{"id":50531202,"url":"https://github.com/alexei-led/cloud-mcp-server","last_synced_at":"2026-06-10T19:00:34.180Z","repository":{"id":283298784,"uuid":"951314828","full_name":"alexei-led/cloud-mcp-server","owner":"alexei-led","description":"A lightweight service that enables AI assistants to execute AWS CLI commands (in safe containerized environment) through the Model Context Protocol (MCP). Bridges Claude, Cursor, and other MCP-aware AI tools with AWS CLI for enhanced cloud infrastructure management.","archived":false,"fork":false,"pushed_at":"2026-02-27T14:42:40.000Z","size":5912,"stargazers_count":182,"open_issues_count":0,"forks_count":32,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-06-07T01:17:17.612Z","etag":null,"topics":["ai-assistant","aws","aws-automation","claude","cloud-infrastructure","devops","docker","mcp","mcp-server","modelcontextprotocol"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alexei-led.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-03-19T13:42:40.000Z","updated_at":"2026-05-27T15:48:30.000Z","dependencies_parsed_at":null,"dependency_job_id":"14315013-2499-4e2e-91a9-7eca6912624b","html_url":"https://github.com/alexei-led/cloud-mcp-server","commit_stats":null,"previous_names":["alexei-led/aws-mcp-server"],"tags_count":21,"template":false,"template_full_name":null,"purl":"pkg:github/alexei-led/cloud-mcp-server","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexei-led%2Fcloud-mcp-server","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexei-led%2Fcloud-mcp-server/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexei-led%2Fcloud-mcp-server/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexei-led%2Fcloud-mcp-server/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexei-led","download_url":"https://codeload.github.com/alexei-led/cloud-mcp-server/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexei-led%2Fcloud-mcp-server/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34165482,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-10T02:00:07.152Z","response_time":89,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ai-assistant","aws","aws-automation","claude","cloud-infrastructure","devops","docker","mcp","mcp-server","modelcontextprotocol"],"created_at":"2026-06-03T14:00:22.574Z","updated_at":"2026-06-10T19:00:34.175Z","avatar_url":"https://github.com/alexei-led.png","language":"Python","funding_links":[],"categories":["Cloud \u0026 Infrastructure","Cloud Platforms"],"sub_categories":["AWS"],"readme":"# AWS MCP Server\n\n[![CI](https://github.com/alexei-led/aws-mcp-server/actions/workflows/ci.yml/badge.svg)](https://github.com/alexei-led/aws-mcp-server/actions/workflows/ci.yml)\n[![PyPI](https://img.shields.io/pypi/v/aws-mcp)](https://pypi.org/project/aws-mcp/)\n[![Code Coverage](https://codecov.io/gh/alexei-led/aws-mcp-server/branch/main/graph/badge.svg?token=K8vdP3zyuy)](https://codecov.io/gh/alexei-led/aws-mcp-server)\n[![Linter: Ruff](https://img.shields.io/badge/Linter-Ruff-brightgreen?style=flat-square)](https://github.com/alexei-led/aws-mcp-server)\n[![Docker Image](https://img.shields.io/badge/ghcr.io-aws--mcp--server-blue?logo=docker)](https://github.com/alexei-led/aws-mcp-server/pkgs/container/aws-mcp-server)\n\nGive Claude access to all 200+ AWS services through the AWS CLI.\n\n## Demo\n\n[Demo](https://private-user-images.githubusercontent.com/1898375/424996801-b51ddc8e-5df5-40c4-8509-84c1a7800d62.mp4?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.tIb7uSkDpSaspIluzCliHS8ATmlzkvEnF3CiClD-UGQ)\n\n## What It Does\n\nThis MCP server lets Claude run AWS CLI commands on your behalf. Instead of wrapping each AWS API individually, it wraps the CLI itself—giving Claude complete AWS access through just two tools:\n\n| Tool               | Purpose                                                           |\n| ------------------ | ----------------------------------------------------------------- |\n| `aws_cli_help`     | Get documentation for any AWS command                             |\n| `aws_cli_pipeline` | Execute AWS CLI commands with optional pipes (`jq`, `grep`, etc.) |\n\nClaude learns commands on-demand using `--help`, then executes them. Your IAM policy controls what it can actually do.\n\n```mermaid\nflowchart LR\n    Claude[Claude] --\u003e|MCP| Server[AWS MCP Server]\n    Server --\u003e CLI[AWS CLI]\n    CLI --\u003e AWS[AWS Cloud]\n    IAM[Your IAM Policy] -.-\u003e|controls| AWS\n```\n\n## What's New\n\n- **Streamable HTTP transport** — New `streamable-http` transport for web-based MCP clients, replacing the deprecated `sse` transport ([#33](https://github.com/alexei-led/aws-mcp-server/issues/33))\n- **Input validation error handling** — Validation errors now return proper MCP tool errors (`isError: true`) instead of regular results ([#34](https://github.com/alexei-led/aws-mcp-server/issues/34))\n- **Server description** — Server advertises its purpose to MCP clients via the `instructions` field ([#35](https://github.com/alexei-led/aws-mcp-server/issues/35))\n- **Server icons** — Server provides icon metadata for MCP client display ([#36](https://github.com/alexei-led/aws-mcp-server/issues/36))\n- **Graceful shutdown** — Server disconnects cleanly when the MCP client disconnects ([#16](https://github.com/alexei-led/aws-mcp-server/issues/16))\n\n## Quick Start\n\n### Prerequisites\n\n- [AWS CLI](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html) installed\n- AWS credentials configured (see [AWS Credentials](#aws-credentials))\n- [uv](https://docs.astral.sh/uv/getting-started/installation/) installed (for `uvx`)\n\n### Claude Code\n\nAdd to your MCP settings (Cmd+Shift+P → \"Claude: Open MCP Config\"):\n\n```json\n{\n  \"mcpServers\": {\n    \"aws\": {\n      \"command\": \"uvx\",\n      \"args\": [\"aws-mcp\"]\n    }\n  }\n}\n```\n\n### Claude Desktop\n\nAdd to your Claude Desktop config file:\n\n**macOS**: `~/Library/Application Support/Claude/claude_desktop_config.json`\n**Windows**: `%APPDATA%\\Claude\\claude_desktop_config.json`\n\n```json\n{\n  \"mcpServers\": {\n    \"aws\": {\n      \"command\": \"uvx\",\n      \"args\": [\"aws-mcp\"]\n    }\n  }\n}\n```\n\n### Docker (More Secure)\n\nDocker provides stronger isolation by running commands in a container:\n\n```json\n{\n  \"mcpServers\": {\n    \"aws\": {\n      \"command\": \"docker\",\n      \"args\": [\n        \"run\",\n        \"-i\",\n        \"--rm\",\n        \"-v\",\n        \"~/.aws:/home/appuser/.aws:ro\",\n        \"ghcr.io/alexei-led/aws-mcp-server:latest\"\n      ]\n    }\n  }\n}\n```\n\n\u003e **Note**: Replace `~/.aws` with the full path on Windows (e.g., `C:\\Users\\YOU\\.aws`).\n\n### Docker with Streamable HTTP Transport\n\nFor web-based MCP clients, use the `streamable-http` transport:\n\n```bash\ndocker run --rm -p 8000:8000 \\\n  -e AWS_MCP_TRANSPORT=streamable-http \\\n  -v ~/.aws:/home/appuser/.aws:ro \\\n  ghcr.io/alexei-led/aws-mcp-server:latest\n```\n\nThe server will be available at `http://localhost:8000/mcp`.\n\n\u003e **Note**: The `sse` transport is deprecated. Use `streamable-http` instead.\n\n## AWS Credentials\n\nThe server uses the standard AWS credential chain. Your credentials are discovered automatically from:\n\n1. **Environment variables**: `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`\n2. **Credentials file**: `~/.aws/credentials`\n3. **Config file**: `~/.aws/config` (for profiles and region)\n4. **IAM role**: When running on EC2, ECS, or Lambda\n\nTo use a specific profile:\n\n```json\n{\n  \"mcpServers\": {\n    \"aws\": {\n      \"command\": \"uvx\",\n      \"args\": [\"aws-mcp\"],\n      \"env\": {\n        \"AWS_PROFILE\": \"my-profile\"\n      }\n    }\n  }\n}\n```\n\n## Configuration\n\n### AWS Settings\n\n| Environment Variable          | Description                                    | Default              |\n| ----------------------------- | ---------------------------------------------- | -------------------- |\n| `AWS_PROFILE`                 | AWS profile to use                             | `default`            |\n| `AWS_REGION`                  | AWS region (also accepts `AWS_DEFAULT_REGION`) | `us-east-1`          |\n| `AWS_CONFIG_FILE`             | Custom path to AWS config file                 | `~/.aws/config`      |\n| `AWS_SHARED_CREDENTIALS_FILE` | Custom path to credentials file                | `~/.aws/credentials` |\n\n### Server Settings\n\n| Environment Variable          | Description                                      | Default  |\n| ----------------------------- | ------------------------------------------------ | -------- |\n| `AWS_MCP_TIMEOUT`             | Command execution timeout in seconds             | `300`    |\n| `AWS_MCP_MAX_OUTPUT`          | Maximum output size in characters                | `100000` |\n| `AWS_MCP_TRANSPORT`           | Transport protocol (`stdio`, `sse`, or `streamable-http`) | `stdio`  |\n| `AWS_MCP_SANDBOX`             | Sandbox mode (`auto`, `disabled`, `required`)    | `auto`   |\n| `AWS_MCP_SANDBOX_CREDENTIALS` | Credential passing (`env`, `aws_config`, `both`) | `both`   |\n\n## Security\n\n**Your IAM policy is your security boundary.** This server executes whatever AWS commands Claude requests—IAM controls what actually succeeds.\n\nBest practices:\n\n- Use a **least-privilege IAM role** (only permissions Claude needs)\n- **Never use root credentials**\n- Consider **Docker** for additional host isolation\n\nFor detailed security architecture, see [Security Documentation](docs/SECURITY.md).\n\n## Documentation\n\n- [Usage Guide](docs/USAGE.md) — Tools, resources, and prompt templates\n- [Security Architecture](docs/SECURITY.md) — IAM + Sandbox + Docker model\n- [Development Guide](docs/DEVELOPMENT.md) — Contributing and testing\n\n## License\n\nMIT License — see [LICENSE](LICENSE) for details.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Falexei-led%2Fcloud-mcp-server","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Falexei-led%2Fcloud-mcp-server","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Falexei-led%2Fcloud-mcp-server/lists"}