Sold by: Wiz
Deployed on AWS
The Wiz Model Context Protocol (MCP) Server acts as an MCP-compatible service that translates plain-language queries into Wiz-specific operations, like querying resources, or assessing risks.
4.7
Overview
The Wiz Model Context Protocol (MCP) Server elevates the impact of Wiz's security offerings by providing a unified security data source, enhanced cloud visibility, and contextual intelligence. The MCP Server connects multiple security data sources through a central host and server setup, creating a single, contextual view of the security posture to simplify investigations and accelerate incident response and remediation. It offers instant access to cloud inventory, configurations, and security issues via a single host with a simple prompt. By enriching security investigations with precise business context, the MCP Server allows security teams to prioritize responses based on relevance, drastically improving the accuracy and effectiveness of threat mitigation. The Wiz MCP Server enhances Wiz Code by translating plain-language queries into powerful workflows, streamlining everything from issue discovery to pull request creation. Integrated with Wiz Defend, the MCP Server helps security teams identify and contain active threats faster with AI generated insights and action paths.
Highlights
- Unified security data source for cloud security posture.
- Completed visibility into cloud inventory, configurations, and security issues
- Contextual intelligence that enriches security investigations with context, enabling security teams to prioritize responses to critical threats.
Details
Sold by
Categories
Delivery method
Type
Supported services
Delivery option
v0.1.1s
Latest version
Operating system
Linux
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
This product is available free of charge. Free subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
n/a
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
v0.1.1s
Supported services: Learn more
- Amazon Bedrock AgentCore
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
We are excited to share that the Wiz Model Context Protocol (MCP) Server is now available in the new AWS Marketplace AI Agents and Tools category.
The Wiz Model Context Protocol (MCP) Server is an innovative implementation that enables any MCP-compatible, LLM-powered application to interact with Wiz using plain language. It unifies diverse security data sources into a single, contextual view of your cloud security posture. This empowers teams to gain instant access to cloud inventory, configurations, and security issues, facilitating real-time cloud investigations, blast radius assessments, and AI-driven remediation actions through natural language prompts.
Additional details
Usage instructions
To allow the Wiz Model Context Protocol (MCP) Server to access your Wiz tenant, you need to configure specific environment variables.
Steps to Configure Wiz MCP Integration:
Navigate to Integrations in Wiz:
1. In the Wiz console, go to the Connect to Wiz > Integrations page. 2. Under the "Security Data Management" section, choose Wiz MCP. 3. On the "New Wiz MCP Integration" page: Enter a Display Name. Keep the default API scopes (Recommended). Click Add Integration. 4. After creation, copy the generated Client ID and Client Secret. These are crucial for authentication.Set Environment Variables:
Add the Client ID and Client Secret using the --environment-variables flag in your deployment command.
--environment-variables '{ "WIZ_CLIENT_ID":"your_client_id", "WIZ_CLIENT_SECRET":"your_client_secret" }'
2. Using GUI for Host Agent Deployment:If you are deploying via AWS Console GUI, 1) Click "Use on Amazon Bedrock AgentCore" 2) Click "Host Agent" add these variables under the "Advanced configurations" section.
For more detailed instructions and customer-specific access, please refer to the official documentation at https://docs.wiz.io/docs/set-up-wiz-mcp-server (Wiz customer access only).
AWS command line examples:
- Create an agent/MCP server This command creates a new agent runtime for the Wiz MCP server. Ensure you replace placeholders like 'your AmazonBedrockAgentCoreRuntimeDefaultServiceRole arn', '{your wiz client id}', and '{your wiz client secret}' with your actual values.
aws bedrock-agentcore-control create-agent-runtime --region us-east-1
--agent-runtime-name "wiz-mcp-server-stateless"
--description "Wiz MCP server"
--agent-runtime-artifact '{
"containerConfiguration": {
"containerUri": "709825985650.dkr.ecr.us-east-1.amazonaws.com/wiz/wiz-mcp:v0.1.1-stateless"
}
}'
--role-arn "your AmazonBedrockAgentCoreRuntimeDefaultServiceRole arn"
--network-configuration '{ "networkMode": "PUBLIC" }'
--protocol-configuration '{ "serverProtocol": "MCP" }'
--environment-variables '{
"WIZ_CLIENT_ID": "{your wiz client id}",
"WIZ_CLIENT_SECRET": "{your wiz client secret}",
"Wiz_MCP_TRANSPORT": "http",
"Wiz_MCP_PORT": "8000",
"Wiz_MCP_HOST": "0.0.0.0"
}'
- List Agent Runtime Use this command to retrieve details about the created agent runtime. Replace '{your agentRuntimeId in the output of create command}' with the actual ID from the previous step.
aws bedrock-agentcore-control get-agent-runtime
--agent-runtime-id {your agentRuntimeId in the output of create command}
--region us-east-1
- List Agent Runtime Endpoints This command lists the endpoints associated with your agent runtime. Replace '{your agentRuntimeId in the output of create command}' with the actual ID.
aws bedrock-agentcore-control list-agent-runtime-endpoints
--agent-runtime-id {your agentRuntimeId in the output of create command}
--region us-east-1
- Invoke Agent Runtime This command invokes the agent runtime to perform an action, e.g., listing tools. Replace '{your agentRuntimeArn in the output of create command}' with the actual ARN.
PAYLOAD_JSON='{"jsonrpc": "2.0", "id": 1, "method": "tools/list", "params": { "_meta": { "progressToken": 1}}}' PAYLOAD_BASE64=$(echo -n "$PAYLOAD_JSON" | base64) AGENT_ARN={your agentRuntimeArn in the output of create command}
aws bedrock-agentcore invoke-agent-runtime
--agent-runtime-arn "${AGENT_ARN}"
--payload="${PAYLOAD_BASE64}"
--content-type "application/json"
--accept "application/json, text/event-stream"
--qualifier "DEFAULT"
"output.json"
Resources
Vendor resources
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Wiz provides an entirely new approach to cloud security that for the first time identifies the actual risks hidden in your cloud infrastructure.
A docker image for the Brave Search MCP server: the #1 solution for connecting LLMs to the Web.
By Wiz
All in one solution to reduce risk from code to runtime. Wiz Go includes 300 Cloud Advanced workloads, 150 Defend Ingestion Units (GBs), 100 Runtime Sensors, and 50 Code Active Developers per month.
Wiz provides an entirely new approach to cloud security that for the first time identifies the actual risks hidden in your cloud infrastructure.
Customer reviews
Caique C.
Wiz Feels Like Magic: Smooth, Agentless Security in One Unified Solution
Reviewed on Oct 15, 2026
Review provided by G2
What do you like best about the product?
I like how Wiz is built from the ground and everything works together smoothly as a single solution. It is easy to implement and to maintain, most of the capabilities works in a agentless fashion, I have never seen an advanced solution like Wiz, it really feels like magic.
What do you dislike about the product?
Not all the integrations and deployments can be implemented at scale, which makes it hard for big organizations to implement Wiz in a automatic way on every aspect. Another thing is the reporting piece, having CSVs and a poor PDF is not enough to document what is needed and create a document that let engineering and operations teams to understand what is the problem quickly to create a plan of action. Having to create something at your own, like a PowerBI dashboard should not be a requirement, that should be improved as a Wiz solution, not customer managed.
What problems is the product solving and how is that benefiting you?
Wiz is solving many problems in many aspects when it comes to having Security Visibility in the Cloud and it also helps a lot on how teams can prioritize by knowing exactly the context of each toxic combination instead of just another compliance need.
Dor N.
Excellent Value with an Intuitive UI and Top-Notch Support
Reviewed on Oct 14, 2026
Review provided by G2
What do you like best about the product?
The value this platform provides is excellent. The UI/UX is easy to use, and all the features are out in the open, nothing is hidden. Customer service and support are also among the best I’ve encountered.
What do you dislike about the product?
The price is very high, and every year we have to re-evaluate alternatives because it keeps increasing. Each time the cost goes up, we’re required to submit a new budget request, which makes it an ongoing challenge to plan and justify.
What problems is the product solving and how is that benefiting you?
Wiz solves the problem of “cloud resources tracking.” Today, with everything in the cloud, keeping track of resources, assets, pods, and internal apps security posture becomes almost unachievable without Wiz. It helps us stay on top of our security posture and supports us in scanning and evaluating our different cloud infrastructure assets.
Tomer L.
Clear Dashboards and Real-Time Alerts That Deliver
Reviewed on Oct 14, 2026
Review provided by G2
What do you like best about the product?
Good observability tool. The dashboard is clear and helpful, and the real-time alerts really work.
What do you dislike about the product?
It isn’t integrated deeply enough into our SLDC process; it feels more like a post-alert tool than something embedded throughout the workflow.
What problems is the product solving and how is that benefiting you?
It helps us review, monitor, and resolve security issues, keeping our organization environments secure.
Giorgio P.
Great Cloud Visibility and Faster Remediation, but Busy Dashboards and Half-Baked Workflows
Reviewed on Oct 13, 2026
Review provided by G2
What do you like best about the product?
I like the visibility into all of our cloud environment. And being able to break down issues into specific accounts. Also the 3 different agents that have been recently introduced. They allow for quicker remediations and also pen tests so we can find vulnerabilities we were not able to find on our own. One thing I believe that will set Wiz apart from the competitors is refining the AI's and also competing with cost compared to us using our own AI tools. The context matters a lot to having a proper remediation.
What do you dislike about the product?
The amount of data that is hidden from the users. I tried to find the total remediations of issues from 4 years back but that isn't saved. I understand it may cost a lot but it should be an option for some orgs. I also think that dashboards can get a bit busy and the integration of creating our own is a bit too daunting for the team. I also love the idea of workflows but its so half baked at this point and using Wiz's AI to create a workflow or diagnose them just doesnt work at this point. A lot of the remediations as well are very surface level and don't take into account downstream effects or acknowledge them with the remediations I have gathered from Green Agent.
What problems is the product solving and how is that benefiting you?
Saving us time and money. Also is a tool that gives us a lot of visibility into our environment.
Rick C.
Intuitive UI, Easy Support Cases, and Great Visibility Into Config & Vulnerability Issues
Reviewed on Oct 13, 2026
Review provided by G2
What do you like best about the product?
UI intuitive and useful. Opening support cases are easy. most needs are available with some connector or integration. have given us visibility to many config/vuln issues. Mika ai has been useful for finding collective information.
What do you dislike about the product?
Understanding near real-time updates and how long a reassessment of the configuration takes after a fix in the system has occurred. Really not much, account support team is on point with needs and provides answers quickly. Pricing of features.
What problems is the product solving and how is that benefiting you?
Segregation of resource ownership, with better visibility into configuration. Answers questions around findings and issues. Ability to create our own rules.