Back to MCP Trust Indexm8ven
43
/ 100
4 days ago
glama

IAM Sentinel MCP Server

Enables auditors to scan cloud IAM policies for privilege-escalation paths, wildcards, and risky grants directly within Cursor or Claude Code, using a deterministic rule engine that runs entirely on local infrastructure.

→ Pratikchandrathakur/IAM-Sentinel· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 5 credentials: LICENSE_KEY, JWT_SECRET, JWT_PUBLIC_KEY, LICENSE_PUBLIC_KEY, IAM_SENTINEL_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configLOG_LEVEL
configDATA_DIR
configFINDINGS_DB_PATH
configOLLAMA_BASE_URL
configVLLM_API_URL
configDEFAULT_OLLAMA_MODEL
configDEFAULT_VLLM_MODEL
configLLM_TIMEOUT_SECONDS
configLLM_MAX_RETRIES
configLLM_RETRY_BACKOFF_SECONDS
configLLM_NARRATIVE_ENABLED— No GPU / macOS? Set =false — you still get every deterministic finding.
configSERVER_PORT
configSERVER_HOST
configAUTH_ENABLED— "env": { "": "false", "LLM_NARRATIVE_ENABLED": "false" }
configIAM_SENTINEL_API_KEYS
🔐 secretLICENSE_KEY
configSSO_ENABLED
configJWT_ALG
🔐 secretJWT_SECRET
🔐 secretJWT_PUBLIC_KEY
configJWT_PUBLIC_KEY_FILE
configJWT_ISSUER
configJWT_AUDIENCE
configJWT_ACTOR_CLAIM
configJWT_ROLE_CLAIM
configJWT_ROLE_MAP
configTLS_CERT_FILE
configTLS_KEY_FILE
configCORS_ALLOW_ORIGINS
configOFFLINE_MODE
configGITHUB_STEP_SUMMARY
configCUSTOM_RULES_FILE
🔐 secretLICENSE_PUBLIC_KEY
configSENTINEL_URL
🔐 secretIAM_SENTINEL_API_KEY
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/pratikchandrathakur-iam-sentinel-zo1lt7)](https://m8ven.ai/mcp/pratikchandrathakur-iam-sentinel-zo1lt7)
commit: 21d56f8494fff632476b81a8c174b38e22072c92
code hash: a70f5b98c19b2c1e25e3cdac7cdced96803604d121665c0983759efb1a51c666
verified: 7/27/2026, 10:24:56 AM
view raw JSON →