AWS Billing vs MCP Server Aws Sso

A side-by-side look at the AWS Billing and MCP Server Aws Sso MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.

AWS Billing logoAWS BillingCloud Platforms · Remote HTTP/SSEAWS Cost Explorer cost, forecast, and anomaly reporting through user-connected IAM credentials.55GoodAuth: not declaredMCP Server Aws Sso logoMCP Server Aws SsoCloud Platforms · Local subprocess (stdio)AWS Single Sign-On (SSO) integration enabling AI systems to securely interact with AWS resources by initiating SSO login, listing accounts/roles, and executing AWS CLI commands using temporary credentials.63GoodAuth: oauth 2.0

Verdict: choose AWS Billing for cloud platforms work over a hosted endpoint; choose MCP Server Aws Sso for cloud platforms as a local process. You can also run both side by side in one mcpServers block.

Which MCP server should you choose?

AWS Billing logoChoose AWS Billing when

  • You need dedicated capabilities in the Cloud Platforms domain.
  • You prefer a remote HTTP/SSE transport.
  • You want tools like aws_billing_list_accounts, aws_billing_cost, aws_billing_forecast.
Explore AWS Billing

MCP Server Aws Sso logoChoose MCP Server Aws Sso when

  • You need dedicated capabilities in the Cloud Platforms domain.
  • You prefer a local stdio subprocess transport.
  • Its auth model fits you: OAuth 2.0.
  • You have the keys it needs: AWS_SSO_START_URL, AWS_SSO_REGION, AWS_REGION.
  • You want tools like aws_sso_login, aws_sso_status, aws_sso_ls_accounts.
Explore MCP Server Aws Sso

Feature & specification comparison

Rows where the two servers differ are marked.

SpecAWS Billing logoAWS BillingMCP Server Aws Sso logoMCP Server Aws Sso
CategoryCloud PlatformsCloud Platforms
Quality signal55/100 · Good63/100 · Good
Install commandConfirmedConfirmed
TransportRemote HTTP/SSELocal subprocess (stdio)
AuthNot declaredOAuth 2.0
PricingNot declaredFree
Required env varsNone listedAWS_SSO_START_URLAWS_SSO_REGIONAWS_REGION
Verified ownerCommunity listingCommunity listing
GitHub stars015
Directory activity 1 views 0 installs 0 upvotes 7 views 0 installs 0 upvotes
Tools105

Tools & capabilities

AWS Billing tools 10

  • aws_billing_list_accountsList AWS Billing credential records linked to this install.
  • aws_billing_costGet normalized AWS Cost Explorer cost and usage with daily breakdown and top services. The adapter drains NextPageToken internally.
  • aws_billing_forecastGet normalized AWS Cost Explorer forecast for the next 30 days or an explicit date range.
  • aws_billing_anomaliesGet normalized AWS Cost Anomaly Detection anomalies for a date range. The adapter drains NextPageToken internally.
  • show_versionShow the current MCP platform and adapter versions.
  • report_bugReport a bug, missing feature, or send feedback. Include the conversation array with recent messages for reproduction.
  • connectReturns connection status and URLs. When all providers are connected, returns authenticated:true and empty pending[]. When credentials are missing, returns connect_url for the toolkit and per-install URLs.
  • toolkit_infoReturns the current toolkit state: installed MCPs, their connection status, the accounts connected to each one, and how many catalog tools each exposes.
  • marketplaceThe official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them. Covers capability requests like "find an MCP that does X", "consulta um CPF", "is there a tool for Y". Core flow: action=search discovers MCPs by intent → describe returns one MCP's full profile (every tool with its id + params, pricing, auth) so you pick the right tool_id → invoke RUNS that tool. KEY: invoke works even when the MCP is NOT installed — it runs the tool pontualmente (one-off), without adding the MCP to the toolkit and without bloating the tool list. If the MCP needs a credential/login, invoke returns a connect link; if it is paid and the wallet is empty, invoke returns a checkout/top-up link (the user opens it, then you retry). Use install only to make an MCP PERMANENT in the active toolkit (its tools then show up natively in future sessions); prefer invoke for a single/occasional use. list_tools lists what is callable right now. subscribe/cancel handle per-MCP billing; report_bug sends feedback; request_mcp asks us to build a NEW MCP when nothing fits. Search/describe flag installed_in_toolkit vs installed_in_workspace. Writes (install/uninstall/subscribe/cancel and the one-off install behind invoke) require workspace owner/admin. It also carries the mcp.ai PROMPT LIBRARY, which is about ready-made prompt TEXT rather than MCPs: search_prompts finds one, get_prompt returns its full text with {{variables}} filled, and publish_prompt saves a prompt and returns a shareable mcp.ai/p/<slug> link that opens without login.
  • authenticateMCP.AI for IDE agents (Cursor, etc.): log in in the browser, copy the access token. Best: add it to this server's config as a header `Authorization: Bearer <token>` for a permanent, non-expiring connection. Or paste it here for a session-only login: call with { token: "<jwt>" } after the user pastes, or with no args to get the link.

MCP Server Aws Sso tools 5

  • aws_sso_loginInitiate AWS SSO device authorization flow to obtain temporary credentials. This flow works as follows: 1. Generates a unique user verification code and authentication URL 2. Opens a browser to AWS SSO login page (if `launchBrowser: true`) 3. You enter the verification code and complete AWS SSO login 4. Background polling automatically collects and caches the token 5. The cached token is used by other AWS SSO tools **IMPORTANT FOR AI ASSISTANTS**: When the tool returns authentication instructions: - ALWAYS check if a browser window opened automatically - If browser opened: Guide the user to complete authentication - If no browser opened: Instruct user to manually open the URL and enter code - Always provide both the verification code and URL as backup Prerequisites: - AWS SSO must be configured with a start URL and region - Browser access is required for authentication - You must have an AWS SSO account with appropriate permissions Returns: Authentication status, session details, verification code and URL
  • aws_sso_statusCheck current AWS SSO authentication status. Verifies if a valid cached token exists and its expiration time. Does NOT perform authentication - only checks status. If no valid token exists, instructs you to run `aws_sso_login`. Use before calling `aws_sso_ls_accounts` or `aws_sso_exec_command`. Returns: Authentication status, session details, expiration time, next steps
  • aws_sso_ls_accountsList all AWS accounts and roles accessible through AWS SSO. Provides essential information needed for `aws_sso_exec_command`: - Fetches all accessible accounts with IDs, names, and emails - Retrieves all available roles for each account - Handles pagination internally - Caches account and role information Prerequisites: - MUST first authenticate using `aws_sso_login` - AWS SSO must be configured with a start URL and region Returns: Account list with IDs, names, roles, and session status
  • aws_sso_exec_commandExecute AWS CLI command using temporary credentials from AWS SSO. Workflow: 1. Verifies valid AWS SSO authentication token 2. Obtains temporary credentials for account and role 3. Executes the AWS CLI command 4. Caches credentials for future use (1 hour) Prerequisites: - MUST first authenticate using `aws_sso_login` - AWS CLI MUST be installed on the system - AWS SSO must be configured Required: `accountId`, `roleName`, `command` Optional: `region` Returns: Execution context, command output, errors, exit code
  • aws_sso_ec2_exec_commandExecute shell command on EC2 instance via SSM using AWS SSO credentials. No SSH access or inbound ports required. Uses SSM's RunShellScript document. Prerequisites: - MUST first authenticate using `aws_sso_login` - EC2 instance MUST have SSM Agent installed - Instance needs IAM role with AmazonSSMManagedInstanceCore policy - Your role needs `ssm:SendCommand` and `ssm:GetCommandInvocation` permissions Required: `instanceId`, `accountId`, `roleName`, `command` Optional: `region` Returns: Execution context, command output, errors, troubleshooting guidance

Ready-to-paste client configs

Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.

AWS Billing

mcpServers (Claude Desktop / Cursor)
{
  "mcpServers": {
    "aws-billing": {
      "url": "https://api.mcp.ai/p_aws_billing"
    }
  }
}

MCP Server Aws Sso

mcpServers (Claude Desktop / Cursor)
{
  "mcpServers": {
    "aashari-mcp-server-aws-sso": {
      "command": "npx",
      "args": [
        "-y",
        "@aashari/mcp-server-aws-sso"
      ],
      "env": {
        "AWS_SSO_START_URL": "YOUR_AWS_SSO_START_URL_HERE",
        "AWS_SSO_REGION": "YOUR_AWS_SSO_REGION_HERE",
        "AWS_REGION": "YOUR_AWS_REGION_HERE"
      }
    }
  }
}

Frequently asked questions

AWS Billing is categorized under Cloud Platforms and uses a remote HTTP/SSE transport. MCP Server Aws Sso belongs to Cloud Platforms and uses a local stdio subprocess. Pick AWS Billing for cloud platforms work and MCP Server Aws Sso for cloud platforms.

Copy the mcpServers block from the config section on this page into your client's config (for example claude_desktop_config.json or ~/.cursor/mcp.json), then fully restart the client.

AWS Billing has no declared pricing — check the project's own site. MCP Server Aws Sso is listed as free. Auth: oauth 2.0. If a server needs environment variables such as API keys, define them under the env key in your client's MCP config.

Yes. MCP clients support multiple servers: add aws-billing and aashari-mcp-server-aws-sso as separate keys in the same mcpServers object, and your assistant will call tools from either one.

On AllMCPs, AWS Billing has a quality signal of 55/100 (Good) with 1 views, 0 installs and 0 GitHub stars. MCP Server Aws Sso has 63/100 (Good) with 7 views, 0 installs and 15 GitHub stars.