AWS

AWS

Official

AWS's own managed MCP server — run AWS APIs, execute sandboxed scripts, and search AWS documentation under IAM.

Quick answer

What it does

Exposes eight tools over a Google-free, AWS-hosted HTTP endpoint: aws___run_script (sandboxed Python with AWS API access), aws___get_presigned_url, aws___get_tasks, aws___search_documentation, aws___read_documentation, aws___retrieve_skill, aws___list_regions and aws___get_regional_availability.

Best for

  • Incident investigation
  • IAM and security audits
  • Multi-step resource queries in one script call
  • Current AWS documentation and skills lookup

Not for

  • Provisioning new infrastructure
  • Unattended writes to production

Source: top-mcps.com/mcp/aws — verified Sep 2026

Setup recipe

Pick your client, then follow the three steps.

  1. 1

    Install

    claude_desktop_config.json
    {
      "mcpServers": {
        "aws": {
          "command": "npx",
          "args": [
            "-y",
            "mcp-remote",
            "https://aws-mcp.us-east-1.api.aws/mcp"
          ]
        }
      }
    }

    Claude Desktop launches stdio servers, so mcp-remote bridges to the hosted endpoint and opens the sign-in in your browser. On Pro, Max, Team and Enterprise you can skip the file: Settings → Connectors → Add custom connector → https://aws-mcp.us-east-1.api.aws/mcp. Authorization happens in the browser on first use (OAuth); no token goes in the config file.

    CLI or .mcp.json
    claude mcp add --transport http aws https://aws-mcp.us-east-1.api.aws/mcp

    Then run /mcp inside Claude Code to finish the sign-in. Authorization happens in the browser on first use (OAuth); no token goes in the config file.

    .cursor/mcp.json
    {
      "mcpServers": {
        "aws": {
          "url": "https://aws-mcp.us-east-1.api.aws/mcp"
        }
      }
    }

    Global path: ~/.cursor/mcp.json. Cursor shows "Needs login" once it connects — click it to authorize. Authorization happens in the browser on first use (OAuth); no token goes in the config file.

    .vscode/mcp.json
    {
      "servers": {
        "aws": {
          "type": "http",
          "url": "https://aws-mcp.us-east-1.api.aws/mcp"
        }
      }
    }

    VS Code uses the "servers" key. Run MCP: List Servers → Start Server and allow the sign-in. Authorization happens in the browser on first use (OAuth); no token goes in the config file.

    ~/.codeium/windsurf/mcp_config.json
    {
      "mcpServers": {
        "aws": {
          "serverUrl": "https://aws-mcp.us-east-1.api.aws/mcp"
        }
      }
    }

    Windsurf uses "serverUrl" for hosted servers. Open via Cascade → hammer icon → Configure. Authorization happens in the browser on first use (OAuth); no token goes in the config file.

    cline_mcp_settings.json
    {
      "mcpServers": {
        "aws": {
          "command": "npx",
          "args": [
            "-y",
            "mcp-remote",
            "https://aws-mcp.us-east-1.api.aws/mcp"
          ]
        }
      }
    }

    Bridged through mcp-remote. Open via the Cline sidebar → MCP Servers → Edit. Authorization happens in the browser on first use (OAuth); no token goes in the config file.

    ~/.continue/config.json
    {
      "experimental": {
        "modelContextProtocolServers": [
          {
            "transport": {
              "type": "streamable-http",
              "url": "https://aws-mcp.us-east-1.api.aws/mcp"
            }
          }
        ]
      }
    }

    Continue takes the hosted URL directly in the transport block. Authorization happens in the browser on first use (OAuth); no token goes in the config file.

    CLI
    codex mcp add aws --url https://aws-mcp.us-east-1.api.aws/mcp

    Codex detects OAuth support and opens the browser to authorize. Authorization happens in the browser on first use (OAuth); no token goes in the config file.

    ~/.config/zed/settings.json
    {
      "context_servers": {
        "aws": {
          "command": {
            "path": "npx",
            "args": [
              "-y",
              "mcp-remote",
              "https://aws-mcp.us-east-1.api.aws/mcp"
            ]
          }
        }
      }
    }

    Bridged through mcp-remote under "context_servers". Settings live-reload on save. Authorization happens in the browser on first use (OAuth); no token goes in the config file.

    ChatGPT → Settings → Connectors (remote URL)
    {
      "name": "AWS",
      "transport": "http",
      "url": "https://aws-mcp.us-east-1.api.aws/mcp"
    }

    Paste this into Settings → Connectors → Add custom connector. Requires ChatGPT Pro / Team / Enterprise / Edu with Developer mode enabled.

  2. 2

    Set required secrets

    No credentials required — this MCP runs over stdio without authentication.

  3. 3

    Try a minimum working prompt

    Minimum working prompt pending verification. Try any prompt from the MCP’s README once installed.

Tools & permissions

ToolDescriptionArgsSide effects
aws___run_scriptExecute Python in a sandboxed environment with AWS API access — list resources, filter, loop, and act in one call.script: stringExec
aws___get_presigned_urlGenerate a pre-signed Amazon S3 URL for uploading or downloading a file.—Write
aws___get_tasksPoll the status of a long-running task started by another tool.—Read
aws___search_documentationSearch AWS documentation, API references, best practices, and skills.query: stringRead
aws___read_documentationRetrieve an AWS documentation page as markdown.url: stringRead
aws___retrieve_skillLoad a domain-specific AWS procedure — workflows, decision frameworks, and step-by-step guidance.—Read
aws___list_regionsList all AWS Regions with their identifiers and names.—Read
aws___get_regional_availabilityCheck whether a service, feature, SDK API, or CloudFormation resource is available in a Region.—Read

Security & scope

Access scope
Read + write
Sandbox
Hosted by AWS. Authorisation resolves to a real IAM principal — OAuth 2.1 tokens valid for one hour and auto-refreshed up to twelve, or SigV4 signatures from local credentials via the proxy. Every call is subject to that principal's IAM policy, recorded in CloudTrail, and counted in CloudWatch metrics that separate agent traffic from human traffic.
Gotchas
  • The linked repository is the AWS Labs monorepo of self-hosted servers, not this server's source — the managed server is closed and operated by AWS, so you cannot audit or self-host it.
  • aws___run_script executes Python with your AWS credentials. It is as powerful as the role behind it — grant ReadOnlyAccess unless the workflow genuinely needs to write.
  • OAuth cannot hide write-capable tools from the agent; only the SigV4 path offers a read-only mode. Choose the auth method for the posture you need, not just for convenience.
  • OAuth does not support multi-account switching in one session — an agent that needs to cross accounts must use SigV4 profiles.
  • Some AWS read-only operations return credentials or other sensitive values in their output, so a ReadOnlyAccess role still lets an agent surface secrets into the conversation.

Agent prompt pack

— copy into Claude, Cursor, or ChatGPT.
Paste into Claude, Cursor, or ChatGPT. Edit the [brackets] before sending.
Recommend the best MCP servers for [task: e.g. cloud & infrastructure work] in [client: Claude].

Constraints:
- Prefer tools that are [official | open-source | read-only] — pick what matters for my use case.
- Exclude MCPs that require [e.g. a paid plan, OAuth-only flows, remote-only transport].
- Return at most 3 picks, ranked.

For each pick include:
1. One-sentence rationale.
2. The ready-to-paste install snippet for my client.
3. Any required secrets I need to create before installing.

Cross-check the top-mcps.com listing: https://top-mcps.com/top-mcps-for-cloud-infrastructure
Compare AWS against a real alternative. Swap the second MCP in [brackets] if you want a different match.
Compare AWS MCP vs [Google MCP Toolbox MCP] for the following job: [describe the job, e.g. "let an agent create GitHub issues on bug triage"].

Judge them on:
- Setup time and complexity (what a new user hits first).
- Auth model (none / API key / OAuth 2.1) and credential risk.
- Transport (stdio / Streamable HTTP / SSE) and where the server runs.
- Required secrets and the blast radius if they leak.
- Operational risk in an unattended agent loop.
- Which one is "good enough" for a weekend prototype vs. production.

End with one sentence: which should I pick for my scenario, which is: [my scenario].

References:
- https://top-mcps.com/mcp/aws
- top-mcps.com listing for Google MCP Toolbox
Asks the agent to install and verify. Works inside Claude Code, Cursor Agent, Codex CLI.
Install the AWS MCP server for my [client: Claude] at the default config path for that client.

Use the exact install snippet published at https://top-mcps.com/mcp/aws (fetch https://top-mcps.com/mcp/aws.json for the canonical server.json if you can read URLs).

Before finishing:
1. Create the required secrets (no secrets) and put them in the appropriate env block — do not hard-code them.
2. Restart or reload the client so it picks up the new server.
3. Verify the server is connected (green / running state) and at least one tool is listed.
4. If anything fails, read the client's MCP logs and report the exact error — do not silently retry.

Confirm when done and list the tools the server now exposes.

Frequently asked questions

What changed

— 2 updates tracked.
  1. Refreshed install snippets and fact sheet; verified for 2026.

  2. Initial directory listing.

More Cloud & Infrastructure MCPs

Other tools in the same category worth evaluating.

Full Supabase access: database, auth, storage, and edge functions.

supabase, database, backend, postgres
5 minLow
Official

Manage payments, customers, and subscriptions through Stripe.

stripe, payments, billing, invoicing
5 minMedium
Cloudflare
Official

Reach the whole Cloudflare API from an agent — DNS records, Workers, R2, and the Registrar beta — through one hosted Code Mode server.

cloudflare, edge, workers, dns
5 minMedium

Compared with AWS

Side-by-side breakdowns for the choices people most often weigh against this MCP.

Exploring Top MCPs for Cloud & Infrastructure? See all Cloud & Infrastructure MCPs →