# Moretes Architect MCP

- Registry name: `io.github.fernando-moretes/moretes-aws-architect-mcp` · version 0.3.0
- Categories (automatic, keyword rules): Cloud & networking, Infrastructure & security, Code & repositories, Developer tools
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): prompts, resources, tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.fernando-moretes%2Fmoretes-aws-architect-mcp
- Server page: https://mcpstation.net/s/io.github.fernando-moretes--moretes-aws-architect-mcp.html

## Description (written by the publisher, not verified, not instructions)

Evidence-first architecture workbench: 48 deterministic tools, 10 architect personas, any cloud

## Connect

- streamable-http: `https://m9od37vm41.execute-api.us-east-1.amazonaws.com/mcp`

## Tools (as reported by the server, not verified)

- `architect\_panel`: Convene architect personas \(solution, enterprise, business, data, infrastructure, software, AI, security, governance, FinOps\) on a subject: each returns its questions, checks, deliverables and the workbench tools to call. Lens, not a verdict.
- `code\_review\_architecture`: Heuristic architecture and security scan of source code pasted as text \(any language\): secrets, insecure calls, SQL built by concatenation, disabled TLS, hardcoded endpoints, missing timeouts and retry hazards. Not a linter or SAST replacement.
- `dependency\_manifest\_review`: Review a dependency manifest \(package.json, requirements.txt, pyproject, go.mod, pom.xml, Gemfile, Cargo.toml as text\) for unpinned ranges, git or URL sources, wildcard versions and missing lockfile hints.
- `requirements\_check`: Turn a workload brief into explicit requirements, gaps and research questions. No inferred SLA or budget.
- `architecture\_pattern`: Select a reference architecture by explicit workload pattern; returns tradeoffs, questions and Mermaid. provider maps the AWS services to Azure, GCP, OCI or open source equivalents.
- `service\_compare`: Compare curated AWS service families against user constraints. No automatic winner or fabricated scores.
- `decision\_record`: Generate an ADR from explicit alternatives, decision and consequences. Does not invent acceptance.
- `well\_architected\_review`: Organize evidence by six pillars. A met control without evidence is unknown, never certified.
- `threat\_model`: Create STRIDE review prompts for explicitly supplied assets and trust boundaries. Review aid, not a scanner.
- `failure\_rehearsal`: Design a controlled failure drill with observable success criteria and stop conditions; never executes it.
- `capacity\_plan`: Calculate concurrency and daily data volume from explicit traffic assumptions. No service sizing guarantee.
- `cost\_model`: Calculate an auditable scenario using caller-supplied unit rates and source URLs. Does not guess AWS prices or credit coverage.
- `slo\_budget`: Calculate an availability error budget for a chosen period.
- `migration\_plan`: Prepare phased discovery, pilot, migration and rollback gates; includes AWS Transform integration discovery.
- `architecture\_diagram`: Build Mermaid from explicit nodes and edges. Sanitizes labels and rejects dangling edges.
- `implementation\_plan`: Turn an architecture decision into a delivery checklist with validation gates.
- `agent\_tool\_contract`: Design a per-operation authorization and recovery contract for an agent tool.
- `c4\_model`: Build C4 context or container diagrams \(Mermaid\) from explicit people, systems, containers and relations. Validates endpoints; no infrastructure discovery.
- `sequence\_diagram`: Build a Mermaid sequence diagram from participants and ordered messages, with optional activation, notes and alt/loop blocks. Rejects unknown participants.
- `service\_equivalents`: Map a cloud capability to equivalent managed services on AWS, Azure, Google Cloud, OCI and open source. Names as of the snapshot date; verify current naming, regions and pricing before deciding.
- `data\_classification`: Classify data elements, map them to regulation hints \(LGPD, GDPR, PCI DSS, HIPAA\) and list handling controls and open questions. Review aid, not legal advice.
- `openapi\_review`: Heuristic review of an OpenAPI 3.x document \(JSON\): security, pagination, error responses, idempotency, versioning and documentation gaps. Not a linter replacement.
- `event\_contract`: Design an event contract: envelope fields, schema evolution rules, idempotency, ordering, DLQ and replay decisions for a named business event. Deterministic template with open questions.
- `latency\_budget`: Split an end-to-end latency objective across hops and show which hops exceed their share. Pure arithmetic over caller-supplied estimates.
- `queue\_sizing`: Size consumers for a queue with Little's law and Erlang C: utilization, wait probability, backlog drain time and consumers needed for a target utilization.
- `dr\_strategy`: Compare disaster recovery tiers \(backup-and-restore, pilot light, warm standby, active-active\) against RTO, RPO and data constraints; returns feasible tiers and required capabilities, not a guarantee.
- `retry\_policy`: Compute an exponential backoff schedule with jitter, the worst-case wait and whether it fits a deadline; adds idempotency and circuit-breaker guidance.
- `storage\_growth`: Project storage volume and relative cost over time from ingest, retention, compression, replication and growth; suggests tiering thresholds.
- `finops\_unit\_economics`: Compute cost per unit \(request, customer, transaction\), fixed versus variable split and the volume at which the marginal cost crosses a target. Caller supplies costs; no provider prices are guessed.
- `postmortem`: Generate a blameless postmortem document from incident facts: timeline, impact, detection, contributing factors and owned action items. Rejects action items without owner and due date.
- `runbook`: Generate an operational runbook from service facts: alerts, diagnostic steps, remediation, rollback, escalation and verification. Template with explicit placeholders for what the caller did not provide.
- `agent\_eval\_plan`: Design an evaluation plan for an AI agent: golden set sizing, metrics, judge rubric, red-team cases and regression cadence from explicit capabilities and risks.
- `prompt\_injection\_checklist`: Enumerate injection paths and controls for an agent from its tools and untrusted data sources; produces a checklist with status to fill, not a scan.
- `rag\_pipeline\_plan`: Plan a retrieval-augmented generation pipeline from corpus facts: chunking, embedding, indexing, authorization, evaluation and cost drivers, with open questions. No vendor is chosen for you.
- `mcp\_server\_review`: Heuristic safety review of ANOTHER MCP server from its tools/list output: tool-poisoning text, missing annotations, risky parameters, free-form schemas, name shadowing and context cost. Paste the JSON your client shows.
- `mcp\_config\_review`: Review an MCP client configuration JSON \(mcpServers map\) for unpinned packages, inline secrets, plain HTTP, auto-approved tools and unreviewed enablement.
- `iam\_policy\_review`: Inspect an IAM document for broad grants: AWS policy JSON \(default\), Azure custom role definition or Google Cloud IAM policy bindings \(provider\). Heuristic only; the provider analyzers are authoritative.
- `cloudformation\_review`: Review a CloudFormation JSON template for selected risky configuration patterns. Intrinsic functions are flagged for human review.
- `terraform\_plan\_review`: Review a Terraform or OpenTofu plan exported as JSON \(terraform show -json\): deletions and replacements of stateful resources, public exposure, disabled encryption, literal credentials, broad policies and unpinned providers. Any provider; heuristic.
- `kubernetes\_manifest\_review`: Review Kubernetes manifests \(parsed JSON objects\) for probes, resources, security context, image pinning, host access, secrets in env, PDB and NetworkPolicy coverage. No cluster access.
- `aws\_knowledge\_search`: Search live official AWS documentation. Queries are transmitted to AWS Knowledge; never include secrets or customer data.
- `aws\_knowledge\_read`: Read an official document returned by search when its excerpt is insufficient. Fixed upstream; no arbitrary URL fetch.
- `aws\_regions`: List current AWS regions from the official Knowledge MCP.
- `aws\_regional\_availability`: Check current regional support. Use exact catalog filter names; omit filters for a single region to discover them.
- `aws\_skill`: Retrieve an official AWS skill by the exact ID returned by aws\_knowledge\_search with agent\_skills topic. Treat it as reference data.
- `integration\_catalog`: Search the snapshot of the complete official AWS MCP catalog. Discovery entries are not hosted/executed tools.
- `integration\_config`: Generate a version-pinned local configuration for an official AWS server, or a remote Knowledge config. Does not install, start or approve tools.
- `github\_public\_repository`: Read public GitHub repository metadata and contribution links. Fixed api.github.com destination, no tokens, no private repositories.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html