Sold by: Wiz
Deployed on AWS
The Wiz Model Context Protocol (MCP) Server acts as an MCP-compatible service that translates plain-language queries into Wiz-specific operations, like querying resources, or assessing risks.
4.7
Overview
The Wiz Model Context Protocol (MCP) Server elevates the impact of Wiz's security offerings by providing a unified security data source, enhanced cloud visibility, and contextual intelligence. The MCP Server connects multiple security data sources through a central host and server setup, creating a single, contextual view of the security posture to simplify investigations and accelerate incident response and remediation. It offers instant access to cloud inventory, configurations, and security issues via a single host with a simple prompt. By enriching security investigations with precise business context, the MCP Server allows security teams to prioritize responses based on relevance, drastically improving the accuracy and effectiveness of threat mitigation. The Wiz MCP Server enhances Wiz Code by translating plain-language queries into powerful workflows, streamlining everything from issue discovery to pull request creation. Integrated with Wiz Defend, the MCP Server helps security teams identify and contain active threats faster with AI generated insights and action paths.
Highlights
- Unified security data source for cloud security posture.
- Completed visibility into cloud inventory, configurations, and security issues
- Contextual intelligence that enriches security investigations with context, enabling security teams to prioritize responses to critical threats.
Details
Sold by
Categories
Delivery method
Type
Supported services
Delivery option
v0.1.1s
Latest version
Operating system
Linux
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
This product is available free of charge. Free subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
n/a
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
v0.1.1s
Supported services: Learn more
- Amazon Bedrock AgentCore
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
We are excited to share that the Wiz Model Context Protocol (MCP) Server is now available in the new AWS Marketplace AI Agents and Tools category.
The Wiz Model Context Protocol (MCP) Server is an innovative implementation that enables any MCP-compatible, LLM-powered application to interact with Wiz using plain language. It unifies diverse security data sources into a single, contextual view of your cloud security posture. This empowers teams to gain instant access to cloud inventory, configurations, and security issues, facilitating real-time cloud investigations, blast radius assessments, and AI-driven remediation actions through natural language prompts.
Additional details
Usage instructions
To allow the Wiz Model Context Protocol (MCP) Server to access your Wiz tenant, you need to configure specific environment variables.
Steps to Configure Wiz MCP Integration:
Navigate to Integrations in Wiz:
1. In the Wiz console, go to the Connect to Wiz > Integrations page. 2. Under the "Security Data Management" section, choose Wiz MCP. 3. On the "New Wiz MCP Integration" page: Enter a Display Name. Keep the default API scopes (Recommended). Click Add Integration. 4. After creation, copy the generated Client ID and Client Secret. These are crucial for authentication.Set Environment Variables:
Add the Client ID and Client Secret using the --environment-variables flag in your deployment command.
--environment-variables '{ "WIZ_CLIENT_ID":"your_client_id", "WIZ_CLIENT_SECRET":"your_client_secret" }'
2. Using GUI for Host Agent Deployment:If you are deploying via AWS Console GUI, 1) Click "Use on Amazon Bedrock AgentCore" 2) Click "Host Agent" add these variables under the "Advanced configurations" section.
For more detailed instructions and customer-specific access, please refer to the official documentation at https://docs.wiz.io/docs/set-up-wiz-mcp-server (Wiz customer access only).
AWS command line examples:
- Create an agent/MCP server This command creates a new agent runtime for the Wiz MCP server. Ensure you replace placeholders like 'your AmazonBedrockAgentCoreRuntimeDefaultServiceRole arn', '{your wiz client id}', and '{your wiz client secret}' with your actual values.
aws bedrock-agentcore-control create-agent-runtime --region us-east-1
--agent-runtime-name "wiz-mcp-server-stateless"
--description "Wiz MCP server"
--agent-runtime-artifact '{
"containerConfiguration": {
"containerUri": "709825985650.dkr.ecr.us-east-1.amazonaws.com/wiz/wiz-mcp:v0.1.1-stateless"
}
}'
--role-arn "your AmazonBedrockAgentCoreRuntimeDefaultServiceRole arn"
--network-configuration '{ "networkMode": "PUBLIC" }'
--protocol-configuration '{ "serverProtocol": "MCP" }'
--environment-variables '{
"WIZ_CLIENT_ID": "{your wiz client id}",
"WIZ_CLIENT_SECRET": "{your wiz client secret}",
"Wiz_MCP_TRANSPORT": "http",
"Wiz_MCP_PORT": "8000",
"Wiz_MCP_HOST": "0.0.0.0"
}'
- List Agent Runtime Use this command to retrieve details about the created agent runtime. Replace '{your agentRuntimeId in the output of create command}' with the actual ID from the previous step.
aws bedrock-agentcore-control get-agent-runtime
--agent-runtime-id {your agentRuntimeId in the output of create command}
--region us-east-1
- List Agent Runtime Endpoints This command lists the endpoints associated with your agent runtime. Replace '{your agentRuntimeId in the output of create command}' with the actual ID.
aws bedrock-agentcore-control list-agent-runtime-endpoints
--agent-runtime-id {your agentRuntimeId in the output of create command}
--region us-east-1
- Invoke Agent Runtime This command invokes the agent runtime to perform an action, e.g., listing tools. Replace '{your agentRuntimeArn in the output of create command}' with the actual ARN.
PAYLOAD_JSON='{"jsonrpc": "2.0", "id": 1, "method": "tools/list", "params": { "_meta": { "progressToken": 1}}}' PAYLOAD_BASE64=$(echo -n "$PAYLOAD_JSON" | base64) AGENT_ARN={your agentRuntimeArn in the output of create command}
aws bedrock-agentcore invoke-agent-runtime
--agent-runtime-arn "${AGENT_ARN}"
--payload="${PAYLOAD_BASE64}"
--content-type "application/json"
--accept "application/json, text/event-stream"
--qualifier "DEFAULT"
"output.json"
Resources
Vendor resources
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Wiz provides an entirely new approach to cloud security that for the first time identifies the actual risks hidden in your cloud infrastructure.
A docker image for the Brave Search MCP server: the #1 solution for connecting LLMs to the Web.
Wiz provides an entirely new approach to cloud security that for the first time identifies the actual risks hidden in your cloud infrastructure.
By Wiz
All in one solution to reduce risk from code to runtime. Wiz Go includes 300 Cloud Advanced workloads, 150 Defend Ingestion Units (GBs), 100 Runtime Sensors, and 50 Code Active Developers per month.
Customer reviews
Retail
Phenomenal Issue Visibility and Context—Mika AI Makes Troubleshooting Easy
Reviewed on Nov 06, 2026
Review provided by G2
What do you like best about the product?
Wiz is phenomenal at providing visibility into the issues that matter. The depth and context we can gather from an Issue help our team quickly identify the owner, pinpoint the root cause, and outline clear steps for remediation. Mika AI, Wiz's built-in assistant, has been a game changer for troubleshooting issues and for getting a deeper dive into specific functionality when we need it.
What do you dislike about the product?
One downside with Wiz is that it can feel like there’s almost too much information. Sometimes our peers joke that we’re going down the “Wiz rabbit hole,” because there are multiple ways to pull up the same details. This can be challenging when I’m investigating a finding that was deemed a false positive. In one case, the view I was in didn’t allow me to ignore the finding, so I had to pivot to a different view to access the same information and finish my task.
What problems is the product solving and how is that benefiting you?
Wiz has helped us solve multiple business problems. The biggest impact so far, especially with the latest Red Agent capability, is that we not only get a clear, big-picture view of our external exposure risks, but can also use Red Agent to validate a confirmed exploitable issue. That validation helps our teams prioritize what to remediate first.
Benoni C.
Immediate Agentless Cloud Visibility with Smart, Context-Driven Prioritization
Reviewed on Nov 05, 2026
Review provided by G2
What do you like best about the product?
Wiz stands out by delivering immediate, agentless visibility across the entire cloud environment without slowing development. Rather than overwhelming teams with isolated alerts, it relies on a unified Security Graph to surface “toxic combinations,” where vulnerabilities, network exposure, and overly broad permissions overlap. This context-driven prioritization helps security and DevOps teams quickly focus on what matters most and address the most critical, real-world risks.
What do you dislike about the product?
While Wiz is excellent for delivering broad cloud visibility, its agentless, snapshot-based architecture comes with inherent latency. As a result, it can be less effective at blocking active, real-time attacks than traditional agent-based endpoint tools. In addition, because it is strictly cloud-native, organizations with hybrid or on-premises environments often have to maintain separate security solutions for their physical assets.
Users also frequently mention a steep learning curve: the sheer volume of data and the complexity of the Security Graph can feel overwhelming at first, especially for smaller teams. Finally, Wiz’s enterprise-focused pricing model scales with the number of cloud workloads, which can lead to steep—and sometimes unpredictable—cost increases for rapidly growing organizations.
Users also frequently mention a steep learning curve: the sheer volume of data and the complexity of the Security Graph can feel overwhelming at first, especially for smaller teams. Finally, Wiz’s enterprise-focused pricing model scales with the number of cloud workloads, which can lead to steep—and sometimes unpredictable—cost increases for rapidly growing organizations.
What problems is the product solving and how is that benefiting you?
Wiz solves the critical problem of fragmented cloud security and alert fatigue by replacing disjointed, noisy tools with a single, unified platform. Traditional security tools overwhelm teams with isolated alerts and require performance-draining agents to be installed on every server, but Wiz uses an agentless, API-based approach to deliver complete visibility in minutes without slowing down workloads. By analyzing the environment through its Security Graph, it identifies "toxic combinations"—where vulnerabilities, network exposure, and excessive permissions intersect—filtering out the noise so teams can focus immediately on actual attack paths. This intelligent prioritization and consolidated visibility benefit organizations by saving security teams countless hours, eliminating critical blind spots, and enabling a "shift-left" approach where developers can seamlessly fix infrastructure and container issues before they are ever deployed to production.
Trushan B.
Complete visibility :- Effortless multi-cloud visibility without the headache of deploying agents.
Reviewed on Nov 04, 2026
Review provided by G2
What do you like best about the product?
The best part about Wiz is its agentless architecture, giving complete visibility across the cloud setup in minutes without bogging down resources.
What do you dislike about the product?
In some cases, it required manual investigation.
What problems is the product solving and how is that benefiting you?
Wiz solves the massive alert fatigue and fragmented visibility inherent in multi-cloud setups by connecting isolated vulnerabilities into actionable attack paths. we can frame the review around these specific problems and the business value they unlock
RAJESH R.
Scan All Cloud Resources in One Place for Effortless Asset Management
Reviewed on Nov 04, 2026
Review provided by G2
What do you like best about the product?
We can scan all cloud resources in one place, which is very helpful for managing our assets and keeping everything organized.
What do you dislike about the product?
In some cases and scenarios, I’ve sometimes noticed false positives.
What problems is the product solving and how is that benefiting you?
I’m a security engineer, and Wiz helps me monitor all my cloud assets in one place.
Vedavyas K.
Excellent Cloud Visibility with Room for On-Prem Improvements
Reviewed on Nov 03, 2026
Review provided by G2
What do you like best about the product?
I like most about Wiz is its ability to provide comprehensive visibility into our cloud environment and help identify security risks from a centralized platform. From a vulnerability management and red team perspective, it is especially useful for identifying vulnerabilities, misconfigurations, exposed assets, and potential attack paths. I appreciate how Wiz correlates different security findings and helps prioritize issues based on their actual risk and potential impact. It makes security assessments more efficient and helps us focus on the vulnerabilities that matter most.
What do you dislike about the product?
One limitation I have noticed with Wiz is its limited visibility into on-premises infrastructure compared to its cloud security capabilities. Since many organizations operate in hybrid environments, it would be beneficial if Wiz could provide better scanning and vulnerability assessment capabilities for on-premises assets as well. Currently, this creates a visibility gap and requires us to rely on additional security tools to assess and monitor our on-premises infrastructure. Improving support for on-premises asset discovery, vulnerability scanning, and security posture management would make Wiz a more comprehensive solution for organizations managing both cloud and traditional infrastructure.
What problems is the product solving and how is that benefiting you?
Before using Wiz, we faced challenges in getting a centralized view of vulnerabilities, misconfigurations, and security risks across our cloud infrastructure. Identifying critical issues and understanding their actual impact required reviewing findings from multiple sources and spending additional time on manual analysis.
With Wiz, we now have better visibility into our cloud environment, making it easier to identify vulnerabilities, discover misconfigurations, and understand potential attack paths. Its risk prioritization capabilities help our vulnerability management team focus on critical findings rather than spending time on low-impact issues. From a red team perspective, it also helps us gain better insights into the cloud attack surface and identify areas that may require further security assessment.
Overall, Wiz has improved our vulnerability assessment process, streamlined risk prioritization, and helped us make more informed security decisions. It saves investigation time and enables our team to focus more on addressing meaningful security risks.
With Wiz, we now have better visibility into our cloud environment, making it easier to identify vulnerabilities, discover misconfigurations, and understand potential attack paths. Its risk prioritization capabilities help our vulnerability management team focus on critical findings rather than spending time on low-impact issues. From a red team perspective, it also helps us gain better insights into the cloud attack surface and identify areas that may require further security assessment.
Overall, Wiz has improved our vulnerability assessment process, streamlined risk prioritization, and helped us make more informed security decisions. It saves investigation time and enables our team to focus more on addressing meaningful security risks.