Nightshift: voice on-call and security copilot for Alexa+

Demo video: https://youtu.be/wR8AIjl1880 · Code: https://github.com/NaveenVikramR/nightshift

Small engineering teams don't have an SRE or a security team. When an alert fires at 3 a.m., the person on call has to open a laptop and dig through dashboards, deploy history and logs before they even know what's wrong. Quiet risks, such as missing security headers, vulnerable dependencies or a spike in failed logins, often go unnoticed until they become incidents. We wanted to be able to ask "What's wrong?" out loud and get a straight, grounded answer, and then fix it safely without getting out of bed.

Nightshift is an open, self-hosted MCP server that Alexa+ (or any MCP client) calls.

There are 13 tools in total. Each returns a short speak line for voice plus structured data, and four MCP Apps cards (incident, confirmation, security scorecard, ops brief) for an Echo Show-like screen. Because third-party developers can't connect an MCP server to real Alexa+ yet, we built a simulated Alexa+: a real MCP client with an agent loop, Amazon Polly voice, Amazon Bedrock Guardrails and the cards.

A measured live conversation (5 questions, 10 model calls) cost about $0.010 of AWS: Polly 545 characters ≈ $0.0087, Guardrails ≤ $0.0015, CloudWatch within the free tier. On Nova Lite the same turns would add about $0.002.