AI导哈

安全查询工具

通过Wiz MCP服务器查询云安全问题的Claude Code技能，适用于检查漏洞、威胁和云资源发现。

  • by justinb-dfw
  • Python
  • 本地部署
  • 2 星标
  • 更新于
在 GitHub 查看 justinb-dfw/claude-wiz-mcp

使用说明

Claude Code — Wiz MCP Skill

Claude Code skill for querying Wiz cloud security platform via the remote Wiz MCP server at mcp.app.wiz.io.

What This Does

Connects Claude Code to Wiz's remote MCP server so you can query security issues, vulnerabilities, threats, projects, and cloud resource findings using natural language.

Prerequisites

  • A Wiz account with MCP enabled (Settings > Tenant > AI Features)
  • A ~/.wiz-token file with your Wiz service account credentials:
id:<your-client-id>
secret:<your-client-secret>
api: https://api.<dc>.app.wiz.io/graphql
auth:https://auth.app.wiz.io/oauth/token
  • mcp.app.wiz.io must be reachable (not blocked by proxy/firewall)

Installation

1. Copy skill files

mkdir -p ~/.claude/skills/wiz
cp SKILL.md start-mcp.sh oauth-setup.py ~/.claude/skills/wiz/
chmod +x ~/.claude/skills/wiz/start-mcp.sh

2. Register the MCP server with Claude Code

claude mcp add --transport http --scope user wiz "https://mcp.app.wiz.io/"

Then restart Claude Code and use /mcp to authenticate via OAuth when prompted.

3. (Alternative) Service account via OAuth setup

If the native HTTP transport doesn't work with your proxy setup, use the OAuth helper:

python3 ~/.claude/skills/wiz/oauth-setup.py

This opens a browser for Wiz OAuth authorization and saves tokens locally.

Usage

In Claude Code, say things like:

  • "show me critical security issues"
  • "check CVE-2024-XXXX"
  • "what vulnerabilities are in the production account?"
  • "list my Wiz projects"
  • "show publicly exposed S3 buckets"

Or invoke the skill directly: /wiz show me critical alerts

Files

File Purpose
SKILL.md Skill definition — tells Claude when/how to use Wiz MCP tools
start-mcp.sh Wrapper script (reads ~/.wiz-token, not used with native HTTP transport)
oauth-setup.py One-time OAuth2 setup helper for environments where native OAuth doesn't work

Limitations

  • Read-only — Wiz MCP cannot modify issues, change status, or add comments
  • OAuth tokens expire in 15 minutes; Claude Code handles refresh via /mcp reconnect
  • Requires mcp.app.wiz.io to be reachable (check proxy/firewall rules)

Security

  • No credentials are stored in this repo
  • oauth-tokens.json is gitignored — never commit token files
  • Credentials are read from ~/.wiz-token at runtime

相关 MCP