# Aws Mcp

> An MCP(Model Context Protocol) Server for AWS services

- **Type:** MCP server
- **Install:** `agentstack add mcp-lokeswaran-aj-aws-mcp`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [lokeswaran-aj](https://agentstack.voostack.com/s/lokeswaran-aj)
- **Installs:** 0
- **Category:** [Cloud & Infrastructure](https://agentstack.voostack.com/c/cloud-infrastructure)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [lokeswaran-aj](https://github.com/lokeswaran-aj)
- **Source:** https://github.com/lokeswaran-aj/aws-mcp

## Install

```sh
agentstack add mcp-lokeswaran-aj-aws-mcp
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

## 🎬 Demo

See it in action! Here's how easy it is to spin up a full-blown EC2 setup — VPC, subnets, security groups, this works — all through natural language prompts to an AI Model Context Protocol (MCP) server.

---

## ✨ Features

Currently supports

1. RDS
2. S3
3. EC2
4. VPC
5. Subnet
6. Internet Gateway
7. Route Table
8. Security Group
9. Key Pair
10. Instance Tag
11. AMI

More AWS services (like Lambda, API Gateway, etc.) coming soon! Contributions welcome 🚀

---

## 📋 Prerequisites

**For Development:**

- **Node.js** >= 18.0.0
- **pnpm** >= 10.0.0

**For Docker Deployment:**

- **Docker** and **Docker Compose**

**For Both:**

- **AWS Account** with AWS credentials (Access Key ID and Secret Access Key)

---

## ⚙️ Developer Setup

### 1. Clone the repo

```bash
git clone https://github.com/lokeswaran-aj/aws-mcp.git
cd aws-mcp
```

> ❗️Currently, the server reads credentials from MCP configuration headers. In future versions, we'll support AWS Role ARN.

### 2. Install dependencies

```bash
pnpm install
```

> 💡 Make sure you have `pnpm` installed globally. If not:
>
> ```bash
> npm install -g pnpm
> ```

### 3. Run the dev server

```bash
pnpm dev
```

---

## 🐳 Docker Deployment

### Quick Start with Docker

**Option 1: Using Docker Compose (Recommended)**

```bash
docker-compose up -d
```

**Option 2: Using Docker directly**

```bash
# Build the image
docker build -t aws-mcp .

# Run with port mapping
docker run -d --name aws-mcp-server -p 8080:8080 aws-mcp
```

The server will be available at:

- MCP HTTP Stream: `http://localhost:8080/mcp`
- MCP SSE: `http://localhost:8080/sse`

### Managing Docker Containers

```bash
# View logs
docker-compose logs -f

# Stop container
docker-compose down

# Rebuild and restart
docker-compose build --no-cache && docker-compose up -d

# Stop aws-mcp-server and remove container
docker stop aws-mcp-server && docker rm aws-mcp-server
```

> 💡 AWS credentials are still passed via HTTP headers (same as development setup). No container configuration needed.

---

## 🧪 Example: Cursor Configuration

To use this server with [Cursor](https://cursor.com), add the following to your `~/.cursor/mcp.json`:

```json
{
  "mcpServers": {
    "aws": {
      "serverUrl": "http://localhost:8080/mcp",
      "headers": {
        "AWS_ACCESS_KEY_ID": "YOUR_AWS_ACCESS_KEY_ID",
        "AWS_SECRET_ACCESS_KEY": "YOUR_AWS_SECRET_ACCESS_KEY",
        "AWS_SESSION_TOKEN": "YOUR_AWS_SESSION_TOKEN"
      }
    }
  }
}
```

> ❗️ Use `http://localhost:8080/mcp` if your client supports HTTP streamable(For eg: Cursor). Use `http://localhost:8080/sse` if your client supports only SSE(For eg: Windsurf).

MCP HTTP streamable endpoint: [http://localhost:8080/mcp](http://localhost:8080/mcp)

MCP SSE endpoint: [http://localhost:8080/sse](http://localhost:8080/sse)

---

## 📁 Project Structure

```bash
.
├── src/
│   ├── server.ts             # AWS MCP server setup - Entry point
│   ├── aws-clients.ts        # AWS SDK client setup
│   ├── config/               # App configuration
│   ├── tools/                # Tools definitions
│   │   ├── rds/              # RDS operations
│   │   ├── s3/               # S3 operations
│   │   ├── ec2/              # EC2 operations
│   │   ├── vpc/              # VPC operations
│   │   ├── subnet/           # Subnet operations
│   │   ├── internet-gateway/ # Internet Gateway operations
│   │   ├── route-table/      # Route Table operations
│   │   ├── security-group/   # Security Group operations
│   │   ├── key-pair/         # Key Pair operations
│   │   ├── instance-tag/     # Instance Tag operations
│   │   ├── ami/              # AMI operations
│   ├── schema/               # Tool input schemas
│   ├── types/                # TypeScript definitions
│   └── utils/                # Helper functions
├── package.json              # Dependencies and scripts
└── README.md                 # This file
```

---

## 📌 Roadmap

- [x] Support RDS (Create, List, Update, Delete)
- [x] Add S3 tools
- [x] Add Network tools
- [x] Add EC2 tools
- [ ] Add Lambda tools
- [ ] Add API Gateway tools
- [ ] Add IAM tools
- [ ] Add ECS tools

---

## 🤝 Contributing

Want to help make AWS infra chat-native?
Pull requests, feedback, and feature suggestions are welcome!

- Clone and fork the repo
- Create your feature branch (`git checkout -b feat/add-ec2`)
- Commit and push
- Open a PR 🙌

---

## 📄 License

MIT — do what you want, just give credit where it's due. ✌️

---

## ⚡ Powered by

- [Model Context Protocol](https://modelcontextprotocol.io/introduction)
- [FastMCP](https://github.com/fastmcp/fastmcp)
- [AWS SDK for JS (v3)](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/)

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [lokeswaran-aj](https://github.com/lokeswaran-aj)
- **Source:** [lokeswaran-aj/aws-mcp](https://github.com/lokeswaran-aj/aws-mcp)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-lokeswaran-aj-aws-mcp
- Seller: https://agentstack.voostack.com/s/lokeswaran-aj
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.