AWS S3 MCP Server
AWS S3 bucket and object access for your AI model context.
Data last scanned today · Reviewed yesterday
Overview
This implementation allows AI assistants to interact directly with Amazon S3 data. By utilizing the Model Context Protocol, it provides tools for listing buckets and specific object contents, with native support for loading PDF documents directly into the context window for processing. Integration involves configuring your AWS credentials—including your access key ID and secret key—within your client's configuration file. The server provides clear methods for listing buckets, querying objects up to 1,000 items, and fetching individual files by key name.
Our verdict
With a security score of 14/100, this server carries a high-risk profile and should not be used in sensitive environments. The primary security concern is the total lack of authentication, meaning any process with access to your configuration can perform operations as the configured AWS user. Users must be aware that the server provides full access based on the provided credentials and has not been editorially reviewed.
- Native support for loading PDF content into LLM context
- Zero direct dependencies reduce potential supply-chain vulnerabilities
- Uses standard AWS S3 tool definitions for bucket interactions
- No authentication method implemented for local configuration
- Lacks a read-only mode, providing full access to S3 permissions
- Maintenance activity is low with no commits in over 200 days
Tools
| Tool | Description | Risk |
|---|---|---|
| ListBuckets | Returns a list of all buckets owned by the authenticated sender of the request | low |
| ListObjectsV2 | Returns some or all (up to 1,000) of the objects in a bucket with each request | low |
| GetObject | Retrieves an object from Amazon S3. | low |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›What file types can be retrieved through the S3 MCP server?
Currently, the server only supports retrieving PDF documents.
›Are there limits to how many objects I can view in an S3 bucket?
Yes, both the Resources and the ListObjectsV2 tool are limited to 1,000 objects per request.
›What AWS credentials are required to run this server?
You must provide an AWS access key ID, secret access key, and the AWS region associated with your account.
›How can I debug the server since it runs over stdio?
The project recommends using the MCP Inspector tool to view server interactions in a browser.
›Does the server support different S3 bucket request styles?
Yes, the GetObject tool supports both virtual-hosted-style and path-style requests for general purpose buckets.
Alternatives
Badge
Maintain this server? Add the live badge to your README.