PureCipherSecured MCP Registry
Sign inCreate account

Amazon CloudWatch

purecipher-cloudwatch · v0.4.0 · by purecipher
Access requirements not specifiedCertification: Basic
Sign in to connectView tools (6) ↓
Version and usage details
~232 tokens idlePublished Sep 6, 2026
What you can do

6 product-specific SecureMCP tools to read Amazon CloudWatch data using your own connection. Select only the tools you need; provider permissions and profile approval are required.

Tools

6 tools

Explore the tools exposed by Amazon CloudWatch to MCP clients.

Registered SecureMCP definitions
6 of 6 tools

  • cloudwatch_list_metrics

    List metric definitions; requires cloudwatch:ListMetrics.

    View inputs and schema
    namespace
    Optional
    string
    next_token
    Optional
    string
    Full JSON schema, including nested inputs, allowed values, and validation constraints.
    {
  "type": "object",
  "properties": {
    "namespace": {
      "type": "string",
      "default": ""
    },
    "next_token": {
      "type": "string",
      "default": ""
    }
  },
  "additionalProperties": false
}

  • cloudwatch_list_log_groups

    Read log-group metadata; requires logs:DescribeLogGroups.

    View inputs and schema
    limit
    Optional
    integer
    prefix
    Optional
    string
    Full JSON schema, including nested inputs, allowed values, and validation constraints.
    {
  "type": "object",
  "properties": {
    "limit": {
      "type": "integer",
      "default": 20
    },
    "prefix": {
      "type": "string",
      "default": ""
    }
  },
  "additionalProperties": false
}

  • cloudwatch_get_metric_statistics

    Read one metric's statistics over at most seven days and 1440 datapoints; requires cloudwatch:GetMetricStatistics. Timestamps need timezone offsets.

    View inputs and schema
    end_time
    Required
    string
    namespace
    Required
    string
    statistic
    Optional
    string
    dimensions
    Optional
    start_time
    Required
    string
    metric_name
    Required
    string
    period_seconds
    Optional
    integer
    Full JSON schema, including nested inputs, allowed values, and validation constraints.
    {
  "type": "object",
  "required": [
    "namespace",
    "metric_name",
    "start_time",
    "end_time"
  ],
  "properties": {
    "end_time": {
      "type": "string"
    },
    "namespace": {
      "type": "string"
    },
    "statistic": {
      "enum": [
        "Average",
        "Sum",
        "Minimum",
        "Maximum",
        "SampleCount"
      ],
      "type": "string",
      "default": "Average"
    },
    "dimensions": {
      "anyOf": [
        {
          "type": "object",
          "additionalProperties": {
            "type": "string"
          }
        },
        {
          "type": "null"
        }
      ],
      "default": null
    },
    "start_time": {
      "type": "string"
    },
    "metric_name": {
      "type": "string"
    },
    "period_seconds": {
      "type": "integer",
      "default": 300
    }
  },
  "additionalProperties": false
}

  • cloudwatch_describe_alarms

    Read metric/composite alarm definitions and state; requires cloudwatch:DescribeAlarms. Does not change alarms.

    View inputs and schema
    state
    Optional
    string
    next_token
    Optional
    string
    max_results
    Optional
    integer
    name_prefix
    Optional
    string
    Full JSON schema, including nested inputs, allowed values, and validation constraints.
    {
  "type": "object",
  "properties": {
    "state": {
      "enum": [
        "",
        "OK",
        "ALARM",
        "INSUFFICIENT_DATA"
      ],
      "type": "string",
      "default": ""
    },
    "next_token": {
      "type": "string",
      "default": ""
    },
    "max_results": {
      "type": "integer",
      "default": 20
    },
    "name_prefix": {
      "type": "string",
      "default": ""
    }
  },
  "additionalProperties": false
}

  • cloudwatch_list_log_streams

    Read streams for one log group ordered by recent event time; requires logs:DescribeLogStreams.

    View inputs and schema
    log_group
    Required
    string
    next_token
    Optional
    string
    max_results
    Optional
    integer
    Full JSON schema, including nested inputs, allowed values, and validation constraints.
    {
  "type": "object",
  "required": [
    "log_group"
  ],
  "properties": {
    "log_group": {
      "type": "string"
    },
    "next_token": {
      "type": "string",
      "default": ""
    },
    "max_results": {
      "type": "integer",
      "default": 20
    }
  },
  "additionalProperties": false
}

  • cloudwatch_filter_log_events

    Read a bounded page of matching log events over at most seven days; requires logs:FilterLogEvents. Log content can contain sensitive data.

    View inputs and schema
    end_time
    Required
    string
    log_group
    Required
    string
    next_token
    Optional
    string
    start_time
    Required
    string
    max_results
    Optional
    integer
    filter_pattern
    Optional
    string
    Full JSON schema, including nested inputs, allowed values, and validation constraints.
    {
  "type": "object",
  "required": [
    "log_group",
    "start_time",
    "end_time"
  ],
  "properties": {
    "end_time": {
      "type": "string"
    },
    "log_group": {
      "type": "string"
    },
    "next_token": {
      "type": "string",
      "default": ""
    },
    "start_time": {
      "type": "string"
    },
    "max_results": {
      "type": "integer",
      "default": 50
    },
    "filter_pattern": {
      "type": "string",
      "default": ""
    }
  },
  "additionalProperties": false
}
Availability in your MCP client also depends on your account connection, permissions, and active profile.
Connect

Use it from your MCP client

A profile controls which servers and tools your registered clients can use.

  1. Add this server to a profile and set up your personal connection if required.
  2. Select the tools and client instances to allow, then complete the profile’s access review.
  3. Once active, open Connect & test on the profile to get your client configuration and check connectivity.
Sign in to connect

Register your client in My workspace → My clients and save its token securely. A published listing does not by itself grant runtime access.

Technical details and verification
How a call flows

A round trip: client → registry → server → back

MCP client
Registry gateway
Secured MCP Server
request →← response
Registry guardrails
PolicyProvenanceReflexiveConsentContract
connect
result
MCP client connects to the registry
1 · Authenticate2 · Discover tools3 · Invoke tool
Governance

Gateway controls

Checked controls are enabled for this server’s hosted gateway. Consent and contracts are optional.

○
Policy engine
Only curator-vouched tools are callable — anything else is denied at the gateway.
○
Reflexive core
Per-client behavioral baselines flag anomalous activity.
○
Consent graph
Scoped grants are checked before a tool runs; grants can expire.
○
Contract broker
An active contract sets allowed tools and rate limits per client.
Provenance & verification
Signature
Valid · manifest match
Attested by
Publisher
Hosting
Catalog listing
The registry pins the exact upstream above and records every call made through the gateway in a tamper-evident ledger — visible to the client that made the calls.

User ratings & feedback

Community feedback is separate from security certification. One rating per account; you can update yours.

Loading reviews…

Source & deployment

Not verified

Catalog version: 0.4.0

Submitted source · publisher declaration

Not recorded

Running registry build · operator build record

https://github.com/PureCipher/xsecuremcp2.0

0566b374ddbb720cf486951f791209f7938e5992

Implementation paths and SHA-256 hashes (13)

  • src/purecipher/consumer_aws.py

    9a15442043db8c07a28d9d2037f5ca5ecf79dab0846194e28bd036329d498b10

  • src/purecipher/consumer_bridge.py

    f7247aff802f0869776d5274e5a6c002374235bac8914ffeb6b68ec1536b745e

  • src/purecipher/consumer_bridge_tools.py

    573ad6444316397f78d849f419fcf7a042468b820bf946f2b093c6462b6f5055

  • src/purecipher/consumer_business.py

    b18c519b3a65853180ca07a7234128146fb009b389542659b48dadaebaf3081e

  • src/purecipher/consumer_cloud.py

    08fe162696615e205992db2c4b267c3a65c403cf727314d9e5e941a3597d5ce4

  • src/purecipher/consumer_gmail.py

    3118519c17f7da9f4c9cb84d35bc49ae8d40ab345c897d43421d0e5e7b363680

  • src/purecipher/consumer_google_permissions.py

    99fc2af714c2c177742d3a85b0116e3ed0fe094b2f0ea6e7ded8f9596cfa9c3e

  • src/purecipher/consumer_google_workspace.py

    3799a9e54e74682b187cd57259895fccdb150cfbd7bd57da29fdd32538d806c5

  • src/purecipher/consumer_governance.py

    b1689ec86825ca12eaaf1e95590a97cbec8a46d581debdd0b7772ed3c85b9fea

  • src/purecipher/consumer_oauth.py

    931372166d95e46bcdbe0ef6315741c583c814eff34d4228cccb270336ca312d

  • src/purecipher/consumer_observability.py

    c7d98468ba620e6a2966c1a4fe0ba28ad6feff290396fd2c13f40b7570d5d3e5

  • src/purecipher/consumer_runtime.py

    0ede891d2647e3526dc45876b2b60c064155ce9f42653e748b93003912fb0297

  • src/purecipher/consumer_utilities.py

    e7af046b063271da249c26d06b3d95ab529c77466370f6bbca6550478ee11a19

Comparison covers the registry consumer runtime only. Catalog approval does not deploy code. External upstream deployment identity is not verified; personal connections and credentials are separate.