AWS Connector MCP Server
AWS CLI command execution interface for AI agents with mandatory safety gates.
Data last scanned today · Reviewed today
Overview
The AWS Connector MCP Server functions as a bridge that enables AI agents to utilize the full scope of the AWS CLI. By wrapping the local binary, the server provides access to any service or operation supported by the CLI, eliminating the need for hand-curated tool lists or specific SDK integrations.
Our verdict
With a security score of 35/100, this server is classified as high risk. The rating reflects that it is a community-maintained project rather than an official vendor release and has not yet undergone an independent editorial review. Users should exercise caution because the tool's core function is shelling out to the local AWS CLI environment; it is intended for developers who understand the implications of granting AI access to their infrastructure credentials.
- Supports all AWS CLI commands without additional development
- Uses zero direct dependencies to minimize supply chain surface
- Requires explicit opt-in and confirmation for write operations
- Community-maintained project with no official vendor backing
- Lacks an independent security or editorial audit
Tools
| Tool | Description | Risk |
|---|---|---|
| aws_exec | Run any aws <service> <operation> ... command. | high |
| aws_help | Show aws <service> [subcommand] help text — always safe, use it to check exact syntax before calling aws_exec. | low |
| aws_whoami | Show the AWS identity (account, ARN, user/role) the configured credentials resolve to. | low |
| aws_list_profiles | List named profiles configured in ~/.aws/config on the host. | low |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›What prerequisites are needed to run this server?
You must have the AWS CLI installed and configured on the host machine, as the server shells out to the existing `aws` binary to execute commands.
›Are mutating AWS commands allowed by default?
No, mutating commands are blocked by default. To enable them, you must set the `AWS_MCP_ALLOW_WRITE` environment variable to `true` and include `confirm=true` in the specific tool call.
›How can I restrict the server to specific AWS services?
You can use the `AWS_MCP_ALLOWED_SERVICES` environment variable to provide a comma-separated list of allowed AWS CLI service names, such as `s3,ec2`.
›How does the server handle AWS credentials?
It relies on the host's existing AWS CLI credential chain, meaning it automatically supports profiles, SSO, IAM roles, or static access keys already configured via `aws configure`.
›Can I change the output format of the tools?
Yes, every tool accepts an optional `response_format` parameter, which you can set to `markdown` for formatted tables or `json` for programmatic use.
›Do I need to install the Go toolchain to use this server?
No, you can download a prebuilt binary from the latest release and point your MCP client to the included `plugin/` folder without needing the Go toolchain.
Alternatives
Changelog
Badge
Maintain this server? Add the live badge to your README.