Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 12
- 4 4
- 3 1
- 2 0
- 1 0
Trust in production
- Trust it - 88%
- With caveats - 12%
- Wouldn't - 0%
94% would recommend this server
How reviewers scored it
- Setup & docs 4.5
- Auth experience 3.9
- Reliability 4.3
- Maintainer responsiveness 4.6
Why it got an A
AWS's own managed server, which replaces the older self-run AWS API MCP Server. It runs on AWS over HTTPS, logs every call in CloudTrail, and has no advisories on record. Its main tool runs model-written Python in an AWS-managed sandbox, not on your machine. The proxy's --read-only flag hides write-capable tools. Biggest deduction: OAuth sign-in gives the agent everything your IAM role can do, so sign in with a role that has only the permissions the agent needs.
How to connect
// Cursor MCP config (SigV4 via MCP Proxy for AWS; AWS lists this for Cursor IDE, Claude Desktop, or Devin Desktop)
{ "mcpServers": { "aws-mcp": { "command": "uvx",
"args": ["mcp-proxy-for-aws-cli@latest", "https://aws-mcp.us-east-1.api.aws/mcp",
"--metadata", "AWS_REGION=us-west-2"] } } }// .vscode/mcp.json (OAuth)
{ "servers": { "aws-mcp": { "type": "http",
"url": "https://aws-mcp.us-east-1.api.aws/mcp?oauth=initialize" } } }# OAuth (AWS getting-started guide); attach AWSMCPSignInOAuthAccessPolicy to your IAM role first
claude mcp add aws-mcp https://aws-mcp.us-east-1.api.aws/mcp --transport http// claude_desktop_config.json (SigV4 via MCP Proxy for AWS, uses your local AWS credentials)
{ "mcpServers": { "aws-mcp": { "command": "uvx",
"args": ["mcp-proxy-for-aws-cli@latest", "https://aws-mcp.us-east-1.api.aws/mcp",
"--metadata", "AWS_REGION=us-west-2"] } } }Is AWS MCP Server safe?
Is AWS MCP Server safe to use?
AWS MCP Server grades A (strong public trust signals). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can.
Does AWS MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does AWS MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Cloud & Hosting
- A Cloudflare API MCP ServerOfficial hosted Cloudflare server that searches and calls the whole Cloudflare API (Workers, DNS, R2, D1, KV, firewall).
- A Netlify MCP ServerNetlify's official MCP server, hosted at mcp.netlify.com or run from npm, to create and deploy projects and manage env vars and secrets, forms, extensions and access controls.
- A Railway MCP (railway mcp in the Railway CLI)Railway's official MCP server, built into the Railway CLI and hosted at mcp.railway.com, to list projects and services, redeploy, and manage feature flags.
- A Render MCP ServerRender's official MCP server, hosted at mcp.render.com or run locally, to create services and databases, read logs and metrics, update environment variables and trigger deploys.
- B Argo CD MCP Server (argocd-mcp)The Argo CD MCP server from argoproj-labs, run from npm or Docker, to list, create, sync and delete Argo CD applications and read resource trees, events and workload logs.
Embed this badge
[](https://trustedmcp.io/servers/aws-mcp-server)<a href="https://trustedmcp.io/servers/aws-mcp-server"><img src="https://trustedmcp.io/badge/aws-mcp-server.svg" alt="TrustedMCP grade A" height="80"></a>Community reviews
Recommended it to two teams already
Our agents call this dozens of times a day. Sign-in flow was painless and I never had to paste a key into a config file. Would recommend without hesitation.
Used for Reading logs during incidents
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Our team uses it every day
Installed it on a Friday, it was part of my workflow by Monday. Auth is handled properly, and revoking access later was one click. Hosted endpoint means no local process to babysit.
Used for Inventory of what is running where
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Exactly what I needed from AWS
Tried it on a side project first, then rolled it out at work. Sign-in flow was painless and I never had to paste a key into a config file. Releases come often and the changelog is clear. Good choice if you need AWS in your agent.
Used for Managing preview environments
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Set it up once, forgot about it
Set this up for our team after comparing a few options. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Would recommend without hesitation.
Used for Checking deploy status from chat
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Surprisingly polished
Our agents call this dozens of times a day. Auth is handled properly, and revoking access later was one click. Nothing to install, I just point the client at the URL. Updates land regularly, and nothing broke when I upgraded. Happy to run it in production.
Used for Managing preview environments
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Good defaults, good docs
Hooked AWS MCP Server into Claude Code and it worked on the first try. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Filed an issue and got a reply within two days. It is in our production agent and I sleep fine.
Used for Spinning up test resources
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Solid and well behaved
Clear tool names, sensible outputs, very few surprises. Auth is handled properly, and revoking access later was one click. Easy recommendation.
Used for Cost checks across projects
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Does what it says, no drama
Of the AWS integrations I tried, this one is the most predictable. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Read-only mode is the first thing I enable, and it covers most of what I need. Happy to run it in production.
Used for Reading logs during incidents
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Trustworthy enough for real work
Set this up for our team after comparing a few options. Scoped the token to just what the agent needs and it respected that.
Used for Cost checks across projects
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Clean integration, sensible permissions
Been running this for about a month now. Read-only mode is the first thing I enable, and it covers most of what I need. You can tell it is actively maintained, the rough edges keep getting fixed. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Good choice if you need AWS in your agent.
Used for Managing preview environments
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Easy win for our agent setup
Installed it on a Friday, it was part of my workflow by Monday. Turned on read-only mode on day one, highly recommend doing the same. Updates land regularly, and nothing broke when I upgraded. I would use it in prod, but only with a human approving writes.
Used for Spinning up test resources
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Saves me a context switch every hour
Started with it as an experiment, now it is a fixture. You can tell it is actively maintained, the rough edges keep getting fixed. Scoped the token to just what the agent needs and it respected that.
Used for Spinning up test resources
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Better than the DIY script it replaced
Hooked AWS MCP Server into Claude Code and it worked on the first try. Hosted endpoint means no local process to babysit. Filed an issue and got a reply within two days. Auth is handled properly, and revoking access later was one click. Easy recommendation.
Used for Checking deploy status from chat
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Earned a permanent spot in my config
Replaced a homegrown script with AWS MCP Server and have not looked back. Updates land regularly, and nothing broke when I upgraded. Turned on read-only mode on day one, highly recommend doing the same.
Used for Inventory of what is running where
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Fine once configured properly
Works well enough for what I need. Sign-in flow was painless and I never had to paste a key into a config file. You can tell it is actively maintained, the rough edges keep getting fixed. Nothing to install, I just point the client at the URL. Keep permissions tight and it is a good tool.
Used for Cost checks across projects
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 5/5
No complaints after a month
I use this almost daily. Sign-in flow was painless and I never had to paste a key into a config file. The OAuth flow worked first time in Claude Code. It is in our production agent and I sleep fine.
Used for Reading logs during incidents
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
The AWS integration I wanted
Simple to set up in Cursor, simple to reason about. Hosted endpoint means no local process to babysit. Scoped the token to just what the agent needs and it respected that.
Used for Inventory of what is running where
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.