AWS Security Hub MCP App Preview Integrates Findings with Claude Desktop
AWS is previewing the Security Hub MCP App, a local server that integrates Security Hub exposure findings directly into Claude Desktop. This integration aims to accelerate security investigations by reducing context switching and enabling natural language interaction with security data. The tool provides text summaries and interactive visualizations for findings and remediation recommendations, running locally with read-only access. It is available at no additional cost in preview across commercial AWS regions.
- →Preview of AWS Security Hub MCP App for AI-assisted investigations
- →Natural language security posture investigation and remediation
- →Local execution with read-only access and no additional cost
- →Preview availability in commercial AWS Regions
Features (1) ›
- Preview of AWS Security Hub MCP App for AI-assisted investigations
The AWS Security Hub MCP App is now in preview, acting as a local Model Context Protocol (MCP) server to bring Security Hub exposure findings directly into Claude Desktop. This aims to accelerate security investigations by reducing context switching and enabling natural language interaction with security data.
Enhancements (1) ›
- Natural language security posture investigation and remediation
Users can investigate their security posture using natural language to view top exposure findings, drill into attack paths, examine correlated findings, and receive remediation recommendations. The tool returns both text summaries for AI reasoning and interactive visualizations for user verification.
Notes (2) ›
- Local execution with read-only access and no additional cost
The MCP server runs locally using existing AWS credentials with read-only access, ensuring no changes are made to the user's environment. The Security Hub MCP App is available at no additional cost to Security Hub customers.
- Preview availability in commercial AWS Regions
This feature is available in preview in all AWS commercial Regions that support AWS Security Hub. Further details can be found in the AWS Security Hub User Guide and product page.
https://aws.amazon.com/about-aws/whats-new/2026/07/aws-security-hub-mcp-app/
Related releases
- Amazon Aurora DSQL adds multi-Region cluster support in four more Regions AWS What's New ·
- CloudWatch adds managed Prometheus collectors AWS What's New ·
- Amazon EC2 C7i Instances Expand to New Regions AWS What's New ·
- EC2 C7i-flex instances now available in Europe (Milan) region AWS What's New ·
- AWS CodeDeploy Expands to Five New Regions AWS What's New ·
- Redis 8.0 end-of-life date moved to 2026-12-01 endoflife.date ·