Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Prowler Cloud (BYOK) — connector documentation

  • MCP endpoint: https://byok-prowler.connectorbay.com/mcp
  • REST API: POST https://byok-prowler.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-prowler.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Prowler Cloud Prowler Cloud API key, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-prowler.connectorbay.com/health · Tool schemas: https://byok-prowler.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-prowler · agent@connectorbay.com

What Prowler Cloud (BYOK) is for

Prowler Cloud (BYOK) lets an AI assistant read your own Prowler Cloud data through the Prowler Cloud API with a key you supply (Prowler Cloud API key). Read-only: 8 tools (list_providers, list_scans, get_scan, get_findings_overview, list_latest_findings, list_latest_finding_groups, list_latest_resources, list_compliance_overviews). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.prowler.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Prowler Cloud. Prowler Cloud and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which cloud accounts are connected to my Prowler Cloud and are they all reachable?"
  • "What was the state of my latest Prowler scans?"
  • "How did Prowler scan 5d0e8a10 finish?"
  • "How many failed findings do I have across all accounts and how many are new?"
  • "Which critical findings are failing right now in my AWS accounts?"
  • "Which checks fail on the most resources in my cloud accounts?"

What it does

  • list_providers: List the cloud and SaaS accounts connected to Prowler Cloud with their type, account identifier, alias and whether the last connection check worked.
  • list_scans: List security scans with state, trigger, progress, duration and how many resources were scanned. Filter by state or account type.
  • get_scan: Get one scan by its id: state, progress, duration, resource count and start, finish and next scheduled times.
  • get_findings_overview: Show the totals of passed, failed and muted findings from the latest scans, plus how many are new or changed since the previous scan.
  • list_latest_findings: List findings from the latest scan of each account, filtered by status, severity, service, region, account type or check id.
  • list_latest_finding_groups: List findings grouped by check from the latest scans, with severity, status, failing resource counts and when the check started failing.
  • list_latest_resources: List cloud resources seen in the latest scans with type, service, region, tags and how many findings fail on each.
  • list_compliance_overviews: List compliance frameworks for one scan with passed, failed and manual requirement counts.

BYOK key

You bring your own Prowler Cloud Prowler Cloud API key (https://docs.prowler.com/user-guide/tutorials/prowler-app-api-keys). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.prowler.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Prowler Cloud API (api.prowler.com) with a BYOK key; documentation: https://docs.prowler.com/user-guide/tutorials/prowler-app-api-keys. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Prowler Cloud. Prowler Cloud and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Prowler Cloud account.

Built for: Worldwide. Languages: English.