@aaa-sentinel/mcp-server 0.6.0 → 0.7.0

package/README.md

@@ -109,8 +109,9 @@ status as plain JSON.
 | `list_cost_anomalies` | `accountId?` | `reports:read` | Business |
 | `get_security_overview` | — | `security:read` | Pro + security add-on |
 | `get_security_score` | `accountId` | `security:read` | Pro + security add-on |
-| `list_security_findings` | `accountId`, `source?` | `security:read` | Pro + security add-on |
+| `list_security_findings` | `accountId`, `source?`, `category?` | `security:read` | Pro + security add-on |
 | `get_security_critical_changes` | `accountId` | `security:read` | Pro + security add-on |
+| `list_security_vulnerabilities` | `accountId` | `security:read` | Pro + security add-on |
 | `get_security_conformance` | `accountId` or `clientId` | `security:read` | Pro + security add-on |
 | `get_account` | `accountId` | `accounts:read` | Pro |
 | `get_account_monthly_costs` | `accountId` | `accounts:read` | Pro |

package/dist/cli.js

@@ -5982,6 +5982,7 @@ function defineTool(def) {
 }
 var SAVINGS_TYPES = ["compute", "storage", "network", "database", "serverless", "governance"];
 var SECURITY_SOURCES = ["own", "corroborated", "securityhub", "guardduty", "defender", "scc"];
+var SECURITY_CATEGORIES = ["security_network", "security_exposure", "security_encryption", "security_iam", "security_logging", "security_secrets"];
 var AGENT_STATUSES = ["proposed", "pending_approval", "pending_second_approval", "approved", "executing", "completed", "failed", "cancelled", "expired"];
 var BillingPeriod = string2().regex(/^\d{4}-(0[1-9]|1[0-2])$/, "Use YYYY-MM");
 var ACCOUNT_ID = { type: "string", description: "Account identifier, as returned by list_accounts." };
@@ -6138,7 +6139,7 @@ var TOOLS = [
   }),
   defineTool({
     name: "list_security_findings",
-    description: "List the security findings of the latest security scan of one account (up to 500, most severe first), with attack chains and a diff against the previous scan. Requires the security:read scope, the Pro plan and the security add-on on that account.",
+    description: 'List the security findings of the latest security scan of one account (up to 500, most severe first), with attack chains and a diff against the previous scan. Use category "security_iam" for the permissions view: effective administrators, unused identities, keys and service accounts, granted permissions that are not used, and assignments to deleted identities. Requires the security:read scope, the Pro plan and the security add-on on that account.',
     inputSchema: {
       type: "object",
       properties: {
@@ -6147,16 +6148,25 @@ var TOOLS = [
           type: "string",
           enum: [...SECURITY_SOURCES],
           description: "Filter by origin: own rules, corroborated, or a native tool (optional)."
+        },
+        category: {
+          type: "string",
+          enum: [...SECURITY_CATEGORIES],
+          description: 'Filter by rule category (optional); "security_iam" is the permissions view.'
         }
       },
       required: ["accountId"]
     },
-    argsSchema: object({ accountId: string2().min(1), source: _enum(SECURITY_SOURCES).optional() }),
-    handler: async ({ accountId, source }, config2) => apiGet("/v1/security/findings", { accountId, source }, config2)
+    argsSchema: object({
+      accountId: string2().min(1),
+      source: _enum(SECURITY_SOURCES).optional(),
+      category: _enum(SECURITY_CATEGORIES).optional()
+    }),
+    handler: async ({ accountId, source, category }, config2) => apiGet("/v1/security/findings", { accountId, source, category }, config2)
   }),
   defineTool({
     name: "get_security_critical_changes",
-    description: "List the critical configuration changes of the last 7 days in one AWS account, read from CloudTrail (up to 100, newest first): public bucket or snapshot, remote admin open to the internet, logging turned off, root use, admin granted. Each comes with who made it and, for rule-backed changes, whether a re-check confirmed the risk. Accounts outside AWS, or without the security add-on, return supported false and an empty list. Requires the security:read scope and the Pro plan or above.",
+    description: "List the critical configuration changes of the last 7 days in one account (up to 100, newest first), read from CloudTrail in AWS, the activity log in Azure or the Admin Activity audit logs in GCP: public bucket, storage or snapshot, remote admin open to the internet, logging turned off, root use, admin granted. Each comes with who made it and, for rule-backed changes, whether a re-check confirmed the risk. Accounts without the security add-on return supported false and an empty list. Requires the security:read scope and the Pro plan or above.",
     inputSchema: {
       type: "object",
       properties: { accountId: { type: "string", description: "Account identifier, as returned by list_accounts." } },
@@ -6165,6 +6175,17 @@ var TOOLS = [
     argsSchema: object({ accountId: string2().min(1) }),
     handler: async ({ accountId }, config2) => apiGet("/v1/security/critical-changes", { accountId }, config2)
   }),
+  defineTool({
+    name: "list_security_vulnerabilities",
+    description: "List the vulnerabilities (CVEs) that the cloud native scanner already found in one account (Amazon Inspector or ECR basic scanning, Microsoft Defender for Cloud, GCP Artifact Analysis and VM Manager), up to 200, highest priority first. Each one has the cloud severity and an effective severity that rises when the resource is exposed to the internet, has a known exploit or is unused according to a cost rule (low CPU is shown as context only). AAA Sentinel does not scan on its own: tools shows whether each scanner is active, absent or could not be read, truncated whether the cloud has more than the cap, and partial why the list may be incomplete (scanner missing in some regions or resource types listed in uncovered, failed reads, time budget, unreadable entries, expired rows). Amazon Inspector only sees image use on ECS and EKS: when the account has container Lambdas, App Runner services or images not in use there, uncovered.gaps says ecr_images_outside_ecs_eks and those images come last with imageInUse false. An account without the security add-on returns access teaser and an empty list, which does not mean it has no vulnerabilities. bySeverity counts the effective severity. Requires the security:read scope and the Pro plan or above.",
+    inputSchema: {
+      type: "object",
+      properties: { accountId: { type: "string", description: "Account identifier, as returned by list_accounts." } },
+      required: ["accountId"]
+    },
+    argsSchema: object({ accountId: string2().min(1) }),
+    handler: async ({ accountId }, config2) => apiGet("/v1/security/vulnerabilities", { accountId }, config2)
+  }),
   defineTool({
     name: "get_security_conformance",
     description: "Get CIS benchmark coverage for one account, or for every account of a managed client (clientId, Business plan). Pass exactly one of accountId or clientId. Requires the security:read scope, plus reports:read when using clientId.",
@@ -6516,7 +6537,7 @@ function findTool(name) {
 
 // src/protocol.ts
 var SERVER_NAME = "aaa-sentinel-mcp";
-var SERVER_VERSION = "0.6.0";
+var SERVER_VERSION = "0.7.0";
 var SUPPORTED_PROTOCOL_VERSIONS = ["2025-06-18", "2025-03-26", "2024-11-05"];
 var PARSE_ERROR = -32700;
 var INVALID_REQUEST = -32600;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aaa-sentinel/mcp-server",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Read-only MCP server for AAA Sentinel: query cloud costs, savings, security posture, AI spend, uptime monitoring, the remediation agent and managed clients from an AI assistant",
   "license": "MIT",
   "type": "module",