In-depth architectural comparison of the MCP Server Aws Sso and Shipstatic MCP MCP servers. Compare execution transports, security boundaries, tool capabilities, quality scores, and ready-to-paste client installation snippets for Claude, Cursor, Windsurf, and VS Code.
At a Glance & Executive Verdict
MCP Server Aws Sso
Cloud Platforms · Local stdio
Quality: 63/100 (Good) | Auth: OAuth 2.0
Shipstatic MCP
Cloud Platforms · Local stdio
Quality: 60/100 (Good) | Auth: No auth required
Verdict Summary: Choose MCP Server Aws Sso if you need specialized Cloud Platforms tools running via a local process. Choose Shipstatic MCP if your workspace requires Cloud Platforms integration with local subprocess execution. Both servers can be configured concurrently in your client's mcpServers manifest.
Which MCP Server Should You Choose?
Choose MCP Server Aws Sso when:
You need dedicated capabilities in the Cloud Platforms domain.
You prefer local stdio subprocess transport architecture.
Your security boundary fits: OAuth 2.0 (Free / Open Source).
You have access to required keys: AWS_SSO_START_URL, AWS_SSO_REGION, AWS_REGION.
AWS Single Sign-On (SSO) integration enabling AI systems to securely interact with AWS resources by initiating SSO login, listing accounts/roles, and executing AWS CLI commands using temporary credentials.
Deploy and manage static sites from AI agents. A simpler alternative to Vercel and Netlify for static website hosting — upload files, get a URL, and connect custom domains.
Category & Scope
Tools & Capabilities Breakdown
MCP Server Aws Sso Tools (5)
aws_sso_login
Initiate AWS SSO device authorization flow to obtain temporary credentials.
This flow works as follows:
1. Generates a unique user verification code and authentication URL
2. Opens a browser to AWS SSO login page (if `launchBrowser: true`)
3. You enter the verification code and complete AWS SSO login
4. Background polling automatically collects and caches the token
5. The cached token is used by other AWS SSO tools
**IMPORTANT FOR AI ASSISTANTS**: When the tool returns authentication instructions:
- ALWAYS check if a browser window opened automatically
- If browser opened: Guide the user to complete authentication
- If no browser opened: Instruct user to manually open the URL and enter code
- Always provide both the verification code and URL as backup
Prerequisites:
- AWS SSO must be configured with a start URL and region
- Browser access is required for authentication
- You must have an AWS SSO account with appropriate permissions
Returns: Authentication status, session details, verification code and URL
aws_sso_status
Check current AWS SSO authentication status.
Verifies if a valid cached token exists and its expiration time. Does NOT perform authentication - only checks status. If no valid token exists, instructs you to run `aws_sso_login`.
Use before calling `aws_sso_ls_accounts` or `aws_sso_exec_command`.
Returns: Authentication status, session details, expiration time, next steps
aws_sso_ls_accounts
List all AWS accounts and roles accessible through AWS SSO.
Provides essential information needed for `aws_sso_exec_command`:
- Fetches all accessible accounts with IDs, names, and emails
- Retrieves all available roles for each account
- Handles pagination internally
- Caches account and role information
Prerequisites:
- MUST first authenticate using `aws_sso_login`
- AWS SSO must be configured with a start URL and region
Returns: Account list with IDs, names, roles, and session status
Ready-to-Paste Client Configurations
Paste either (or both) of these JSON server blocks into your client config file (e.g. claude_desktop_config.json or ~/.cursor/mcp.json).
MCP Server Aws Sso is categorized under Cloud Platforms and uses a local stdio subprocess. In contrast, Shipstatic MCP belongs to Cloud Platforms using local stdio subprocess. Select MCP Server Aws Sso when you need capabilities focused on cloud platforms and Shipstatic MCP when you require tools for cloud platforms.
Execute AWS CLI command using temporary credentials from AWS SSO.
Workflow:
1. Verifies valid AWS SSO authentication token
2. Obtains temporary credentials for account and role
3. Executes the AWS CLI command
4. Caches credentials for future use (1 hour)
Prerequisites:
- MUST first authenticate using `aws_sso_login`
- AWS CLI MUST be installed on the system
- AWS SSO must be configured
Required: `accountId`, `roleName`, `command`
Optional: `region`
Returns: Execution context, command output, errors, exit code
aws_sso_ec2_exec_command
Execute shell command on EC2 instance via SSM using AWS SSO credentials.
No SSH access or inbound ports required. Uses SSM's RunShellScript document.
Prerequisites:
- MUST first authenticate using `aws_sso_login`
- EC2 instance MUST have SSM Agent installed
- Instance needs IAM role with AmazonSSMManagedInstanceCore policy
- Your role needs `ssm:SendCommand` and `ssm:GetCommandInvocation` permissions
Required: `instanceId`, `accountId`, `roleName`, `command`
Optional: `region`
Returns: Execution context, command output, errors, troubleshooting guidance
Shipstatic MCP Tools (15)
deployments_upload
Publish files and get a live URL instantly, optionally protected by a password
deployments_list
List all deployments with their URLs, status, labels, and password protection state. Pages with `limit` and `cursor
deployments_get
Get deployment details including URL, status, file count, size, labels, and password protection state
deployments_set
Update the labels on a deployment for organization and filtering
deployments_delete
Permanently delete a deployment and all its files
domains_set
Connect a custom domain to your site, switch deployments, or update labels
domains_list
List all domains with their linked deployment and verification status. Pages with `limit` and `cursor
domains_get
Get domain details including linked deployment, verification status, and labels
domains_records
Get the DNS records you need to configure at your DNS provider
domains_dns
The DNS provider recorded for a domain, if known (e.g. Cloudflare, Namecheap)
domains_share
Get a shareable link so someone else can see the required DNS records
domains_validate
Check if a domain name is valid and available before connecting it