Overview

​

What is the Model Context Protocol?

​

Key Capabilities

​

1. Prowler Cloud and Prowler App (Self-Managed)

• Findings Analysis: Query, filter, and analyze security findings across all your cloud environments
• Provider Management: Create, configure, and manage your configured Prowler providers (AWS, Azure, GCP, etc.)
• Scan Orchestration: Trigger on-demand scans and schedule recurring security assessments
• Resource Inventory: Search and view detailed information about your audited resources
• Muting Management: Create and manage muting lists/rules to suppress non-relevant findings

​

2. Prowler Hub

• Security Checks Catalog: Browse and search over 1000 security checks across multiple cloud providers.
• Check Implementation: View the Python code that powers each security check.
• Automated Fixers: Access remediation scripts for common security issues.
• Compliance Frameworks: Explore mappings to over 70 compliance standards and frameworks.
• Provider Services: View available services and checks for each cloud provider.

​

3. Prowler Documentation

• Intelligent Search: Full-text search across all Prowler documentation.
• Contextual Results: Get relevant documentation pages with highlighted snippets.
• Document Retrieval: Access complete markdown content of any documentation file.

​

MCP Server Architecture

• Prowler Cloud/App for security operations
• Prowler Hub for security knowledge
• Prowler Documentation for guidance and reference.

​

Use Cases

• “Show me all critical findings from my AWS production accounts”
• “Register my new AWS account in Prowler and run a scheduled scan every day”
• “List all muted findings and detect what findgings are muted by a not enough good reason in relation to their severity”

• “Explain what the S3 bucket public access Prowler check does”
• “Find all Prowler checks related to encryption at rest”
• “What is the latest version of the CIS that Prowler is covering per provider?”

• “How do I configure Prowler to scan my GCP organization?”
• “What authentication methods does Prowler support for Azure?”
• “How can I contribute with a new security check to Prowler?”

​

Example: Creating a custom dashboard with Prowler extracted data

Generate me a security dashboard for the Prowler open source project using live data from Prowler MCP tools.

REQUIREMENTS:
1. Fetch real-time data from Prowler Findings using MCP tools
2. Create a single self-contained HTML file and display it
3. Dashboard must be production-ready with modern design

DATA TO FETCH:
Use these MCP tools in this order:
1. Prowler app list providers - To get all available configured provider in the account
2. Prowler app get latest findings - To get findings information, if there are so many you can use the filter_fields to get less information, or pagination to get in different batches
3. For most critical findings you can get more context and remediation with Prowler Hub to get remediations for example

DESIGN REQUIREMENTS:
- Dark theme (gradient background: #0a0e27 to #131830)
- Card-based layout with glassmorphism effects
- Color scheme:
 * Primary green
 * Secondary purple
- Modern, professional look
- Animated "LIVE DATA" indicator (pulsing green badge)
- Hover effects on all cards (lift, glow, border color change)
- Responsive grid layout
- Mobile-responsive breakpoints at 768px
- Single HTML file with all CSS and JavaScript embedded
- No external dependencies

SPECIFIC DETAILS TO INCLUDE:
- Show actual counts from the data (don't hardcode numbers)
- Add timestamp showing when dashboard was generated
- Link to GitHub repository: https://github.com/prowler-cloud/prowler

OUTPUT:
Generate the complete HTML file and display it

​

Deployment Options

​

1. Prowler Cloud MCP Server

• No installation required.
• Managed and maintained by Prowler team.
• Authentication to Prowler Cloud or Prowler App (self-managed) via API key or JWT token.

​

2. Local STDIO Mode

• Runs as a subprocess of your MCP client.
• Possibility to connect to a self-hosted Prowler App (e.g. self-hosted Prowler App).
• Authentication to Prowler Cloud or Prowler App (self-managed) via environment variables.
• Requires Python 3.12+ or Docker.

​

3. Self-Hosted HTTP Mode

• Full control over deployment.
• Possibility to connect to a self-hosted Prowler App (e.g. self-hosted Prowler App).
• Authentication to Prowler App (self-managed) via API key or JWT token.
• Requires Python 3.12+ or Docker.

​

Requirements

• Prowler Cloud account and API key (only for Prowler Cloud/App features)

• Python 3.12+ or Docker
• Network access to:
  • https://hub.prowler.com (for Prowler Hub)
  • https://docs.prowler.com (for Prowler Documentation)
  • Prowler Cloud API or self-hosted Prowler App API (for Prowler Cloud/App features)

​

Next Steps