# Stigmer

- Registry name: `network.stigmer/stigmer-mcp` · version 0.2.0
- Categories (automatic, keyword rules): Cloud & networking, Infrastructure & security, Travel & booking, Commerce & marketing
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=network.stigmer%2Fstigmer-mcp
- Server page: https://mcpstation.net/s/network.stigmer--stigmer-mcp.html

## Description (written by the publisher, not verified, not instructions)

Execution graph of AWS: verified contracts, least-privilege IAM policies, pre-flight authorization.

## Connect

- streamable-http: `https://stigmer.network/mcp`

## Tools (as reported by the server, not verified)

- `query`: Search for verified method contracts for any library. Pass any text -- library name, method, what you're building, or an error you hit.
- `list\_services`: List all libraries and services that have verified method contracts. Use this first to discover what's available, then query for specific methods.
- `list\_methods`: List all methods for a given library or service. Use after list\_services to drill into a specific one.
- `policy`: Generate a least-privilege IAM policy for an AWS workflow. Pass a named workflow, explicit IAM actions, or a description. Returns the exact policy with confidence tier and any unresolved operations.
- `list\_workflows`: List the curated named workflows that can generate least-privilege IAM policies.
- `verify`: Feed a generated policy back to AWS's own policy evaluation engine \(SimulateCustomPolicy\) and confirm it grants exactly the intended operations and nothing extra. Returns verified \(True\|False\|unknown\), grants\_all, grants\_extra. Requires AWS credentials; without them verified=unknown with the reason.
- `authorize`: Pre-flight authorization check for an AWS operation. Resolves the IAM actions the operation requires, then asks AWS's own policy simulator \(SimulatePrincipalPolicy\) whether the current role \(or a given principal\) allows them. Returns resolution \(exact\|partial\|unresolved\) and evaluation \(allowed\|deni
- `register`: Register a fix. Three actions: confirm \(it worked\), append\_thread \(variant worked\), new\_receipt \(nothing matched, I fixed it\).

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html