Skip to directory

AWS MCP Server (Agent Toolkit for AWS)

Amazon Web Services

Streamable HTTP remotely; stdio through mcp-proxy-for-aws-cli for SigV4 setup10 documented tools8

About AWS MCP Server (Agent Toolkit for AWS)

AWS-managed remote MCP server that searches and retrieves AWS documentation and skills, runs Python in a sandbox, and can make AWS API calls using the connected AWS identity and IAM permissions.

What you can use it for

  • Search current AWS guidance and retrieve service-specific skills.
  • Inspect AWS account resources or execute AWS API workflows with IAM-authorized access.
  • Run sandboxed Python for multi-step and cross-service tasks.
  • Generate S3 presigned URLs for file transfer workflows.
Connection and setup
Hosting
Remote managed endpoint; optional local stdio proxy for SigV4 auth
Transport
Streamable HTTP remotely; stdio through mcp-proxy-for-aws-cli for SigV4 setup
Endpoint
Local process; no hosted endpoint documented
Authentication
OAuth through AWS Sign-In (browser consent; requires signin:AuthorizeOAuth2Access and signin:CreateOAuth2Token permissions, commonly granted by AWSMCPSignInOAuthAccessPolicy) or SigV4 using AWS CLI credentials through mcp-proxy-for-aws-cli. OAuth access follows existing IAM authorization and does not grant additional permissions.

Requirements

  • AWS account and IAM identity for authenticated AWS API operations; documentation search can work without AWS auth.
  • OAuth path: MCP client supporting OAuth; IAM identity needs the documented Sign-In permissions.
  • SigV4 path: AWS CLI 2.32.0 or later, configured credentials, and uv/uvx for the local proxy.
  • Least-privilege IAM permissions for the services/actions the user intends the agent to access.

Setup steps

  1. Choose an AWS MCP endpoint region from AWS's current regional list; endpoint region and AWS operation region are separate settings.
  2. OAuth: add the selected remote URL; for Cursor and Codex use ?oauth=initialize as documented. On first tool use, complete AWS Sign-In in the browser and approve access.
  3. SigV4: configure AWS CLI credentials (AWS documents aws login), verify with aws sts get-caller-identity, install uv, then configure the client with uvx mcp-proxy-for-aws-cli@latest and the regional MCP URL. Set --metadata AWS_REGION=<operations-region> for the operation default region.
  4. For Codex OAuth, AWS documents: codex mcp add aws-mcp --url https://aws-mcp.us-east-1.api.aws/mcp?oauth=initialize. For Claude Code OAuth: claude mcp add aws-mcp https://aws-mcp.us-east-1.api.aws/mcp --transport http.
  5. Ask the agent to search AWS documentation or retrieve a skill for harmless verification. Before any resource-changing API call, show the exact API action, target account/region/resource, and obtain user authorization.
Tools 10

The current AWS Agent Toolkit for AWS tool reference lists 10 tools: six knowledge tools and four authenticated AWS API/script/task tools. Their capabilities are constrained by the configured IAM identity. This is distinct from the many separate service-specific AWS MCP servers.

  • aws___retrieve_skill

    Retrieve AWS-domain skill instructions and references.

    01
  • aws___search_documentation

    Search AWS docs, API references, best practices, and skills.

    02
  • aws___read_documentation

    Retrieve AWS documentation pages as Markdown.

    03
  • aws___recommend

    Recommend related AWS documentation pages.

    04
  • aws___list_regions

    List AWS regions.

    05
  • aws___get_regional_availability

    Check regional availability for services and features.

    06
  • aws___call_aws

    Execute authenticated AWS API operations through the managed server.

    07
  • aws___run_script

    Run Python scripts in the sandbox with authenticated AWS API access.

    08
  • aws___get_presigned_url

    Generate presigned S3 upload or download URLs.

    09
  • aws___get_tasks

    Poll long-running AWS API or script tasks.

    10
Limitations and notes
  • The server can make AWS changes through aws___run_script and AWS API actions. Apply least privilege and require confirmation before any write, destructive, billable, or production operation.
  • OAuth does not support switching AWS profiles within one session; SigV4 proxy supports multiple configured profiles.
  • First connection may take a few minutes; AWS documents common expired-token, invalid-signature, missing-credentials, and IAM permission errors.
  • Documentation search can work without authentication, but API operations and sandboxed scripts require AWS identity/credentials.
  • No pricing claim or runtime connection test is made in this record.
Original sources
  • official current tool reference

    AWS currently enumerates six knowledge tools and four API/script/task tools, including aws___recommend and aws___call_aws not present in the prior eight-name subset.

  • official product overview

    AWS describes a managed MCP server, IAM-governed access, CloudTrail logging, and no additional MCP fee beyond AWS resource usage.

  • official setup guide

    AWS documents supported regional endpoints, OAuth or SigV4 authentication and client setup.

Documentation checked 2026-10-28T14:00:00.000Z. Connection has not been runtime tested.

Similar tools