Overview

​

Quickest Way to Connect: Cloud MCP Server

{
  "mcpServers": {
    "prowler": {
      "url": "https://mcp.prowler.com/mcp",
      "headers": {
        "Authorization": "Bearer <your-api-key-here>"
      }
    }
  }
}

​

What is the Model Context Protocol?

​

Key Capabilities

​

1. Prowler Cloud, Private Cloud & Local Server

• Findings Analysis: Query, filter, and analyze security findings across all your cloud environments
• Provider Management: Create, configure, and manage your configured Prowler providers (AWS, Azure, GCP, etc.)
• Scan Orchestration: Trigger on-demand scans, track their progress, and schedule a daily scan
• Resource Inventory: Search and view detailed information about your audited resources
• Muting Management: Create and manage muting lists/rules to suppress non-relevant findings
• Attack Paths Analysis: Analyze privilege escalation chains and security misconfigurations through graph-based analysis of cloud resource relationships
• Integrations Management: Set up and troubleshoot where Prowler sends its results (Amazon S3, AWS Security Hub, Jira), and turn findings into Jira work items
• User & Role Management: List the users in your tenant, identify the authenticated user, browse RBAC roles, and set the role a user holds

​

2. Prowler Cloud Management

• Scan Configurations: Create reusable check and compliance selections and attach them to providers.
• Findings Triage: Record review statuses and notes for individual findings, without suppressing them.
• Scan Scheduling: Configure daily, interval, weekly, or monthly recurring scans, one provider at a time or in bulk.
• Alerts: Build and dry-run alert rule conditions, manage email recipients, and review fired alerts.

​

3. Prowler Hub

• Security Checks Catalog: Browse and search over 2,000 security checks across multiple cloud providers.
• Check Implementation: View the Python code that powers each security check.
• Automated Fixers: Access remediation scripts for common security issues.
• Compliance Frameworks: Explore mappings to over 70 compliance standards and frameworks.
• Provider Services: View available services and checks for each cloud provider.

​

4. Prowler Documentation

• Intelligent Search: Full-text search across all Prowler documentation.
• Contextual Results: Get relevant documentation pages with highlighted snippets.
• Document Retrieval: Access complete markdown content of any documentation file.

​

MCP Server Architecture

• Prowler Cloud, Prowler Private Cloud, or Prowler Local Server for security operations
• Prowler Cloud management for Cloud-only configuration and workflows
• Prowler Hub for security knowledge
• Prowler Documentation for guidance and reference.

​

Use Cases

• “Show me all critical findings from my AWS production accounts”
• “Register my new AWS account in Prowler and run a scheduled scan every day”
• “List all muted findings and flag the ones whose mute reason is too weak for their severity”
• “Run an attack paths query to find EC2 instances exposed to the Internet with access to sensitive S3 buckets”
• “Send my failed CIS findings for this provider to Jira as work items”

• “Preview an alert rule for critical AWS findings and create it for my confirmed recipients”
• “Show the triage notes for this finding and mark it as under review”
• “Apply a weekly Monday 06:00 scan schedule to every AWS provider”
• “Create a scan configuration that runs only CIS checks and attach it to my production providers”

• “Explain what the S3 bucket public access Prowler check does”
• “Find all Prowler checks related to encryption at rest”
• “What is the latest version of the CIS that Prowler is covering per provider?”

• “How do I configure Prowler to scan my GCP organization?”
• “What authentication methods does Prowler support for Azure?”
• “How can I contribute with a new security check to Prowler?”

​

Example: Creating a custom dashboard with Prowler extracted data

Generate me a security dashboard for the Prowler open source project using live data from Prowler MCP tools.

REQUIREMENTS:
1. Fetch real-time data from Prowler Findings using MCP tools
2. Create a single self-contained HTML file and display it
3. Dashboard must be production-ready with modern design

DATA TO FETCH:
Use these MCP tools in this order:
1. Prowler list providers - To get all available configured provider in the account
2. Prowler get latest findings - To get findings information, if there are so many you can use the filter_fields to get less information, or pagination to get in different batches
3. For most critical findings you can get more context and remediation with Prowler Hub to get remediations for example

DESIGN REQUIREMENTS:
- Dark theme (gradient background: #0a0e27 to #131830)
- Card-based layout with glassmorphism effects
- Color scheme:
 * Primary green
 * Secondary purple
- Modern, professional look
- Animated "LIVE DATA" indicator (pulsing green badge)
- Hover effects on all cards (lift, glow, border color change)
- Responsive grid layout
- Mobile-responsive breakpoints at 768px
- Single HTML file with all CSS and JavaScript embedded
- No external dependencies

SPECIFIC DETAILS TO INCLUDE:
- Show actual counts from the data (don't hardcode numbers)
- Add timestamp showing when dashboard was generated
- Link to GitHub repository: https://github.com/prowler-cloud/prowler

OUTPUT:
Generate the complete HTML file and display it

​

Cloud vs Local MCP Server

​

☁️ Cloud MCP Server (Recommended)

​

💻 Local MCP Server

• STDIO mode — the server runs as a subprocess of your MCP client. Authentication via environment variables.
• Self-hosted HTTP mode — deploy your own remote HTTP server. Authentication via API key or JWT token.

​

Next Steps