Categories › Cloud & DevOps › Cloud providers & infrastructure as code
Execution graph of AWS: verified contracts, least-privilege IAM policies, pre-flight authorization.
Remote server: your requests and data go to stigmer.network. Claude Code: claude mcp add --transport http stigmer https://stigmer.network/mcp · Claude app: Settings → Connectors → Add custom connector.
The tools this server listed when we connected to it, in its own words.
query — Search for verified method contracts for any library. Pass any text -- library name, method, what you're building, or an error you hit.list_services — List all libraries and services that have verified method contracts. Use this first to discover what's available, then query for specific melist_methods — List all methods for a given library or service. Use after list_services to drill into a specific one.policy — Generate a least-privilege IAM policy for an AWS workflow. Pass a named workflow, explicit IAM actions, or a description. Returns the exact list_workflows — List the curated named workflows that can generate least-privilege IAM policies.verify — Feed a generated policy back to AWS's own policy evaluation engine (SimulateCustomPolicy) and confirm it grants exactly the intended operatiauthorize — Pre-flight authorization check for an AWS operation. Resolves the IAM actions the operation requires, then asks AWS's own policy simulator (register — Register a fix. Three actions: confirm (it worked), append_thread (variant worked), new_receipt (nothing matched, I fixed it).Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.