\n\nThis pattern is particularly valuable for organizations looking to enhance their development security practices through AI-assisted coding tools, providing continuous security scanning capabilities across multiple programming languages and infrastructure definitions.\n\nKey features:\n - Delta scanning of new code segments, reducing computational overhead\n - Isolated security tool environments preventing cross-tool contamination\n - Seamless integration with AI tools (Amazon Q Developer, Kiro, others)\n - Real-time security feedback during code generation\n - Customizable scanning rules for organizational compliance\n\n## Demo\n\n### Code Scanning Demo\n\nTry these sample prompts with your AI assistant:\n1. \"Scan the current script and tell me the results\"\n2. \"Scan lines 20-60 and tell me the results\"\n3. \"Scan this Amazon D…","publisher":{"name":"Security Scanner MCP","url":null},"homepage":null,"repository":null,"version":"0.1.0","license":"MIT","protocols":["mcp"],"tags":["mcp"],"pricing":null,"endpoints":[{"url":"pypi:iflow-mcp_aws-samples-security_scanner_mcp_server","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","summary":"pypi","version":"pypi","description":"pypi","publisherName":"pypi"}},"derived":{"capabilities":[{"slug":"infra.cloud","name":"Cloud Platforms","confidence":1,"provenance":"derived"},{"slug":"security.scanning","name":"Security Scanning","confidence":1,"provenance":"derived"},{"slug":"code.generation","name":"Code Generation","confidence":0.917,"provenance":"derived"}],"categories":["code","infra","security"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"iflow-mcp_aws-samples-security_scanner_mcp_server","registry":"pypi","observedAt":"2026-10-22T01:29:02.113Z","publishedAt":"2026-02-13T23:58:04.729651Z","latestVersion":"0.1.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"iflow-mcp_aws-samples-security_scanner_mcp_server","url":"https://pypi.org/project/iflow-mcp_aws-samples-security_scanner_mcp_server/","firstSeenAt":"2026-09-09T18:20:34.705Z","fetchedAt":"2026-10-22T01:27:33.785Z","normalizedAt":"2026-10-22T01:27:33.785Z"}]},"firstSeenAt":"2026-09-09T18:20:34.705Z","updatedAt":"2026-10-22T01:29:02.113Z"}