Overview

​

Quickest Way to Connect: Cloud MCP Server

{
  "mcpServers": {
    "prowler": {
      "url": "https://mcp.prowler.com/mcp",
      "headers": {
        "Authorization": "Bearer <your-api-key-here>"
      }
    }
  }
}

​

What is the Model Context Protocol?

​

Key Capabilities

​

1. Prowler Cloud, Private Cloud & Local Server

• Findings Analysis: Query, filter, and analyze security findings across all your cloud environments
• Provider Management: Create, configure, and manage your configured Prowler providers (AWS, Azure, GCP, etc.)
• Scan Orchestration: Trigger on-demand scans and schedule recurring security assessments
• Resource Inventory: Search and view detailed information about your audited resources
• Muting Management: Create and manage muting lists/rules to suppress non-relevant findings
• Attack Paths Analysis: Analyze privilege escalation chains and security misconfigurations through graph-based analysis of cloud resource relationships

​

2. Prowler Hub

• Security Checks Catalog: Browse and search over 2,000 security checks across multiple cloud providers.
• Check Implementation: View the Python code that powers each security check.
• Automated Fixers: Access remediation scripts for common security issues.
• Compliance Frameworks: Explore mappings to over 70 compliance standards and frameworks.
• Provider Services: View available services and checks for each cloud provider.

​

3. Prowler Documentation

• Intelligent Search: Full-text search across all Prowler documentation.
• Contextual Results: Get relevant documentation pages with highlighted snippets.
• Document Retrieval: Access complete markdown content of any documentation file.

​

MCP Server Architecture

• Prowler Cloud, Prowler Private Cloud, or Prowler Local Server for security operations
• Prowler Hub for security knowledge
• Prowler Documentation for guidance and reference.

​

Use Cases

• “Show me all critical findings from my AWS production accounts”
• “Register my new AWS account in Prowler and run a scheduled scan every day”
• “List all muted findings and detect what findgings are muted by a not enough good reason in relation to their severity”
• “Run an attack paths query to find EC2 instances exposed to the Internet with access to sensitive S3 buckets”

• “Explain what the S3 bucket public access Prowler check does”
• “Find all Prowler checks related to encryption at rest”
• “What is the latest version of the CIS that Prowler is covering per provider?”

• “How do I configure Prowler to scan my GCP organization?”
• “What authentication methods does Prowler support for Azure?”
• “How can I contribute with a new security check to Prowler?”

​

Example: Creating a custom dashboard with Prowler extracted data

Generate me a security dashboard for the Prowler open source project using live data from Prowler MCP tools.

REQUIREMENTS:
1. Fetch real-time data from Prowler Findings using MCP tools
2. Create a single self-contained HTML file and display it
3. Dashboard must be production-ready with modern design

DATA TO FETCH:
Use these MCP tools in this order:
1. Prowler list providers - To get all available configured provider in the account
2. Prowler get latest findings - To get findings information, if there are so many you can use the filter_fields to get less information, or pagination to get in different batches
3. For most critical findings you can get more context and remediation with Prowler Hub to get remediations for example

DESIGN REQUIREMENTS:
- Dark theme (gradient background: #0a0e27 to #131830)
- Card-based layout with glassmorphism effects
- Color scheme:
 * Primary green
 * Secondary purple
- Modern, professional look
- Animated "LIVE DATA" indicator (pulsing green badge)
- Hover effects on all cards (lift, glow, border color change)
- Responsive grid layout
- Mobile-responsive breakpoints at 768px
- Single HTML file with all CSS and JavaScript embedded
- No external dependencies

SPECIFIC DETAILS TO INCLUDE:
- Show actual counts from the data (don't hardcode numbers)
- Add timestamp showing when dashboard was generated
- Link to GitHub repository: https://github.com/prowler-cloud/prowler

OUTPUT:
Generate the complete HTML file and display it

​

Cloud vs Local MCP Server

​

☁️ Cloud MCP Server (Recommended)

​

💻 Local MCP Server

• STDIO mode — the server runs as a subprocess of your MCP client. Authentication via environment variables.
• Self-hosted HTTP mode — deploy your own remote HTTP server. Authentication via API key or JWT token.

​

Next Steps