Orca Security MCP
Orca Security CNAPP · Cybersecurity & IT
Certification per AWS Marketplace.
Evidence tier Source Confirmed · 4 captures on record
What the publisher says
As described on AWS Marketplace.
The Orca Security MCP Server brings your cloud security context directly into the AI tools your teams already use. Built on the Model Context Protocol (MCP), it lets security teams investigate, query, and act on their Orca environment through plain language conversation instead of custom integrations or hand built dashboards.
Connect Orca to leading AI assistants and agents, including Claude Code, Claude Desktop, Cursor, and ChatGPT, using secure OAuth 2.0 or API token authentication over a remote HTTP endpoint.
Show the rest of the publisher’s description (2 more lines)
With the Orca MCP Server, your teams can: get unified security context (access alerts, asset details, compliance data, and documentation in one place to simplify investigations and cut through noise); see the cloud in natural language (ask plain language questions about configurations, vulnerabilities, and posture through your LLM of choice); accelerate investigations (pivot from an alert to its related assets, risks, and documentation in seconds); and reduce risk proactively (surface hidden risks and compliance gaps before they become incidents).
Because MCP is an open standard, you can build and scale AI agents that work seamlessly against Orca, from continuous monitoring to automated triage, with every agent running against a consistent, secure interface. Orca supports a continually growing set of tools spanning alerts, assets, discovery, and documentation search.
Highlights
Highlighted by the publisher on AWS Marketplace.
Natural language cloud security: Ask plain language questions about alerts, assets, vulnerabilities, compliance, and posture, and act on them directly from AI assistants like Claude, Cursor, ChatGPT, and many others.
Faster investigations, unified context: Pivot from an alert to its related assets, attack paths, risks, and documentation in seconds, with alerts, asset details, and compliance data in one interface.
Open standard, agent ready: Built on the Anthropic backed Model Context Protocol with secure OAuth 2.0 and API token auth, so you can build and scale AI agents for continuous monitoring and automated triage.
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Vendor
External enrichment · as of 2026-07-21
Plans and pricing as listed
1 listed- Units
Refund terms
As stated by the publisher on AWS Marketplace.
No Refund
Sources
Publisher resources
1 linkLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.