A side-by-side look at the Agentmetal MCP and AWS MCP Server MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.
Verdict: choose Agentmetal MCP for cloud platforms work over a hosted endpoint; choose AWS MCP Server for cloud platforms as a local process. You can also run both side by side in one mcpServers block.
AGENTMETAL_BASE_URL, WALLET_PRIVATE_KEY, AGENTMETAL_NETWORK, AGENTMETAL_MAX_USDC, AGENTMETAL_API_KEY.get_catalog, provision_server, get_server.aws_whoami, aws_login_start, aws_login_complete.Rows where the two servers differ are marked.
| Spec | ||
|---|---|---|
| Category | Cloud Platforms | Cloud Platforms |
| Quality signal | 57/100 · Good | 59/100 · Good |
| Install command | Confirmed | Confirmed |
| Transport | Remote HTTP/SSE | Local subprocess (stdio) |
| Auth | API key required | Not declared |
| Pricing | Free | Not declared |
| Required env vars | AGENTMETAL_BASE_URLWALLET_PRIVATE_KEYAGENTMETAL_NETWORKAGENTMETAL_MAX_USDCAGENTMETAL_API_KEY | None listed |
| Verified owner | Community listing | Community listing |
| GitHub stars | 2 | 5 |
| Directory activity | 2 views 0 installs 0 upvotes | 0 views 0 installs 0 upvotes |
| Tools | 13 | 28 |
| Full listing | View Agentmetal MCP | View AWS MCP Server |
get_catalogList plans, locations, and add-on pricing (bandwidth, storage). The free discovery hook.provision_serverProvision a VPS (`plan`, `days`, optional `ssh_key`/`via`, `managed_key`) → id, IPv4, SSH. With `managed_key:true`, a server-side keypair is generated, authorized, and the private key returned **once** (stored only encrypted) to enable `exec_command`.get_serverStatus, IPv4, expiry, bandwidth, storage for a server idlist_serversFleet for a wallet/accountextend_serverExtend a lease by N daysdestroy_serverDestroy nowreboot_serverSoft-reboot an owned serverserver_logsHypervisor-level diagnostics without logging in: status, recent provider actions, a VNC console URL, and live CPU/disk/net metrics (no text boot log exists provider-side)exec_commandRun a shell command as **root** over SSH → exit_code/stdout/stderr. Requires a server provisioned with `managed_key:true`. Bounded: 1–120 s timeout, 256 KB output cap.get_firewallRead a box's edge-firewall rules. Callable from the box itself (source-IP identity) or with an account key.manage_firewallOpen/close inbound ports on a box's edge firewall (protocol/port/source_ips). From the box itself or with an account key; SSH-lockout guarded.claim_accountEmail a one-time claim code (via AWS SES)aws_whoamiCurrent identity (account, ARN) + SSO token expiry countdown. Call this first.aws_login_startStart `aws sso login --no-browser --use-device-code`, returns a verification URL + short code and a `sessionId`. (`--use-device-code` is omitted on AWS CLI older than 2.22.0, where the device grant is already the default.)aws_login_completeBlock until the SSO subprocess finishes (you auth in your browser), returns the new identity.aws_refresh_if_expiring_soonCheck the cached SSO token and auto-start a refresh when < `thresholdMinutes` remain (default 10). One round-trip for "am I about to expire? if so, re-login."aws_session_setSet the default profile and/or region for the rest of this MCP session. "Switch to prod," "use us-west-2."aws_session_getShow the current session defaults and where each value came from (`session`/`env`/`default`).aws_session_clearRemove session profile/region overrides so env vars / defaults take over again. No args clears both.aws_list_profilesList profiles configured in `~/.aws/config` -- names, regions, and SSO metadata. Use before switching profiles or when an SSO error names one you haven't seen.aws_assume_roleCall STS AssumeRole with your current identity and stash the temp creds as a new profile (`mcp-<sessionName>`) in `~/.aws/credentials`. Use for cross-account access. The secret/session token stay on disk -- not returned to the model. Optional `timeoutMs` (default 120s) for slow SAML / `credential_p…aws_callRun any AWS API operation. `service: 's3api', operation: 'list-buckets'`, optional `params` (PascalCase JSON), optional `query` (JMESPath). Returns parsed JSON. Hand-written CLI commands (`s3 cp/ls/sync`, `logs tail`) and operations that stream their response to a file (`s3api get-object`, `bedrock…aws_paginateFetch one page of a paginated list/describe operation. Supports `query` too. Returns `nextToken`/`hasMore`; call again with the token to continue.aws_logs_tailFetch the newest CloudWatch Logs events for one log group (FilterLogEvents via `aws logs filter-log-events`), with `since`, `filterPattern` and stream-name filters; returns `{timestamp, logStreamName, message}` objects, oldest first. Bounded by `maxEvents` (default 500, max 10000): a busier window…Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.
{
"mcpServers": {
"agentmetal-mcp": {
"url": "https://api.agentmetal.dev"
}
}
}
{
"mcpServers": {
"aws-mcp-server-3": {
"command": "npx",
"args": [
"-y",
"@yawlabs/aws-mcp"
]
}
}
}