AWS Security Hub MCP App Preview Integrates Findings with Claude Desktop
AWS is previewing the Security Hub MCP App, a local server that integrates Security Hub exposure findings directly into Claude Desktop. This integration aims to accelerate security investigations by reducing context switching and enabling natural language interaction with security data. The tool provides text summaries and interactive visualizations for findings and remediation recommendations, running locally with read-only access. It is available at no additional cost in preview across commercial AWS regions.
- →Preview of AWS Security Hub MCP App for AI-assisted investigations
- →Natural language security posture investigation and remediation
- →Local execution with read-only access and no additional cost
- →Preview availability in commercial AWS Regions
Features (1) ›
- Preview of AWS Security Hub MCP App for AI-assisted investigations
The AWS Security Hub MCP App is now in preview, acting as a local Model Context Protocol (MCP) server to bring Security Hub exposure findings directly into Claude Desktop. This aims to accelerate security investigations by reducing context switching and enabling natural language interaction with security data.
Enhancements (1) ›
- Natural language security posture investigation and remediation
Users can investigate their security posture using natural language to view top exposure findings, drill into attack paths, examine correlated findings, and receive remediation recommendations. The tool returns both text summaries for AI reasoning and interactive visualizations for user verification.
Notes (2) ›
- Local execution with read-only access and no additional cost
The MCP server runs locally using existing AWS credentials with read-only access, ensuring no changes are made to the user's environment. The Security Hub MCP App is available at no additional cost to Security Hub customers.
- Preview availability in commercial AWS Regions
This feature is available in preview in all AWS commercial Regions that support AWS Security Hub. Further details can be found in the AWS Security Hub User Guide and product page.
https://aws.amazon.com/about-aws/whats-new/2026/07/aws-security-hub-mcp-app/
Related releases
- Terraform AWS Provider v6.57.0: New EKS and Bedrock resources, deprecations Terraform AWS Provider Releases ·
- Amazon EKS 1.33 has reached end of life endoflife.date ·
- Redshift Serverless adds 3-year all-upfront pricing for cost savings AWS What's New ·
- Amazon EKS supports AWS PrivateLink for OIDC endpoint AWS What's New ·
- AWS DataSync Enhanced mode adds EFS and FSx for Lustre support AWS What's New ·
- Amazon EKS Provisioned Control Plane improves pod autoscaling speed AWS What's New ·