Dev Tools & GitMCP Registrymcpb4 toolsB · 76

aws-mcp-connector

Name: aws-mcp-connector
Author: FerhatDundar

io.github.FerhatDundar · Updated 2mo ago

MCP server for the AWS CLI. Read-only by default; single Go binary.

At a glance

aws-mcp-connector is an MCP server in the Dev Tools & Git category. It runs locally over stdio via `npx -y https://github.com/FerhatDundar/aws-mcp-connector/releases/download/v0.1.2/aws-mcp-connector-plugin-v0.1.2-darwin-arm64.zip`, and needs AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY and AWS_SESSION_TOKEN. It exposes 4 tools, including aws_exec, aws_help and aws_whoami. It scores B (76/100) on the MCP Skills Hub health score as of Oct 28, 2026.

Source 0

One-click install

VS Code VS Code Insiders Cursor

Opens your editor and pre-fills the config. Your editor will ask before adding it.

How to install aws-mcp-connector in your AI client

Setup for Claude Code, Claude Desktop, Cursor, Codex, Windsurf, Cline and VS Code — copy-paste ready.

How to install aws-mcp-connector in Claude CodeAnthropic's agentic CLI

Add the server

bash

claude mcp add aws-mcp-connector -e 'AWS_ACCESS_KEY_ID=<AWS_ACCESS_KEY_ID>' -e 'AWS_SECRET_ACCESS_KEY=<AWS_SECRET_ACCESS_KEY>' -e 'AWS_SESSION_TOKEN=<AWS_SESSION_TOKEN>' -- npx -y https://github.com/FerhatDundar/aws-mcp-connector/releases/download/v0.1.2/aws-mcp-connector-plugin-v0.1.2-darwin-arm64.zip

Fill in your credentials
Replace <AWS_ACCESS_KEY_ID>, <AWS_SECRET_ACCESS_KEY>, <AWS_SESSION_TOKEN> with your real values. Keep secrets out of any config file you commit.
3
Verify it's connected
bash
```
claude mcp list
```
Sharing it with your team?
Add `--scope project` to write it to .mcp.json in the repository root, which you can commit (with the secrets left as environment variables).
Use it in a session
Ask Claude to use the tools this server exposes (e.g. aws_exec, aws_help, aws_whoami). It discovers them automatically.

How to install aws-mcp-connector in Claude DesktopDesktop app (MCP config)

Open your MCP config
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json · Windows: %APPDATA%\Claude\claude_desktop_config.json

Add this server

json

{
  "mcpServers": {
    "aws-mcp-connector": {
      "command": "npx",
      "args": [
        "-y",
        "https://github.com/FerhatDundar/aws-mcp-connector/releases/download/v0.1.2/aws-mcp-connector-plugin-v0.1.2-darwin-arm64.zip"
      ],
      "env": {
        "AWS_ACCESS_KEY_ID": "<AWS_ACCESS_KEY_ID>",
        "AWS_SECRET_ACCESS_KEY": "<AWS_SECRET_ACCESS_KEY>",
        "AWS_SESSION_TOKEN": "<AWS_SESSION_TOKEN>"
      }
    }
  }
}

Fill in your credentials
Replace <AWS_ACCESS_KEY_ID>, <AWS_SECRET_ACCESS_KEY>, <AWS_SESSION_TOKEN> with your real values. Keep secrets out of any config file you commit.
Restart Claude Desktop
The tools appear under the 🔌 menu once the app reloads.

How to install aws-mcp-connector in CursorAI-first code editor

Create / edit .cursor/mcp.json in your project

json

{
  "mcpServers": {
    "aws-mcp-connector": {
      "command": "npx",
      "args": [
        "-y",
        "https://github.com/FerhatDundar/aws-mcp-connector/releases/download/v0.1.2/aws-mcp-connector-plugin-v0.1.2-darwin-arm64.zip"
      ],
      "env": {
        "AWS_ACCESS_KEY_ID": "<AWS_ACCESS_KEY_ID>",
        "AWS_SECRET_ACCESS_KEY": "<AWS_SECRET_ACCESS_KEY>",
        "AWS_SESSION_TOKEN": "<AWS_SESSION_TOKEN>"
      }
    }
  }
}

Fill in your credentials
Replace <AWS_ACCESS_KEY_ID>, <AWS_SECRET_ACCESS_KEY>, <AWS_SESSION_TOKEN> with your real values. Keep secrets out of any config file you commit.
Enable it
Cursor Settings → MCP → toggle the server on. Tools become available to the Composer/Agent.

How to install aws-mcp-connector in Codex CLIOpenAI coding agent

Add to ~/.codex/config.toml

toml

[mcp_servers.aws-mcp-connector]
command = "npx"
args = ["-y", "https://github.com/FerhatDundar/aws-mcp-connector/releases/download/v0.1.2/aws-mcp-connector-plugin-v0.1.2-darwin-arm64.zip"]
env = { AWS_ACCESS_KEY_ID = "<AWS_ACCESS_KEY_ID>", AWS_SECRET_ACCESS_KEY = "<AWS_SECRET_ACCESS_KEY>", AWS_SESSION_TOKEN = "<AWS_SESSION_TOKEN>" }

Fill in your credentials
Replace <AWS_ACCESS_KEY_ID>, <AWS_SECRET_ACCESS_KEY>, <AWS_SESSION_TOKEN> with your real values. Keep secrets out of any config file you commit.
Run Codex
Codex loads MCP servers from config.toml on startup and exposes their tools to the agent.

How to install aws-mcp-connector in WindsurfCodeium's agentic IDE

Edit ~/.codeium/windsurf/mcp_config.json

json

{
  "mcpServers": {
    "aws-mcp-connector": {
      "command": "npx",
      "args": [
        "-y",
        "https://github.com/FerhatDundar/aws-mcp-connector/releases/download/v0.1.2/aws-mcp-connector-plugin-v0.1.2-darwin-arm64.zip"
      ],
      "env": {
        "AWS_ACCESS_KEY_ID": "<AWS_ACCESS_KEY_ID>",
        "AWS_SECRET_ACCESS_KEY": "<AWS_SECRET_ACCESS_KEY>",
        "AWS_SESSION_TOKEN": "<AWS_SESSION_TOKEN>"
      }
    }
  }
}

Fill in your credentials
Replace <AWS_ACCESS_KEY_ID>, <AWS_SECRET_ACCESS_KEY>, <AWS_SESSION_TOKEN> with your real values. Keep secrets out of any config file you commit.
Reload
Windsurf → Cascade → refresh MCP servers. Cascade can now call the tools.

How to install aws-mcp-connector in ClineVS Code autonomous agent

Open Cline → MCP Servers → Configure
Adds to cline_mcp_settings.json.

Add the server

json

{
  "mcpServers": {
    "aws-mcp-connector": {
      "command": "npx",
      "args": [
        "-y",
        "https://github.com/FerhatDundar/aws-mcp-connector/releases/download/v0.1.2/aws-mcp-connector-plugin-v0.1.2-darwin-arm64.zip"
      ],
      "env": {
        "AWS_ACCESS_KEY_ID": "<AWS_ACCESS_KEY_ID>",
        "AWS_SECRET_ACCESS_KEY": "<AWS_SECRET_ACCESS_KEY>",
        "AWS_SESSION_TOKEN": "<AWS_SESSION_TOKEN>"
      }
    }
  }
}

Fill in your credentials
Replace <AWS_ACCESS_KEY_ID>, <AWS_SECRET_ACCESS_KEY>, <AWS_SESSION_TOKEN> with your real values. Keep secrets out of any config file you commit.

How to install aws-mcp-connector in VS CodeCopilot / MCP support

Create .vscode/mcp.json

json

{
  "servers": {
    "aws-mcp-connector": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "https://github.com/FerhatDundar/aws-mcp-connector/releases/download/v0.1.2/aws-mcp-connector-plugin-v0.1.2-darwin-arm64.zip"
      ],
      "env": {
        "AWS_ACCESS_KEY_ID": "<AWS_ACCESS_KEY_ID>",
        "AWS_SECRET_ACCESS_KEY": "<AWS_SECRET_ACCESS_KEY>",
        "AWS_SESSION_TOKEN": "<AWS_SESSION_TOKEN>"
      }
    }
  }
}

Fill in your credentials
Replace <AWS_ACCESS_KEY_ID>, <AWS_SECRET_ACCESS_KEY>, <AWS_SESSION_TOKEN> with your real values. Keep secrets out of any config file you commit.
Start it
VS Code shows a ▶ Start action above the server entry. Agent mode (Copilot Chat) can then use the tools.

What does aws-mcp-connector need from you?

API key — Static AWS access key. Only needed if not using a profile/SSO/role.

AWS_PROFILEoptionalEnvironment variable
Named profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGIONoptionalEnvironment variable
Default AWS region if not set elsewhere.
AWS_ACCESS_KEY_IDoptionalsecretEnvironment variable
Static AWS access key. Only needed if not using a profile/SSO/role.
AWS_SECRET_ACCESS_KEYoptionalsecretEnvironment variable
Static AWS secret key. Only needed if not using a profile/SSO/role.
AWS_SESSION_TOKENoptionalsecretEnvironment variable
Temporary session token, if using short-lived credentials.
AWS_MCP_ALLOW_WRITEoptionalEnvironment variable
Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICESoptionalEnvironment variable
Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATHoptionalEnvironment variable
Optional path to the aws binary. Defaults to "aws" resolved via PATH.
AWS_PROFILEoptionalEnvironment variable
Named profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGIONoptionalEnvironment variable
Default AWS region if not set elsewhere.
AWS_ACCESS_KEY_IDoptionalsecretEnvironment variable
Static AWS access key. Only needed if not using a profile/SSO/role.
AWS_SECRET_ACCESS_KEYoptionalsecretEnvironment variable
Static AWS secret key. Only needed if not using a profile/SSO/role.
AWS_SESSION_TOKENoptionalsecretEnvironment variable
Temporary session token, if using short-lived credentials.
AWS_MCP_ALLOW_WRITEoptionalEnvironment variable
Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICESoptionalEnvironment variable
Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATHoptionalEnvironment variable
Optional path to the aws binary. Defaults to "aws" resolved via PATH.
AWS_PROFILEoptionalEnvironment variable
Named profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGIONoptionalEnvironment variable
Default AWS region if not set elsewhere.
AWS_ACCESS_KEY_IDoptionalsecretEnvironment variable
Static AWS access key. Only needed if not using a profile/SSO/role.
AWS_SECRET_ACCESS_KEYoptionalsecretEnvironment variable
Static AWS secret key. Only needed if not using a profile/SSO/role.
AWS_SESSION_TOKENoptionalsecretEnvironment variable
Temporary session token, if using short-lived credentials.
AWS_MCP_ALLOW_WRITEoptionalEnvironment variable
Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICESoptionalEnvironment variable
Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATHoptionalEnvironment variable
Optional path to the aws binary. Defaults to "aws" resolved via PATH.
AWS_PROFILEoptionalEnvironment variable
Named profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGIONoptionalEnvironment variable
Default AWS region if not set elsewhere.
AWS_ACCESS_KEY_IDoptionalsecretEnvironment variable
Static AWS access key. Only needed if not using a profile/SSO/role.
AWS_SECRET_ACCESS_KEYoptionalsecretEnvironment variable
Static AWS secret key. Only needed if not using a profile/SSO/role.
AWS_SESSION_TOKENoptionalsecretEnvironment variable
Temporary session token, if using short-lived credentials.
AWS_MCP_ALLOW_WRITEoptionalEnvironment variable
Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICESoptionalEnvironment variable
Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATHoptionalEnvironment variable
Optional path to the aws binary. Defaults to "aws" resolved via PATH.
AWS_PROFILEoptionalEnvironment variable
Named profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGIONoptionalEnvironment variable
Default AWS region if not set elsewhere.
AWS_ACCESS_KEY_IDoptionalsecretEnvironment variable
Static AWS access key. Only needed if not using a profile/SSO/role.
AWS_SECRET_ACCESS_KEYoptionalsecretEnvironment variable
Static AWS secret key. Only needed if not using a profile/SSO/role.
AWS_SESSION_TOKENoptionalsecretEnvironment variable
Temporary session token, if using short-lived credentials.
AWS_MCP_ALLOW_WRITEoptionalEnvironment variable
Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICESoptionalEnvironment variable
Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATHoptionalEnvironment variable
Optional path to the aws binary. Defaults to "aws" resolved via PATH.
AWS_PROFILEoptionalEnvironment variable
Named profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGIONoptionalEnvironment variable
Default AWS region if not set elsewhere.
AWS_ACCESS_KEY_IDoptionalsecretEnvironment variable
Static AWS access key. Only needed if not using a profile/SSO/role.
AWS_SECRET_ACCESS_KEYoptionalsecretEnvironment variable
Static AWS secret key. Only needed if not using a profile/SSO/role.
AWS_SESSION_TOKENoptionalsecretEnvironment variable
Temporary session token, if using short-lived credentials.
AWS_MCP_ALLOW_WRITEoptionalEnvironment variable
Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICESoptionalEnvironment variable
Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATHoptionalEnvironment variable
Optional path to the aws binary. Defaults to "aws" resolved via PATH.

Pass secrets through your shell environment rather than committing them into a config file.

What tools does aws-mcp-connector expose? (4)

Taken from the project's README — the server itself was not queried, so check its docs for the exact schemas.

aws_execRun any `aws ...` command. Read-only by default — mutating commands need `AWS_MCP_ALLOW_WRITE=true` on the server *and* `confirm=true` on the call.
aws_helpShow `aws [subcommand] help` text — always safe, use it to check exact syntax before calling `aws_exec`.
aws_whoamiShow the AWS identity (account, ARN, user/role) the configured credentials resolve to.
aws_list_profilesList named profiles configured in `~/.aws/config` on the host.

What the code can do

The published package could not be downloaded or read for analysis.

Before you install

Signals gathered from the source repo and package registry — not a safety verdict.

What it can reach

Runs code on your machine — Executes as a local process with your user's permissions, including filesystem access.
Downloads at launch — The package is fetched from its registry each run unless you pin a version.

Last commit 10 days ago — Actively maintained.
Repository created 2 months ago — Very new project with little track record yet.
0 GitHub stars — Very little community usage so far.

Client compatibility

Claude Code: NativeClaude Desktop: NativeCursor: NativeCodex CLI: NativeWindsurf: NativeCline: NativeVS Code: Native

Health score

B · 76

Maintenance, adoption, transparency and packaging — not a safety audit. How this is calculated

Maintenance30%100%
Last commit 10 days ago.
Adoption20%0%
0 stars.
Transparency20%100%
4/4: ✓ public source repo, ✓ declared license, ✓ documentation, ✓ discoverable tool list.
Provenance15%75%
Links to its own repository; package linkage unverified.
Packaging15%100%
Publishes a pinned version (0.1.2).

Documentation

Full README

🔌 aws-mcp-connector

Talk to AWS CLI from an MCP-speaking agent.

A single static Go binary that speaks the Model Context Protocol and lets an agent run AWS CLI commands: any aws <service> <operation> invocation, across every service the CLI supports, with a read-only-by-default safety gate on anything that mutates state.

No Python, no uv, no runtime dependency to install — just a binary and an .mcp.json. It shells out to the aws binary already installed and configured on the host (profile, SSO, IAM role, or static keys — whatever the AWS CLI's own credential chain resolves) instead of reimplementing the AWS SDK, so it gets the full breadth of the CLI for free rather than a hand-curated subset of services.

✨ Why this exists

An agent that only has a narrow, hand-picked set of AWS tools hits a wall the moment you need something outside that set. This connector instead wraps the AWS CLI itself, so an agent can run aws s3 ls, aws ec2 describe-instances, aws iam list-users — anything the CLI can do — without waiting on a new tool to be written for it. Mutating commands are blocked by default and require both a server-level opt-in and a per-call confirm=true, so exploring/debugging is safe out of the box.

🧰 Tools

| Tool | What it does | Write? | |---|---|:---:| | aws_exec | Run any aws <service> <operation> ... command. Read-only by default — mutating commands need AWS_MCP_ALLOW_WRITE=true on the server *and* confirm=true on the call. | ✅ (gated) | | aws_help | Show aws <service> [subcommand] help text — always safe, use it to check exact syntax before calling aws_exec. | | | aws_whoami | Show the AWS identity (account, ARN, user/role) the configured credentials resolve to. | | | aws_list_profiles | List named profiles configured in ~/.aws/config on the host. | |

Every tool accepts an optional response_format: markdown (default, pretty tables for a chat UI) or json (for programmatic use).

🚀 Quickstart

Fastest path: grab a prebuilt bundle from the latest release — download aws-mcp-connector-plugin-<version>-<os>-<arch>.zip, unzip it, and point Cowork/Claude at the plugin/ folder inside (see step 4 of SETUP.md). No Go toolchain required.

From source:

bash

# 1. Build
cd go-server
go mod tidy
go build -o aws-connector-server .
cp aws-connector-server ../plugin/servers/go/

# 2. Set up auth — needs the aws CLI itself installed and configured
#    (aws configure / aws sso login) — see SETUP.md
export AWS_PROFILE=default   # optional, only if not using "default"

# 3. Run
./go-server/aws-connector-server   # serves MCP over stdio

Excerpt — the full document is on GitHub.

Alternatives to aws-mcp-connector

Maintain aws-mcp-connector? Add a badge to your README

Shows its health grade, and links readers to install steps for every client.

markdown

[![aws-mcp-connector on MCP Skills Hub](https://mcp-skills-hub.vercel.app/badge/io-github-ferhatdundar-aws-mcp-connector)](https://mcp-skills-hub.vercel.app/mcps/io-github-ferhatdundar-aws-mcp-connector)

Catalog data refreshed Oct 28, 2026. Something wrong? Report it.