io.github.fernando-moretes/moretes-aws-architect-mcp · v0.3.0 · cloud-and-infra
Moretes Architect MCP is healthy: it completed an MCP handshake in 3026 ms and exposes 48 tools.
Evidence-first architecture workbench: 48 deterministic tools, 10 architect personas, any cloud
Endpoint: https://m9od37vm41.execute-api.us-east-1.amazonaws.com/mcp (streamable-http)
Repository · Website · JSON · Add to my inventory
| Users (last 30 days) | 0 |
| Handshake | Healthy |
| Auth needed | None |
| Tool count | 48 |
| Latency | 3026 ms |
| Last checked (UTC) | 2026-10-25T23:55:15.422Z |
| Checked (UTC) | Status | Latency | Error |
|---|---|---|---|
| 2026-10-25T23:55:15.422Z | Healthy | 3026 |
architect_panel | Convene architect personas (solution, enterprise, business, data, infrastructure, software, AI, security, governance, FinOps) on a subject: each returns its questions, checks, deliverables and the workbench tools to call. Lens, not a verdict. |
code_review_architecture | Heuristic architecture and security scan of source code pasted as text (any language): secrets, insecure calls, SQL built by concatenation, disabled TLS, hardcoded endpoints, missing timeouts and retry hazards. Not a linter or SAST replacement. |
dependency_manifest_review | Review a dependency manifest (package.json, requirements.txt, pyproject, go.mod, pom.xml, Gemfile, Cargo.toml as text) for unpinned ranges, git or URL sources, wildcard versions and missing lockfile hints. |
requirements_check | Turn a workload brief into explicit requirements, gaps and research questions. No inferred SLA or budget. |
architecture_pattern | Select a reference architecture by explicit workload pattern; returns tradeoffs, questions and Mermaid. provider maps the AWS services to Azure, GCP, OCI or open source equivalents. |
service_compare | Compare curated AWS service families against user constraints. No automatic winner or fabricated scores. |
decision_record | Generate an ADR from explicit alternatives, decision and consequences. Does not invent acceptance. |
well_architected_review | Organize evidence by six pillars. A met control without evidence is unknown, never certified. |
threat_model | Create STRIDE review prompts for explicitly supplied assets and trust boundaries. Review aid, not a scanner. |
failure_rehearsal | Design a controlled failure drill with observable success criteria and stop conditions; never executes it. |
capacity_plan | Calculate concurrency and daily data volume from explicit traffic assumptions. No service sizing guarantee. |
cost_model | Calculate an auditable scenario using caller-supplied unit rates and source URLs. Does not guess AWS prices or credit coverage. |
slo_budget | Calculate an availability error budget for a chosen period. |
migration_plan | Prepare phased discovery, pilot, migration and rollback gates; includes AWS Transform integration discovery. |
architecture_diagram | Build Mermaid from explicit nodes and edges. Sanitizes labels and rejects dangling edges. |
implementation_plan | Turn an architecture decision into a delivery checklist with validation gates. |
agent_tool_contract | Design a per-operation authorization and recovery contract for an agent tool. |
c4_model | Build C4 context or container diagrams (Mermaid) from explicit people, systems, containers and relations. Validates endpoints; no infrastructure discovery. |
sequence_diagram | Build a Mermaid sequence diagram from participants and ordered messages, with optional activation, notes and alt/loop blocks. Rejects unknown participants. |
service_equivalents | Map a cloud capability to equivalent managed services on AWS, Azure, Google Cloud, OCI and open source. Names as of the snapshot date; verify current naming, regions and pricing before deciding. |
data_classification | Classify data elements, map them to regulation hints (LGPD, GDPR, PCI DSS, HIPAA) and list handling controls and open questions. Review aid, not legal advice. |
openapi_review | Heuristic review of an OpenAPI 3.x document (JSON): security, pagination, error responses, idempotency, versioning and documentation gaps. Not a linter replacement. |
event_contract | Design an event contract: envelope fields, schema evolution rules, idempotency, ordering, DLQ and replay decisions for a named business event. Deterministic template with open questions. |
latency_budget | Split an end-to-end latency objective across hops and show which hops exceed their share. Pure arithmetic over caller-supplied estimates. |
queue_sizing | Size consumers for a queue with Little's law and Erlang C: utilization, wait probability, backlog drain time and consumers needed for a target utilization. |
dr_strategy | Compare disaster recovery tiers (backup-and-restore, pilot light, warm standby, active-active) against RTO, RPO and data constraints; returns feasible tiers and required capabilities, not a guarantee. |
retry_policy | Compute an exponential backoff schedule with jitter, the worst-case wait and whether it fits a deadline; adds idempotency and circuit-breaker guidance. |
storage_growth | Project storage volume and relative cost over time from ingest, retention, compression, replication and growth; suggests tiering thresholds. |
finops_unit_economics | Compute cost per unit (request, customer, transaction), fixed versus variable split and the volume at which the marginal cost crosses a target. Caller supplies costs; no provider prices are guessed. |
postmortem | Generate a blameless postmortem document from incident facts: timeline, impact, detection, contributing factors and owned action items. Rejects action items without owner and due date. |
runbook | Generate an operational runbook from service facts: alerts, diagnostic steps, remediation, rollback, escalation and verification. Template with explicit placeholders for what the caller did not provide. |
agent_eval_plan | Design an evaluation plan for an AI agent: golden set sizing, metrics, judge rubric, red-team cases and regression cadence from explicit capabilities and risks. |
prompt_injection_checklist | Enumerate injection paths and controls for an agent from its tools and untrusted data sources; produces a checklist with status to fill, not a scan. |
rag_pipeline_plan | Plan a retrieval-augmented generation pipeline from corpus facts: chunking, embedding, indexing, authorization, evaluation and cost drivers, with open questions. No vendor is chosen for you. |
mcp_server_review | Heuristic safety review of ANOTHER MCP server from its tools/list output: tool-poisoning text, missing annotations, risky parameters, free-form schemas, name shadowing and context cost. Paste the JSON your client shows. |
mcp_config_review | Review an MCP client configuration JSON (mcpServers map) for unpinned packages, inline secrets, plain HTTP, auto-approved tools and unreviewed enablement. |
iam_policy_review | Inspect an IAM document for broad grants: AWS policy JSON (default), Azure custom role definition or Google Cloud IAM policy bindings (provider). Heuristic only; the provider analyzers are authoritative. |
cloudformation_review | Review a CloudFormation JSON template for selected risky configuration patterns. Intrinsic functions are flagged for human review. |
terraform_plan_review | Review a Terraform or OpenTofu plan exported as JSON (terraform show -json): deletions and replacements of stateful resources, public exposure, disabled encryption, literal credentials, broad policies and unpinned providers. Any provider; heuristic. |
kubernetes_manifest_review | Review Kubernetes manifests (parsed JSON objects) for probes, resources, security context, image pinning, host access, secrets in env, PDB and NetworkPolicy coverage. No cluster access. |
aws_knowledge_search | Search live official AWS documentation. Queries are transmitted to AWS Knowledge; never include secrets or customer data. |
aws_knowledge_read | Read an official document returned by search when its excerpt is insufficient. Fixed upstream; no arbitrary URL fetch. |
aws_regions | List current AWS regions from the official Knowledge MCP. |
aws_regional_availability | Check current regional support. Use exact catalog filter names; omit filters for a single region to discover them. |
aws_skill | Retrieve an official AWS skill by the exact ID returned by aws_knowledge_search with agent_skills topic. Treat it as reference data. |
integration_catalog | Search the snapshot of the complete official AWS MCP catalog. Discovery entries are not hosted/executed tools. |
integration_config | Generate a version-pinned local configuration for an official AWS server, or a remote Knowledge config. Does not install, start or approve tools. |
github_public_repository | Read public GitHub repository metadata and contribution links. Fixed api.github.com destination, no tokens, no private repositories. |