{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_y2wgtecgb96y","handle":"moretes-architect-mcp","url":"https://wellknown.network/agents/moretes-architect-mcp","links":{"self":"https://wellknown.network/agents/moretes-architect-mcp/record.json","html":"https://wellknown.network/agents/moretes-architect-mcp","markdown":"https://wellknown.network/agents/moretes-architect-mcp/record.md","api":"https://wellknown.network/api/v1/agents/moretes-architect-mcp","status":"https://wellknown.network/api/v1/agents/moretes-architect-mcp/status","claim":"https://wellknown.network/agents/moretes-architect-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/moretes-architect-mcp/claim.json","badge":"https://wellknown.network/agents/moretes-architect-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/moretes-architect-mcp/history","tools":"https://wellknown.network/api/v1/agents/moretes-architect-mcp/tools"},"ard":{"identifier":"urn:air:m9od37vm41.execute-api.us-east-1.amazonaws.com:server:moretes-architect-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"Moretes Architect MCP","summary":"Evidence-first architecture workbench: 48 deterministic tools, 10 architect personas, any cloud","description":"Evidence-first architecture workbench: 48 deterministic tools, 10 architect personas, any cloud","publisher":{"name":"fernando-moretes","url":null},"homepage":"https://fernando.moretes.com/mcp","repository":"https://github.com/fernando-moretes/moretes-aws-architect-mcp","version":"0.3.0","license":null,"protocols":["mcp"],"tags":[],"pricing":null,"endpoints":[{"url":"https://m9od37vm41.execute-api.us-east-1.amazonaws.com/mcp","type":"mcp_streamable_http","auth":null,"probeable":true}],"skills":null,"tools":null,"extra":{"updatedAt":"2026-10-25T18:25:05.008572Z","publishedAt":"2026-10-25T18:25:05.008572Z","registryName":"io.github.fernando-moretes/moretes-aws-architect-mcp"},"attribution":{"kind":"mcp_registry","name":"mcp_registry","repoUrl":"mcp_registry","summary":"mcp_registry","version":"mcp_registry","description":"mcp_registry","homepageUrl":"mcp_registry","publisherName":"mcp_registry"}},"derived":{"capabilities":[{"slug":"code.review","name":"Code Review","confidence":1,"provenance":"derived"},{"slug":"documents.contracts","name":"Contracts & Legal","confidence":1,"provenance":"derived"},{"slug":"dev.version-control","name":"Version Control","confidence":1,"provenance":"derived"},{"slug":"infra.cloud","name":"Cloud Platforms","confidence":1,"provenance":"derived"},{"slug":"security.scanning","name":"Security Scanning","confidence":1,"provenance":"derived"},{"slug":"security.identity","name":"Identity & Access","confidence":1,"provenance":"derived"},{"slug":"ai.evaluation","name":"Evaluation & Benchmarks","confidence":1,"provenance":"derived"},{"slug":"code.security-review","name":"Security Review","confidence":0.583,"provenance":"derived"}],"categories":["ai","code","dev","documents","infra","security"],"language":"en"},"observed":{"status":"live","statusReason":"Responded 2h ago.","lastOkAt":"2026-10-26T21:24:00.847Z","lastProbedAt":"2026-10-26T21:24:00.847Z","statusComputedAt":"2026-10-26T21:26:42.768Z","reliability30d":{"probes":2,"successRate":1,"p50Ms":1033,"basis":"service","measures":{"availability":"availability","latency":"response time","tools":"tool surface observed","summary":"Checks reached the service itself."},"checks":{"total":2,"ok":2,"authBoundaryOk":0,"serviceOk":2,"note":"Counted from the observation rows for the window, checks of the server only (HTTP, A2A card, MCP initialize). ok = authBoundaryOk + serviceOk. `probes` is the sum of daily rollups and includes registry checks, so it can differ from `total`."}},"latestObservations":[{"at":"2026-10-26T21:24:00.847Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":1061,"error":null,"detail":{"tools":[{"name":"architect_panel","description":"Convene architect personas (solution, enterprise, business, data, infrastructure, software, AI, security, governance, FinOps) on a subject: each returns its que"},{"name":"code_review_architecture","description":"Heuristic architecture and security scan of source code pasted as text (any language): secrets, insecure calls, SQL built by concatenation, disabled TLS, hardco"},{"name":"dependency_manifest_review","description":"Review a dependency manifest (package.json, requirements.txt, pyproject, go.mod, pom.xml, Gemfile, Cargo.toml as text) for unpinned ranges, git or URL sources, "},{"name":"requirements_check","description":"Turn a workload brief into explicit requirements, gaps and research questions. No inferred SLA or budget."},{"name":"architecture_pattern","description":"Select a reference architecture by explicit workload pattern; returns tradeoffs, questions and Mermaid. provider maps the AWS services to Azure, GCP, OCI or ope"},{"name":"service_compare","description":"Compare curated AWS service families against user constraints. No automatic winner or fabricated scores."},{"name":"decision_record","description":"Generate an ADR from explicit alternatives, decision and consequences. Does not invent acceptance."},{"name":"well_architected_review","description":"Organize evidence by six pillars. A met control without evidence is unknown, never certified."},{"name":"threat_model","description":"Create STRIDE review prompts for explicitly supplied assets and trust boundaries. Review aid, not a scanner."},{"name":"failure_rehearsal","description":"Design a controlled failure drill with observable success criteria and stop conditions; never executes it."},{"name":"capacity_plan","description":"Calculate concurrency and daily data volume from explicit traffic assumptions. No service sizing guarantee."},{"name":"cost_model","description":"Calculate an auditable scenario using caller-supplied unit rates and source URLs. Does not guess AWS prices or credit coverage."},{"name":"slo_budget","description":"Calculate an availability error budget for a chosen period."},{"name":"migration_plan","description":"Prepare phased discovery, pilot, migration and rollback gates; includes AWS Transform integration discovery."},{"name":"architecture_diagram","description":"Build Mermaid from explicit nodes and edges. Sanitizes labels and rejects dangling edges."},{"name":"implementation_plan","description":"Turn an architecture decision into a delivery checklist with validation gates."},{"name":"agent_tool_contract","description":"Design a per-operation authorization and recovery contract for an agent tool."},{"name":"c4_model","description":"Build C4 context or container diagrams (Mermaid) from explicit people, systems, containers and relations. Validates endpoints; no infrastructure discovery."},{"name":"sequence_diagram","description":"Build a Mermaid sequence diagram from participants and ordered messages, with optional activation, notes and alt/loop blocks. Rejects unknown participants."},{"name":"service_equivalents","description":"Map a cloud capability to equivalent managed services on AWS, Azure, Google Cloud, OCI and open source. Names as of the snapshot date; verify current naming, re"},{"name":"data_classification","description":"Classify data elements, map them to regulation hints (LGPD, GDPR, PCI DSS, HIPAA) and list handling controls and open questions. Review aid, not legal advice."},{"name":"openapi_review","description":"Heuristic review of an OpenAPI 3.x document (JSON): security, pagination, error responses, idempotency, versioning and documentation gaps. Not a linter replacem"},{"name":"event_contract","description":"Design an event contract: envelope fields, schema evolution rules, idempotency, ordering, DLQ and replay decisions for a named business event. Deterministic tem"},{"name":"latency_budget","description":"Split an end-to-end latency objective across hops and show which hops exceed their share. Pure arithmetic over caller-supplied estimates."},{"name":"queue_sizing","description":"Size consumers for a queue with Little's law and Erlang C: utilization, wait probability, backlog drain time and consumers needed for a target utilization."},{"name":"dr_strategy","description":"Compare disaster recovery tiers (backup-and-restore, pilot light, warm standby, active-active) against RTO, RPO and data constraints; returns feasible tiers and"},{"name":"retry_policy","description":"Compute an exponential backoff schedule with jitter, the worst-case wait and whether it fits a deadline; adds idempotency and circuit-breaker guidance."},{"name":"storage_growth","description":"Project storage volume and relative cost over time from ingest, retention, compression, replication and growth; suggests tiering thresholds."},{"name":"finops_unit_economics","description":"Compute cost per unit (request, customer, transaction), fixed versus variable split and the volume at which the marginal cost crosses a target. Caller supplies "},{"name":"postmortem","description":"Generate a blameless postmortem document from incident facts: timeline, impact, detection, contributing factors and owned action items. Rejects action items wit"},{"name":"runbook","description":"Generate an operational runbook from service facts: alerts, diagnostic steps, remediation, rollback, escalation and verification. Template with explicit placeho"},{"name":"agent_eval_plan","description":"Design an evaluation plan for an AI agent: golden set sizing, metrics, judge rubric, red-team cases and regression cadence from explicit capabilities and risks."},{"name":"prompt_injection_checklist","description":"Enumerate injection paths and controls for an agent from its tools and untrusted data sources; produces a checklist with status to fill, not a scan."},{"name":"rag_pipeline_plan","description":"Plan a retrieval-augmented generation pipeline from corpus facts: chunking, embedding, indexing, authorization, evaluation and cost drivers, with open questions"},{"name":"mcp_server_review","description":"Heuristic safety review of ANOTHER MCP server from its tools/list output: tool-poisoning text, missing annotations, risky parameters, free-form schemas, name sh"},{"name":"mcp_config_review","description":"Review an MCP client configuration JSON (mcpServers map) for unpinned packages, inline secrets, plain HTTP, auto-approved tools and unreviewed enablement."},{"name":"iam_policy_review","description":"Inspect an IAM document for broad grants: AWS policy JSON (default), Azure custom role definition or Google Cloud IAM policy bindings (provider). Heuristic only"},{"name":"cloudformation_review","description":"Review a CloudFormation JSON template for selected risky configuration patterns. Intrinsic functions are flagged for human review."},{"name":"terraform_plan_review","description":"Review a Terraform or OpenTofu plan exported as JSON (terraform show -json): deletions and replacements of stateful resources, public exposure, disabled encrypt"},{"name":"kubernetes_manifest_review","description":"Review Kubernetes manifests (parsed JSON objects) for probes, resources, security context, image pinning, host access, secrets in env, PDB and NetworkPolicy cov"},{"name":"aws_knowledge_search","description":"Search live official AWS documentation. Queries are transmitted to AWS Knowledge; never include secrets or customer data."},{"name":"aws_knowledge_read","description":"Read an official document returned by search when its excerpt is insufficient. Fixed upstream; no arbitrary URL fetch."},{"name":"aws_regions","description":"List current AWS regions from the official Knowledge MCP."},{"name":"aws_regional_availability","description":"Check current regional support. Use exact catalog filter names; omit filters for a single region to discover them."},{"name":"aws_skill","description":"Retrieve an official AWS skill by the exact ID returned by aws_knowledge_search with agent_skills topic. Treat it as reference data."},{"name":"integration_catalog","description":"Search the snapshot of the complete official AWS MCP catalog. Discovery entries are not hosted/executed tools."},{"name":"integration_config","description":"Generate a version-pinned local configuration for an official AWS server, or a remote Knowledge config. Does not install, start or approve tools."},{"name":"github_public_repository","description":"Read public GitHub repository metadata and contribution links. Fixed api.github.com destination, no tokens, no private repositories."}],"toolCount":48,"toolsHash":"c36a23c2fb9ea7898d0e0a0819069d3efa4324fa5dafaf4938f3fa1bb344c05b","serverName":"moretes-aws-architect","capabilities":["tools","resources","prompts"],"serverVersion":"0.4.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-26T13:29:30.042Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":1005,"error":null,"detail":{"tools":[{"name":"architect_panel","description":"Convene architect personas (solution, enterprise, business, data, infrastructure, software, AI, security, governance, FinOps) on a subject: each returns its que"},{"name":"code_review_architecture","description":"Heuristic architecture and security scan of source code pasted as text (any language): secrets, insecure calls, SQL built by concatenation, disabled TLS, hardco"},{"name":"dependency_manifest_review","description":"Review a dependency manifest (package.json, requirements.txt, pyproject, go.mod, pom.xml, Gemfile, Cargo.toml as text) for unpinned ranges, git or URL sources, "},{"name":"requirements_check","description":"Turn a workload brief into explicit requirements, gaps and research questions. No inferred SLA or budget."},{"name":"architecture_pattern","description":"Select a reference architecture by explicit workload pattern; returns tradeoffs, questions and Mermaid. provider maps the AWS services to Azure, GCP, OCI or ope"},{"name":"service_compare","description":"Compare curated AWS service families against user constraints. No automatic winner or fabricated scores."},{"name":"decision_record","description":"Generate an ADR from explicit alternatives, decision and consequences. Does not invent acceptance."},{"name":"well_architected_review","description":"Organize evidence by six pillars. A met control without evidence is unknown, never certified."},{"name":"threat_model","description":"Create STRIDE review prompts for explicitly supplied assets and trust boundaries. Review aid, not a scanner."},{"name":"failure_rehearsal","description":"Design a controlled failure drill with observable success criteria and stop conditions; never executes it."},{"name":"capacity_plan","description":"Calculate concurrency and daily data volume from explicit traffic assumptions. No service sizing guarantee."},{"name":"cost_model","description":"Calculate an auditable scenario using caller-supplied unit rates and source URLs. Does not guess AWS prices or credit coverage."},{"name":"slo_budget","description":"Calculate an availability error budget for a chosen period."},{"name":"migration_plan","description":"Prepare phased discovery, pilot, migration and rollback gates; includes AWS Transform integration discovery."},{"name":"architecture_diagram","description":"Build Mermaid from explicit nodes and edges. Sanitizes labels and rejects dangling edges."},{"name":"implementation_plan","description":"Turn an architecture decision into a delivery checklist with validation gates."},{"name":"agent_tool_contract","description":"Design a per-operation authorization and recovery contract for an agent tool."},{"name":"c4_model","description":"Build C4 context or container diagrams (Mermaid) from explicit people, systems, containers and relations. Validates endpoints; no infrastructure discovery."},{"name":"sequence_diagram","description":"Build a Mermaid sequence diagram from participants and ordered messages, with optional activation, notes and alt/loop blocks. Rejects unknown participants."},{"name":"service_equivalents","description":"Map a cloud capability to equivalent managed services on AWS, Azure, Google Cloud, OCI and open source. Names as of the snapshot date; verify current naming, re"},{"name":"data_classification","description":"Classify data elements, map them to regulation hints (LGPD, GDPR, PCI DSS, HIPAA) and list handling controls and open questions. Review aid, not legal advice."},{"name":"openapi_review","description":"Heuristic review of an OpenAPI 3.x document (JSON): security, pagination, error responses, idempotency, versioning and documentation gaps. Not a linter replacem"},{"name":"event_contract","description":"Design an event contract: envelope fields, schema evolution rules, idempotency, ordering, DLQ and replay decisions for a named business event. Deterministic tem"},{"name":"latency_budget","description":"Split an end-to-end latency objective across hops and show which hops exceed their share. Pure arithmetic over caller-supplied estimates."},{"name":"queue_sizing","description":"Size consumers for a queue with Little's law and Erlang C: utilization, wait probability, backlog drain time and consumers needed for a target utilization."},{"name":"dr_strategy","description":"Compare disaster recovery tiers (backup-and-restore, pilot light, warm standby, active-active) against RTO, RPO and data constraints; returns feasible tiers and"},{"name":"retry_policy","description":"Compute an exponential backoff schedule with jitter, the worst-case wait and whether it fits a deadline; adds idempotency and circuit-breaker guidance."},{"name":"storage_growth","description":"Project storage volume and relative cost over time from ingest, retention, compression, replication and growth; suggests tiering thresholds."},{"name":"finops_unit_economics","description":"Compute cost per unit (request, customer, transaction), fixed versus variable split and the volume at which the marginal cost crosses a target. Caller supplies "},{"name":"postmortem","description":"Generate a blameless postmortem document from incident facts: timeline, impact, detection, contributing factors and owned action items. Rejects action items wit"},{"name":"runbook","description":"Generate an operational runbook from service facts: alerts, diagnostic steps, remediation, rollback, escalation and verification. Template with explicit placeho"},{"name":"agent_eval_plan","description":"Design an evaluation plan for an AI agent: golden set sizing, metrics, judge rubric, red-team cases and regression cadence from explicit capabilities and risks."},{"name":"prompt_injection_checklist","description":"Enumerate injection paths and controls for an agent from its tools and untrusted data sources; produces a checklist with status to fill, not a scan."},{"name":"rag_pipeline_plan","description":"Plan a retrieval-augmented generation pipeline from corpus facts: chunking, embedding, indexing, authorization, evaluation and cost drivers, with open questions"},{"name":"mcp_server_review","description":"Heuristic safety review of ANOTHER MCP server from its tools/list output: tool-poisoning text, missing annotations, risky parameters, free-form schemas, name sh"},{"name":"mcp_config_review","description":"Review an MCP client configuration JSON (mcpServers map) for unpinned packages, inline secrets, plain HTTP, auto-approved tools and unreviewed enablement."},{"name":"iam_policy_review","description":"Inspect an IAM document for broad grants: AWS policy JSON (default), Azure custom role definition or Google Cloud IAM policy bindings (provider). Heuristic only"},{"name":"cloudformation_review","description":"Review a CloudFormation JSON template for selected risky configuration patterns. Intrinsic functions are flagged for human review."},{"name":"terraform_plan_review","description":"Review a Terraform or OpenTofu plan exported as JSON (terraform show -json): deletions and replacements of stateful resources, public exposure, disabled encrypt"},{"name":"kubernetes_manifest_review","description":"Review Kubernetes manifests (parsed JSON objects) for probes, resources, security context, image pinning, host access, secrets in env, PDB and NetworkPolicy cov"},{"name":"aws_knowledge_search","description":"Search live official AWS documentation. Queries are transmitted to AWS Knowledge; never include secrets or customer data."},{"name":"aws_knowledge_read","description":"Read an official document returned by search when its excerpt is insufficient. Fixed upstream; no arbitrary URL fetch."},{"name":"aws_regions","description":"List current AWS regions from the official Knowledge MCP."},{"name":"aws_regional_availability","description":"Check current regional support. Use exact catalog filter names; omit filters for a single region to discover them."},{"name":"aws_skill","description":"Retrieve an official AWS skill by the exact ID returned by aws_knowledge_search with agent_skills topic. Treat it as reference data."},{"name":"integration_catalog","description":"Search the snapshot of the complete official AWS MCP catalog. Discovery entries are not hosted/executed tools."},{"name":"integration_config","description":"Generate a version-pinned local configuration for an official AWS server, or a remote Knowledge config. Does not install, start or approve tools."},{"name":"github_public_repository","description":"Read public GitHub repository metadata and contribution links. Fixed api.github.com destination, no tokens, no private repositories."}],"toolCount":48,"toolsHash":"c36a23c2fb9ea7898d0e0a0819069d3efa4324fa5dafaf4938f3fa1bb344c05b","serverName":"moretes-aws-architect","capabilities":["tools","resources","prompts"],"serverVersion":"0.4.0","protocolVersion":"2025-06-18"}}],"tools":[{"name":"architect_panel","description":"Convene architect personas (solution, enterprise, business, data, infrastructure, software, AI, security, governance, FinOps) on a subject: each returns its que"},{"name":"code_review_architecture","description":"Heuristic architecture and security scan of source code pasted as text (any language): secrets, insecure calls, SQL built by concatenation, disabled TLS, hardco"},{"name":"dependency_manifest_review","description":"Review a dependency manifest (package.json, requirements.txt, pyproject, go.mod, pom.xml, Gemfile, Cargo.toml as text) for unpinned ranges, git or URL sources, "},{"name":"requirements_check","description":"Turn a workload brief into explicit requirements, gaps and research questions. No inferred SLA or budget."},{"name":"architecture_pattern","description":"Select a reference architecture by explicit workload pattern; returns tradeoffs, questions and Mermaid. provider maps the AWS services to Azure, GCP, OCI or ope"},{"name":"service_compare","description":"Compare curated AWS service families against user constraints. No automatic winner or fabricated scores."},{"name":"decision_record","description":"Generate an ADR from explicit alternatives, decision and consequences. Does not invent acceptance."},{"name":"well_architected_review","description":"Organize evidence by six pillars. A met control without evidence is unknown, never certified."},{"name":"threat_model","description":"Create STRIDE review prompts for explicitly supplied assets and trust boundaries. Review aid, not a scanner."},{"name":"failure_rehearsal","description":"Design a controlled failure drill with observable success criteria and stop conditions; never executes it."},{"name":"capacity_plan","description":"Calculate concurrency and daily data volume from explicit traffic assumptions. No service sizing guarantee."},{"name":"cost_model","description":"Calculate an auditable scenario using caller-supplied unit rates and source URLs. Does not guess AWS prices or credit coverage."},{"name":"slo_budget","description":"Calculate an availability error budget for a chosen period."},{"name":"migration_plan","description":"Prepare phased discovery, pilot, migration and rollback gates; includes AWS Transform integration discovery."},{"name":"architecture_diagram","description":"Build Mermaid from explicit nodes and edges. Sanitizes labels and rejects dangling edges."},{"name":"implementation_plan","description":"Turn an architecture decision into a delivery checklist with validation gates."},{"name":"agent_tool_contract","description":"Design a per-operation authorization and recovery contract for an agent tool."},{"name":"c4_model","description":"Build C4 context or container diagrams (Mermaid) from explicit people, systems, containers and relations. Validates endpoints; no infrastructure discovery."},{"name":"sequence_diagram","description":"Build a Mermaid sequence diagram from participants and ordered messages, with optional activation, notes and alt/loop blocks. Rejects unknown participants."},{"name":"service_equivalents","description":"Map a cloud capability to equivalent managed services on AWS, Azure, Google Cloud, OCI and open source. Names as of the snapshot date; verify current naming, re"},{"name":"data_classification","description":"Classify data elements, map them to regulation hints (LGPD, GDPR, PCI DSS, HIPAA) and list handling controls and open questions. Review aid, not legal advice."},{"name":"openapi_review","description":"Heuristic review of an OpenAPI 3.x document (JSON): security, pagination, error responses, idempotency, versioning and documentation gaps. Not a linter replacem"},{"name":"event_contract","description":"Design an event contract: envelope fields, schema evolution rules, idempotency, ordering, DLQ and replay decisions for a named business event. Deterministic tem"},{"name":"latency_budget","description":"Split an end-to-end latency objective across hops and show which hops exceed their share. Pure arithmetic over caller-supplied estimates."},{"name":"queue_sizing","description":"Size consumers for a queue with Little's law and Erlang C: utilization, wait probability, backlog drain time and consumers needed for a target utilization."},{"name":"dr_strategy","description":"Compare disaster recovery tiers (backup-and-restore, pilot light, warm standby, active-active) against RTO, RPO and data constraints; returns feasible tiers and"},{"name":"retry_policy","description":"Compute an exponential backoff schedule with jitter, the worst-case wait and whether it fits a deadline; adds idempotency and circuit-breaker guidance."},{"name":"storage_growth","description":"Project storage volume and relative cost over time from ingest, retention, compression, replication and growth; suggests tiering thresholds."},{"name":"finops_unit_economics","description":"Compute cost per unit (request, customer, transaction), fixed versus variable split and the volume at which the marginal cost crosses a target. Caller supplies "},{"name":"postmortem","description":"Generate a blameless postmortem document from incident facts: timeline, impact, detection, contributing factors and owned action items. Rejects action items wit"},{"name":"runbook","description":"Generate an operational runbook from service facts: alerts, diagnostic steps, remediation, rollback, escalation and verification. Template with explicit placeho"},{"name":"agent_eval_plan","description":"Design an evaluation plan for an AI agent: golden set sizing, metrics, judge rubric, red-team cases and regression cadence from explicit capabilities and risks."},{"name":"prompt_injection_checklist","description":"Enumerate injection paths and controls for an agent from its tools and untrusted data sources; produces a checklist with status to fill, not a scan."},{"name":"rag_pipeline_plan","description":"Plan a retrieval-augmented generation pipeline from corpus facts: chunking, embedding, indexing, authorization, evaluation and cost drivers, with open questions"},{"name":"mcp_server_review","description":"Heuristic safety review of ANOTHER MCP server from its tools/list output: tool-poisoning text, missing annotations, risky parameters, free-form schemas, name sh"},{"name":"mcp_config_review","description":"Review an MCP client configuration JSON (mcpServers map) for unpinned packages, inline secrets, plain HTTP, auto-approved tools and unreviewed enablement."},{"name":"iam_policy_review","description":"Inspect an IAM document for broad grants: AWS policy JSON (default), Azure custom role definition or Google Cloud IAM policy bindings (provider). Heuristic only"},{"name":"cloudformation_review","description":"Review a CloudFormation JSON template for selected risky configuration patterns. Intrinsic functions are flagged for human review."},{"name":"terraform_plan_review","description":"Review a Terraform or OpenTofu plan exported as JSON (terraform show -json): deletions and replacements of stateful resources, public exposure, disabled encrypt"},{"name":"kubernetes_manifest_review","description":"Review Kubernetes manifests (parsed JSON objects) for probes, resources, security context, image pinning, host access, secrets in env, PDB and NetworkPolicy cov"},{"name":"aws_knowledge_search","description":"Search live official AWS documentation. Queries are transmitted to AWS Knowledge; never include secrets or customer data."},{"name":"aws_knowledge_read","description":"Read an official document returned by search when its excerpt is insufficient. Fixed upstream; no arbitrary URL fetch."},{"name":"aws_regions","description":"List current AWS regions from the official Knowledge MCP."},{"name":"aws_regional_availability","description":"Check current regional support. Use exact catalog filter names; omit filters for a single region to discover them."},{"name":"aws_skill","description":"Retrieve an official AWS skill by the exact ID returned by aws_knowledge_search with agent_skills topic. Treat it as reference data."},{"name":"integration_catalog","description":"Search the snapshot of the complete official AWS MCP catalog. Discovery entries are not hosted/executed tools."},{"name":"integration_config","description":"Generate a version-pinned local configuration for an official AWS server, or a remote Knowledge config. Does not install, start or approve tools."},{"name":"github_public_repository","description":"Read public GitHub repository metadata and contribution links. Fixed api.github.com destination, no tokens, no private repositories."}],"package":null,"toolSurface":{"id":"ts_kn7uta7cck7d","endpointId":"ep_x3rkdd322kyg","hash":"c36a23c2fb9ea7898d0e0a0819069d3efa4324fa5dafaf4938f3fa1bb344c05b","toolCount":48,"serverName":"moretes-aws-architect","serverVersion":"0.4.0","protocolVersion":"2025-06-18","firstSeenAt":"2026-10-26T13:29:30.043Z","lastSeenAt":"2026-10-26T21:24:00.852Z","observations":2,"toolNames":["architect_panel","code_review_architecture","dependency_manifest_review","requirements_check","architecture_pattern","service_compare","decision_record","well_architected_review","threat_model","failure_rehearsal","capacity_plan","cost_model","slo_budget","migration_plan","architecture_diagram","implementation_plan","agent_tool_contract","c4_model","sequence_diagram","service_equivalents","data_classification","openapi_review","event_contract","latency_budget","queue_sizing","dr_strategy","retry_policy","storage_growth","finops_unit_economics","postmortem","runbook","agent_eval_plan","prompt_injection_checklist","rag_pipeline_plan","mcp_server_review","mcp_config_review","iam_policy_review","cloudformation_review","terraform_plan_review","kubernetes_manifest_review","aws_knowledge_search","aws_knowledge_read","aws_regions","aws_regional_availability","aws_skill","integration_catalog","integration_config","github_public_repository"],"distinctSurfaces":1},"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"mcp_registry","key":"io.github.fernando-moretes/moretes-aws-architect-mcp","url":"https://registry.modelcontextprotocol.io/v0/servers/io.github.fernando-moretes%2Fmoretes-aws-architect-mcp","firstSeenAt":"2026-10-26T12:21:03.431Z","fetchedAt":"2026-10-26T12:21:03.431Z","normalizedAt":"2026-10-26T12:21:03.431Z"}]},"firstSeenAt":"2026-10-26T12:21:03.431Z","updatedAt":"2026-10-26T21:27:46.303Z"}