Server Variance Authority

S.V.A. MCP server

Ask the SVA from your agent

  1. Add it to Claude CodeOne command. It is read-only and needs no key.
    claude mcp add --transport http sva https://your-sva-site/api/mcp
  2. Or any MCP clientCursor, VS Code, Windsurf and others take a remote HTTP server in their MCP config:
    {"mcpServers":{"sva":{"type":"http","url":"https://your-sva-site/api/mcp"}}}
  3. Ask it things“Pods are crash-looping in prod. Which read-only skills should I start with?” Your agent can call:
    • search_skills finds skills for an incident or task, with safety labels
    • get_skill a skill's full case file and install command
    • skills_for_incident skills per phase: detect, triage, mitigate, postmortem
    • get_runbook step-by-step handbooks, read-only steps first
    • get_stack stack bundles with one install command

All skills / AWS

aws-security

Read-only

Reviews which AWS security services you use and where coverage overlaps or has gaps (WAF, Network Firewall, VPC endpoints), with cost notes.

aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-securityAudited · 3 partners pass
Stars
★ 2.9k
Installs
4.2k
Last commit
License
Apache-2.0
Partner audits✓ Gen Agent Trust Hub · SAFE✓ Socket✓ Snyk · LOW

Installs and audits via skills.sh. Their audits are kept separate from our label.

Why this label

Label from the automated scanner. Not yet reviewed by a person.

Helps with

Phases

Postmortem

Install

npx skills add aws/agent-toolkit-for-aws --skill aws-security

S.V.A. field guide

How to use aws-security

  1. Install the skillRun this in your project. It adds the SKILL.md files where your agent looks for them.
    npx skills add aws/agent-toolkit-for-aws --skill aws-security
  2. Reference it in your agentClaude Code, Codex, Cursor and other agents pick installed skills up on their own. To be sure, name it in your request:
    Use the aws-security skill. Here is the task: …
  3. Put it to workHand it a real job and read what it plans before it runs anything. Check the risk label first: anything above read can change state.