Wiz MCP

The Wiz MCP server connects an AI client to the Wiz platform so security questions can be asked in plain language and answered from the customer's own graph. An agent can query cloud inventory and configuration across connected accounts, list security issues filtered by severity or environment, examine how a resource is exposed and which attack paths reach it, retrieve code vulnerability findings, and pull in results that Wiz has ingested from connected third party security tools. Typical requests look like asking for critical issues in production, or asking what a specific finding means for a given workload. Remediation is part of the surface rather than a separate manual step. The server can produce remediation guidance for a finding, and depending on the workflow it can open a pull request carrying a code fix or propose cloud CLI commands that restrict overly broad access, so the loop from detection to a reviewable change stays inside one session. Access is set up by Wiz customers through the integrations portal, and the server is also distributed through cloud marketplace listings for AI agents and tools. Wiz notes that queries pass through the MCP host the customer chooses, so teams should review that host's data handling and training settings before pointing it at security data. It is aimed at three groups: developers who want code security context inside the IDE, security analysts working cloud posture and threat response, and infrastructure teams executing remediation.