PlugWiki

Wiz MCP, Wiz's official MCP server for Wiz customers

OfficialRemote
GetDocs
Works in
14
apps
Risk
Medium
can write
Auth
OAuth
sign in, no key

Lets your AI assistant ask your Wiz tenant about cloud resources, security issues, threats and risks in plain words.

This is Wiz's own server, for Wiz customers only. It lets an AI assistant search your cloud inventory, rank vulnerabilities by real attack paths, investigate threats and run Wiz's ready-made security workflows in your Wiz tenant. You turn it on from the Wiz integrations portal, and Wiz's setup guide is only visible after you log in. Whatever the server returns is passed to your AI app, so check that app's data settings first.

Good for

  • Cloud security teams who want to query Wiz issues and inventory from Claude or Cursor
  • Developers fixing Wiz Code findings in their editor without switching to the Wiz console
  • Incident responders checking active threats and blast radius with Wiz Defend
  • Platform teams building security agents on Amazon Bedrock AgentCore

Works in

14 should work

Tap an app to see how to set it up and any known problems.

Install Wiz MCP

Claude Code

  1. 1

    Copy this prompt.

    Add the Wiz MCP server to Claude Code. Run this command:

claude mcp add --transport http wiz https://mcp.app.wiz.io/

Then check that it loaded and tell me if I need to sign in or restart.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires A Wiz account (Wiz customers only), Wiz MCP turned on in the Wiz integrations portal.

These steps are generated from Wiz's hosted address; Wiz's own setup guide is behind the customer login. When you connect, sign in with your Wiz account in the browser. Use an account that only sees the projects the assistant needs.

Built from the package data we hold. Not yet tested by us.

Tools

We don't list Wiz MCP's tools here yet. After you connect it, ask your assistant "What can you do with Wiz MCP?" to see them.

Pros and cons

Good

  • Made by Wiz and tied to your own Wiz tenant.
  • Covers Wiz Cloud inventory, Wiz Code issues and Wiz Defend threats from one connection.
  • Hosted by Wiz with a browser sign-in, so there is nothing to install.
  • A free container on AWS Marketplace lets you run it yourself on Bedrock AgentCore.
  • Generally available since July 2026, with ready-made Wiz AI Skills for triage, remediation and investigations.

Watch out

  • Only for paying Wiz customers.
  • Setup steps and the tool list are behind the Wiz customer login.
  • No documented read-only switch.
  • It can create findings in Wiz, not just read them.

Permissions

medium risk · 3 things to watch

Medium risk

Everything the assistant reads from Wiz, including your cloud risks and exposures, is sent to the AI app you use. Connect with a Wiz account limited to the projects you need, and use an AI app whose data settings you have checked.

What it can do

  • Read your data
  • Create and change things
  • Delete things
  • Read-only mode

Watch out for

  • Your cloud security data goes to the AI app

    Wiz says the server passes your Wiz data to the AI app you connect. Check that app's retention and training settings before you connect a production tenant. wiz.io

  • The sign-in asks to read your whole tenant

    The hosted server requests read access to all data and can also create penetration test findings. Sign in with a Wiz account that only sees the projects you need. mcp.app.wiz.io

  • Client secrets give API access to Wiz

    The self-hosted container uses a client ID and secret from a Wiz MCP integration. Keep them in a secret manager and remove the integration when you stop using it. aws.amazon.com

Security advisories

No published security advisories as of Nov 1, 2026.

Technical details
Talks toYour Wiz tenant (mcp.app.wiz.io or the Wiz API). The AI app you connect, which receives the results
Scopes

  • read:all

  • create:penetration_test_findings

  • offline_access

Questions

Who can use the Wiz MCP server?

Only Wiz customers. You turn it on from the Wiz integrations portal, and the setup guide needs a Wiz login.

Is the Wiz MCP server free?

It comes with your Wiz subscription at no extra listed cost. The self-hosted container on AWS Marketplace is free, but you pay for the AWS resources it runs on.

What is the Wiz MCP server URL?

The hosted server answers at https://mcp.app.wiz.io/ on Wiz's own domain, and you sign in with your Wiz account. Wiz's public pages do not list that address, so check it against the setup guide in your Wiz tenant. The self-hosted container serves its own address on port 8000.

Does it send my data to the AI provider?

Yes. Results from Wiz go to the AI app you connect, so Wiz advises checking that app's data handling and training settings.

Where do I get the client ID and secret?

In the Wiz console, open Integrations, then Security Data Management, then Wiz MCP. Add an integration with the default scopes and copy the ID and secret. You only need these for the self-hosted container.

Can it change things in Wiz?

Mostly it reads. The hosted sign-in also allows it to create penetration test findings, and Wiz does not document a read-only switch.

Is Wiz MCP still in preview?

No. Wiz launched it as a customer preview in April 2025 and announced general availability on July 2, 2026.

Examples

  • Rank the vulnerabilities an attacker could actually chain to reach sensitive data

    Surface only the open vulnerabilities an attacker could realistically chain to reach sensitive data, explain the attack path for each, and rank them by what to remediate first.

    Source

  • Fix the issue with the most production impact from your editor and open a pull request

    Identify the Wiz Issues with the greatest production impact on this repository, trace it to the code that introduced it, retrieve Green Agent remediation guidance, apply and test the fix, and open a pull request for review

    Source

  • Turn a penetration test report into findings in Wiz

    Import this penetration test report into Wiz, map findings to my environment, and create Penetration Test Findings.

    Source

  • List the critical security issues in production

    List all critical security issues in production environments

    Source

Information

updated Nov 1, 2026

Publisher
Official
Transport
Streamable HTTP
Auth
OAuth

DocsOfficial listingLink

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 5
  1. mcp.app.wiz.io · mcp.app.wiz.io
  2. wiz.io · wiz.io
  3. aws.amazon.com · aws.amazon.com
  4. docs.wiz.io · docs.wiz.io
  5. Build AI Security Agents with Wiz MCP · wiz.io

Facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Updated Nov 1, 2026.