Stigmer MCP Server

by stigmer Your server? Claim it

answering

Stigmer is answering right now. Last checked 9 min ago. It exposes 8 tools. Last commit 6 Aug 2026.

Execution graph of AWS: verified contracts, least-privilege IAM policies, pre-flight authorization.

Uptime history 44 days of history

44 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

215 ms

Response time

average over 24h

Stars

last commit 6 Aug 2026

What the code does

We read the source, 19 h ago · tools taken from the live server · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Page executes code built at runtime landing.html:734

  list.innerHTML = hot.length ? hot.map((r, i) => {

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 9 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add stigmer-mcp --transport http https://stigmer.network/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "stigmer-mcp": {
      "url": "https://stigmer.network/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.stigmer-mcp]
url = "https://stigmer.network/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "stigmer-mcp": {
      "url": "https://stigmer.network/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "stigmer-mcp": {
      "url": "https://stigmer.network/mcp"
    }
  }
}

Available tools 8

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

authorize

authorize

Pre-flight authorization check for an AWS operation. Resolves the IAM actions the operation requires, then asks AWS's own policy simulator (SimulatePrincipalPolicy) whether the current role (or a given principal) allows them. Returns resolution (exact|partial|unresolved) and evaluation (allowed|denied|unknown) as separate fields. Requires AWS credentials; without them evaluation=unknown with the reason.

methods

list_methods

List all methods for a given library or service. Use after list_services to drill into a specific one.

policy

policy

Generate a least-privilege IAM policy for an AWS workflow. Pass a named workflow, explicit IAM actions, or a description. Returns the exact policy with confidence tier and any unresolved operations.

query

query

Search for verified method contracts for any library. Pass any text -- library name, method, what you're building, or an error you hit.

register

Register a fix. Three actions: confirm (it worked), append_thread (variant worked), new_receipt (nothing matched, I fixed it).

services

list_services

List all libraries and services that have verified method contracts. Use this first to discover what's available, then query for specific methods.

verify

verify

Feed a generated policy back to AWS's own policy evaluation engine (SimulateCustomPolicy) and confirm it grants exactly the intended operations and nothing extra. Returns verified (True|False|unknown), grants_all, grants_extra. Requires AWS credentials; without them verified=unknown with the reason. Wildcarded operations are expanded to concrete actions first.

workflows

list_workflows

List the curated named workflows that can generate least-privilege IAM policies.

Endpoints

URL	Transport	State	Latency	Checked
https://stigmer.network/mcp	streamable-http	answering	233 ms	9 min ago

Alternatives to Stigmer

same job, measured the same way

cloud-audit

by gebalamariusz

AWS security scanner with attack chain detection, IAM privilege escalation, and fixes

313 installs/wk local only

Shieldly Io

by shieldly-io

AI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation.

38 installs/wk local only

OpenClaw FinOps

by maryadawson-code

Verified cloud cost forecasting for AI agents. AWS, GCP, Azure pricing matrix.

answering

IntegrityPulse FinOps

by maryadawson-code

Verified cloud cost forecasting for AI agents. AWS, GCP, Azure pricing matrix.

1 tools answering

ThoughtProof

by thoughtproof

Pre-action gate: verify before pay/trade/write/deploy. execute=true only on ALLOW.

1 130 installs/wk local only

Runeward

by runewardd

Governed execution cells for AI agents: Docker/K8s sandboxes with policy, audit, and approvals.

local only

Google Apps Script MCP

by a1-x-tech

MCP server for the Google Apps Script API: projects, code, versions, deployments and executions.

45 installs/wk local only

Wraps

by wraps

Search the Wraps docs and estimate AWS SES costs. Public, read-only, no authentication.

4 tools answering

Stigmer — questions

Answers built from our own checks of this server.

What can Stigmer do?

It exposes 8 tools, read directly from the server on our last check. Among them: authorize, list_methods, list_services, list_workflows, policy, query and 2 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Stigmer working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 215 ms. The bar chart above shows every period we have measured.

How do I connect Stigmer?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Stigmer need an API key?

No. Stigmer completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 8 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Stigmer?

It answers our handshake in 215 ms on average, which is faster than 63% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Stigmer open source?

We cannot say either way: written in Python and 0 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.