Dawnguard MCP Server

official

Cloud security insights, guardrail guidance, and compliance checking via Dawnguard.

View on dawnguard.app

Documentation

Preferences

MCP (Coming soon)

Start guide

Published

Designs

Generate

Resources

Insights

Canvas

Settings

MCP

SCIM Provisioning

Single Sign-On (SSO)

Workspace

Members

Teams

Billing

Activity

Cloud

Documents

Guardrails

Scopes

Changelog

MCP (Coming soon)

The Model Context Protocol (MCP) allows you to query data in the Dawnguard platform dynamically using your own coding tools/agents like copilot for github, cursor, claude code, replit, VS code, etc.

Overview

The MCP tab in the preferences modal allows you to configure the remote Dawnguard MCP server.

From this tab, you can copy the remote MCP url and use it to activate the MCP in your favorite tool like Visual Studio Code, Claude Code, etc.

Prereqs

To install and use the Dawnguard MCP your must have;

At least the designer role;
Configured the MCP redirect URL in your Dawnguard SSO provider as a valid redirect URL;

Available skills

Dawnguard MCP connects your AI assistant (like GitHub Copilot) directly to your cloud security findings. Instead of logging into a dashboard, you can just ask questions in plain language.

‍

Tools

validate — "Is everything connected?"
Quickly checks that the Dawnguard integration is up and your account is properly logged in. Run this first if something seems off.list_architectures — "What cloud environments have been scanned?"

list_architectures — "What cloud environments have been scanned?"
Shows a list of your cloud setups (Azure/AWS) that Dawnguard has already scanned, including when the last scan happened.

query_insights — "What issues were found?"
The main tool for exploring findings from your cloud scans. You can ask things like "show me the top security issues" or "what problems exist in this resource group?" — and filter by cloud service, region, severity, and more.

guardrail_guidance — "What rules are we following?"
Shows the policies and rules your organisation has set up — things like required tags, naming conventions, and security standards. Also shows global best-practice frameworks your team has opted into.

design_architecture — "How should we build this the right way?"
Describes how a new cloud workload or service should be designed to follow your organisation's standards and security rules — before you build it.

‍

Prompts (Pre-built conversation starters) These are ready-made ways to kick off common tasks — just select one and go:

Design a secure architecture — Get guidance on building something new safely.
Check open issues — See what findings are currently unresolved.
Look up a specific resource — Paste an Azure or AWS resource ID to see its findings.
Group issues by rule — See which guardrail is causing the most findings.
Top issues summary — Get a ranked list of the biggest problems.
Get a fix plan — See step-by-step remediation guidance for findings.
Understand remote workflows — Learn how to use Dawnguard without installing anything locally.
Validate your setup — Confirm the integration is working end-to-end.
Onboarding guide — New to Dawnguard? Start here.
Generate Terraform — Get infrastructure-as-code that follows your organisation's rules.
Validate Terraform — Check your existing Terraform against your guardrails before deploying.

Installation guide

Below you will find the installation instructions for the Dawnguard MCP for various platforms.

Claude Code

Open your terminal
Type command below

claude mcp add dawnguard \
  --type http \
  --url https://api.dawnguard.app/mcp/{CUSTOMER_ID}

Type command below

‍claude mcp allow my-server "*"

NPM

You can also install the Dawnguard MCP using Node Package Manager (NPM). Checkout the NPM package here: https://www.npmjs.com/package/@dawnguard/mcp

Cursor

You can find the Dawnguard MCP in the Cursor directory: https://cursor.directory/plugins/dawnguard-mcp/

‍

Copilot for github

Open your VS code
Open the chat window
Click the gear icon in the right top
Select the MCP Servers tab on the left
Click the plus icon and select HTTP
Paste the URL retrieved from the preferences page
Start the MCP server
1. Optional: select which models are allowed to call the dawnguard-mcp
2. Right click on the dawnguard-mcp record and select "Configure Model Access"
3. Select the models