Flagged by the security agent. Hidden from the directory pending manual review.
Cloud security insights, guardrail guidance, and compliance checking via Dawnguard.
This config will be passed to Cursor on install. Inspect `command`, `args`, and `env` before continuing.
## Features
Tools
validate — "Is everything connected?"
Quickly checks that the Dawnguard integration is up and your account is properly logged in. Run this first if something seems off.
list_architectures — "What cloud environments have been scanned?"
Shows a list of your cloud setups (Azure/AWS) that Dawnguard has already scanned, including when the last scan happened.
query_insights — "What issues were found?"
The main tool for exploring findings from your cloud scans. You can ask things like "show me the top security issues" or "what problems exist in this resource group?" — and filter by cloud service, region, severity, and more.
guardrail_guidance — "What rules are we following?"
Shows the policies and rules your organisation has set up — things like required tags, naming conventions, and security standards. Also shows global best-practice frameworks your team has opted into.
design_architecture — "How should we build this the right way?"
Describes how a new cloud workload or service should be designed to follow your organisation's standards and security rules — before you build it.
insight_operations — "Tell me more about this finding"
View full details on a specific security finding, add comments, and browse available filter options for insights.
metrics_operations — "What does my security dashboard look like?"
Returns your security posture dashboard: insight counts, severity breakdown, trend data, and personalised summaries.
cloud_connection_operations — "What cloud accounts are connected?"
Lists your connected Azure subscriptions and AWS accounts with scan status. Admins can also trigger a new discovery scan from here.
architecture_operations — "Show me my draft architectures"
Lists draft architectures and lets you trigger insight generation for newly discovered cloud environments.
notification_operations — "Do I have any new notifications?"
Lists your unread notifications and marks them as read.
chat_history_operations — "Show my recent Dawnguard conversations"
Browse and retrieve past chat sessions from your Dawnguard history.
check_insight_in_context — "Does this issue also appear in my design or code?"
Checks whether a security finding from a live scan also surfaces in a design document or code context — useful when validating Terraform or architecture drafts against known issues.
policy_documents — "What policy documents do we have?"
Browse and retrieve the policy documents your organisation has uploaded to Dawnguard.
compliance_report — "Give me a compliance report"
Generates a structured compliance posture report combining your dashboard metrics, guardrail inventory, and insight analytics in one place.
get_active_guardrails — "List our active guardrails"
Returns a structured list of your organisation's currently active guardrails — a focused view used when generating or validating infrastructure.
get_generation_constraints — "What constraints apply when generating infrastructure?"
Returns document-derived generation constraints drawn from your policy documents, used to guide Terraform generation and architecture design.
bulk_update_insight_treatment — "Mark these findings as accepted risk"
Update the treatment status on multiple findings at once — useful for triaging a batch of low-risk or accepted exceptions.
bulk_assign_insight_users — "Assign these findings to the networking team"
Assign one or more team members to a set of findings in a single action.
policy_gap_analysis (admin) — "Where are the gaps between our policies and guardrails?"
Compares your active guardrails against uploaded policy documents to surface coverage gaps, expired documents, and upcoming expirations.
Admin tools (admin role required)
admin_manage_guardrails , admin_manage_documents , admin_manage_teams , admin_manage_scopes , admin_list_members , admin_update_member_role , admin_query_activity_logs — manage your organisation's guardrails, policy documents, teams, scopes, members, and audit logs directly from your AI assistant.
Prompts (Pre-built conversation starters)
These are ready-made ways to kick off common tasks — just select one and go:
Security & findings
• Check open issues — See what findings are currently unresolved.
• Top issues summary — Get a ranked list of the biggest problems.
• Look up a specific resource — Paste an Azure or AWS resource ID to see its findings.
• Group issues by rule — See which guardrail is causing the most findings.
• Get a fix plan — See step-by-step remediation guidance for findings.
• Incident response — Step-by-step guidance for a specific flagged resource.
• Security posture briefing — Get a dashboard summary with metrics and trend data.
• Trend analysis — See how your security posture has changed over time.
• Bulk triage — Assign and update treatment on a batch of findings at once.
• Daily standup — Check notifications, new insights, and action items.
Architecture & design
• Design a secure architecture — Get guidance on building something new safely.
• Architecture security review — Full security review of a specific scanned architecture.
• Trigger cloud discovery — Kick off a scan on a cloud connection and review what changed.
Infrastructure as code
• Generate Terraform — Get infrastructure-as-code that follows your organisation's rules.
• Validate Terraform — Check your existing Terraform against your guardrails before deploying.
Policies & compliance
• Policy refresh — Review and update your organisation's policy documents.
• Upload a policy document — Guide for uploading new policy documents with proper metadata.
Admin & team management
• Tenant administration — Manage teams, scopes, and member roles.
• New member onboarding — Assemble a structured onboarding briefing for a new team member.
Getting started
• Onboarding guide — New to Dawnguard? Start here.
• Validate your setup — Confirm the integration is working end-to-end.
• Understand remote workflows — Learn how to use Dawnguard without installing anything locally.
## Setup
```json
{
"name": "dawnguard-mcp",
"description": "Cloud security insights, guardrail guidance, and compliance checking",
"url": "https://api.dev.dawnguard.app/mcp/${CUSTOMER_ID}",
"type": "http",
"auth": {
"type": "oauth",
"scopes": ["openid", "profile", "email"]
}
}