AWS CLI MCP Server
Gives Claude direct access to the AWS CLI through four tools: execute arbitrary AWS commands with shell-safe parsing, suggest commands from natural language, list regions, and check caller identity. Built with subprocess isolation instead of shell expansion, so it won't run piped commands or redirects. The call_aws tool can modify resources using whatever credentials your AWS profile provides, so you'll want to scope it to a limited IAM role and keep it on manual approval. Good fit when you need Claude to inspect infrastructure, fetch logs, or run read-heavy AWS operations without switching to the console. Logs go to stderr and a local file to keep stdout clean for MCP protocol messages.
- tools
- 4
- transport
- STDIO
- env vars
- 5
- last updated
- May 23, 2026
Tools
4 toolsPublic tool metadata for what this MCP can expose to an agent.
call_awsExecute an AWS CLI command
Execute an AWS CLI command
No parameter schema in public metadata yet.
suggest_aws_commandsSuggest common AWS CLI commands
Suggest common AWS CLI commands
No parameter schema in public metadata yet.
get_aws_regionsList AWS regions
List AWS regions
No parameter schema in public metadata yet.
get_caller_identityReturn current AWS identity
Return current AWS identity
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
AWS_REGIONdefault: us-east-1Default AWS region
AWS_PROFILEdefault: defaultAWS credentials profile
AWS_MCP_WORKING_DIRdefault: /tmp/aws-mcp-workWorking directory for file operations
AWS_MCP_REQUIRE_CONFIRMATIONdefault: trueEmit warnings for destructive-looking operations
AWS_MCP_LOG_LEVELdefault: INFOApplication log level
Readme
AWS MCP Server
A Python Model Context Protocol (MCP) server that lets MCP-compatible clients inspect and operate AWS through the AWS CLI. It supports command execution with validation, command suggestions, AWS region lookup, and caller identity checks.
Features
- Execute AWS CLI commands without shell expansion, preserving quoted arguments with shell-style parsing
- Suggest common AWS CLI commands from natural language requests
- Return available AWS regions
- Return the current caller identity
- Support stdio transport for local MCP clients
- Validate configuration and write logs to stderr plus a local log file
Safety Model
This server can execute AWS CLI commands using the credentials available to the process. It blocks shell operators by using subprocess.run(..., shell=False) and flags destructive-looking commands, but it cannot replace IAM least privilege or human review. Use scoped AWS profiles or roles, prefer non-production accounts for testing, and keep destructive commands on manual approval in your MCP client.
Requirements
Details
- Repository
- github.com/musaddiq-dev/aws-cli-mcp-server
- Category
- Cloud & Infrastructure
- Package
mdev-aws-mcp-server- Transport
- STDIO
- Registry
- MCP registry, active
More from musaddiq-dev
Related Cloud & Infrastructure MCP servers
View all
Next Devtools Mcpvercel/next-devtools-mcpNext.js development tools MCP server with stdio transport765stars
Cloudflarecoleam00/remote-mcp-server-with-authTemplate for a remote MCP server with GitHub OAuth - following best practices for building MCP servers so you can take this as a starting point for any MCP serv294stars
GCPeniayomi/gcp-mcpA Model Context Protocol (MCP) server that enables AI assistants like Claude to interact with your Google Cloud Platform environment. This allows for natural la198stars
Pare Dockerdave-london/parePare Docker ג€” Structured Docker operations (ps, images, logs, build, compose) as typed JSON.128stars
Vercelpulsemcp/mcp-serversMCP server for Vercel — manage deployments and view build and runtime application logs.0stars
XenMCP Docker agentxenmcp/docker-agentRead-only MCP server for one Docker host: containers, inspect, logs, stats, events. No exec.4stars