Log inSubmit server
AWS CLI MCP Server logo

AWS CLI MCP Server

Run validated AWS CLI commands and inspect regions, caller identity, and command suggestions through MCP.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install AWS CLI MCP Server

Pick your client, then add it in one click or paste the config.

STDIOPython
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "aws-cli-mcp-server": {
      "command": "uvx",
      "args": [
        "mdev-aws-mcp-server"
      ],
      "env": {
        "AWS_REGION": "YOUR_VALUE_HERE",
        "AWS_PROFILE": "YOUR_VALUE_HERE",
        "AWS_MCP_WORKING_DIR": "YOUR_VALUE_HERE",
        "AWS_MCP_REQUIRE_CONFIRMATION": "YOUR_VALUE_HERE",
        "AWS_MCP_LOG_LEVEL": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

We couldn’t confirm it starts correctly

We ran the install command but it didn't respond within our test window — this can mean a slow first-time install rather than a real problem.

uvx mdev-aws-mcp-server

No response to initialize.

This is an experimental automated check and can have false negatives — missing environment variables, a slow cold install, etc. It doesn’t necessarily mean something’s wrong. Last checked 4d ago.

Overview

AWS CLI MCP Server MCP server connects MCP-compatible clients to a locally installed AWS CLI through stdio. It exposes tools for executing AWS CLI commands, suggesting commands from natural-language requests, listing AWS regions, and checking the current caller identity. Command execution avoids shell expansion and uses the credentials available to the process. Reach for it when an agent needs controlled access to AWS CLI operations from a local MCP client.

Use cases

  • Execute AWS CLI operations from an MCP-compatible agent
  • Inspect the active AWS caller identity
  • List available AWS regions
  • Generate AWS CLI command suggestions from natural-language requests

Key features

  • AWS CLI command execution without shell expansion
  • Natural-language AWS CLI command suggestions
  • AWS region lookup
  • Caller identity inspection
  • stdio transport for local MCP clients
  • Destructive-operation warnings and local logging

Tools4

What AWS CLI MCP Server lets your agent do. Expand a tool for its parameters.

Self-reported~41 tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 1d ago

Recent health check succeeded.

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 13d ago via OSV.dev · mdev-aws-mcp-server (PyPI)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

Last commit5mo agoMost recent push to the default branch.
Install checkInconclusiveDidn't respond in our test window — often a slow first install.
Tools exposed4Callable tools this server registers over MCP.
Directory activity2 viewsConfig copies, upvotes, and views on AllMCPs.

How AWS CLI MCP Server works

What AWS CLI MCP Server MCP server does

AWS CLI MCP Server MCP server gives an MCP-compatible client access to AWS through the AWS CLI installed on the same machine. It is implemented in Python and communicates with local clients over stdio. The server can perform AWS CLI operations, provide command suggestions, identify the active AWS principal, and list available AWS regions.

The main execution tool accepts an AWS CLI command and runs it without shell expansion. Shell-style parsing preserves quoted arguments, while subprocess.run is used with shell execution disabled. This allows an agent to work with AWS CLI syntax without passing a command through a shell interpreter.

How it works

The client starts the server as a local process, typically with uvx mdev-aws-mcp-server or the console script from a source checkout. MCP messages are written to stdout, while application logs go to stderr and a local log file under ~/.aws-mcp-server/logs.

AWS CLI MCP Server MCP server delegates authentication and AWS API access to the AWS CLI. The active profile, region, and credential provider are supplied through standard AWS configuration, including profiles, IAM Identity Center or SSO, environment variables, IAM roles, and other AWS-supported methods. The server does not provide a separate credential system.

Setup and configuration

The runtime requires Python 3.12 or newer, AWS CLI v2 on PATH, and configured AWS authentication. For a published installation, run:

bash
uvx mdev-aws-mcp-server

For local development, clone the repository, create a virtual environment, and install the package with pip install -e .. The module can then be started with python -m aws_mcp_server.server.

The supported environment settings are AWS_REGION, AWS_PROFILE, AWS_MCP_WORKING_DIR, AWS_MCP_REQUIRE_CONFIRMATION, and AWS_MCP_LOG_LEVEL. Their documented defaults are us-east-1, default, /tmp/aws-mcp-work, true, and INFO, respectively. MCP client configuration uses a stdio command, optional arguments, and environment variables. Examples are provided for Claude Desktop, Cursor, Windsurf, Cline, Claude Code, and VS Code.

Tools and capabilities

AWS CLI MCP Server MCP server provides four tools:

  • call_aws executes an AWS CLI command and may modify AWS resources.
  • suggest_aws_commands proposes common AWS CLI commands from a natural-language request.
  • get_aws_regions returns available AWS regions.
  • get_caller_identity reports the current AWS identity.

The suggestion, region, and identity tools are read-only. The command execution tool flags destructive-looking operations when confirmation warnings are enabled, but it can still perform changes permitted by the configured AWS credentials.

Limitations and notes

The safety checks do not replace IAM least privilege or human review. Use a narrowly scoped profile or role, test in a non-production account where possible, and keep resource-changing commands behind explicit approval in the MCP client. Review generated suggestions before running them.

The server is intended for local stdio use. The documentation warns against exposing it over a network without adding authentication, TLS, and suitable network controls. Do not commit .env files, AWS credentials, access keys, profiles, or account-specific output. AWS CLI authentication and permissions must already be valid for the process that starts the server.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about AWS CLI MCP Server

AWS CLI MCP Server is an MCP server that connects MCP-compatible clients to the locally installed AWS CLI. Its main tools execute AWS CLI commands, suggest commands from natural-language requests, list AWS regions, and return the current caller identity. It uses the credentials and configuration available to the process.

Install it with `uvx mdev-aws-mcp-server` after installing AWS CLI v2 and configuring authentication. For local development, clone the repository, create a Python 3.12+ virtual environment, and run `pip install -e .`.

It uses the AWS credentials and configuration available to the process, including an AWS profile, IAM Identity Center or SSO, environment variables, an IAM role, or another AWS-supported provider. Set `AWS_PROFILE` and `AWS_REGION` when the client needs explicit values.

Yes, it works with Cursor through stdio MCP configuration. Configure Cursor with the `uvx` command, the `mdev-aws-mcp-server` argument, and environment values such as `AWS_PROFILE` and `AWS_REGION`.

Yes, `call_aws` can modify resources when the configured AWS credentials allow those operations. The server blocks shell operators and flags destructive-looking commands, but you should still use least-privilege permissions and manual approval.

Related MCP servers

All in Cloud Platforms All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewAWS CLI MCP Server AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/aws-cli-mcp-server?style=directory)](https://allmcps.com/mcp/aws-cli-mcp-server)
HTML Embed
<a href="https://allmcps.com/mcp/aws-cli-mcp-server"><img src="https://allmcps.com/api/badge/aws-cli-mcp-server?style=directory" alt="AWS CLI MCP Server on AllMCPs" /></a>