AWS Connector MCP server

by FerhatDundar·io.github.FerhatDundar/aws-mcp-connector·v0.1.2

No reviews yet

MCP server for the AWS CLI. Read-only by default; single Go binary.

B73/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B73/100

full report

Adoption

New

0 stars

Reviews

Write one

Nobody has reviewed AWS Connector yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

AWS Connector tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

no findings

–Code scanpackage could not be scannedn/a
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 4 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 73/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How AWS Connector compares

Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 73/100; higher than 35% of 1,119 Developer tools servers

Install AWS Connector in Claude Code, Cursor or VS Code

The registry entry has no remote endpoint or installable package.

What the publisher says

From the AWS Connector repository's README, as published. We do not edit it. Read it on GitHub

🔌 aws-mcp-connector

Talk to AWS CLI from an MCP-speaking agent.

A single static Go binary that speaks the Model Context Protocol and lets an agent run AWS CLI commands: any aws invocation, across every service the CLI supports, with a read-only-by-default safety gate on anything that mutates state.

No Python, no uv, no runtime dependency to install — just a binary and an .mcp.json. It shells out to the aws binary already installed and configured on the host (profile, SSO, IAM role, or static keys — whatever the AWS CLI's own credential chain resolves) instead of reimplementing the AWS SDK, so it gets the full breadth of the CLI for free rather than a hand-curated subset of services.

✨ Why this exists

An agent that only has a narrow, hand-picked set of AWS tools hits a wall

the moment you need something outside that set. This connector instead

wraps the AWS CLI itself, so an agent can run aws s3 ls, aws ec2

describe-instances, aws iam list-users — anything the CLI can do —

without waiting on a new tool to be written for it. Mutating commands are

blocked by default and require both a server-level opt-in and a per-call

confirm=true, so exploring/debugging is safe out of the box.

🧰 Tools

Every tool accepts an optional response_format: markdown (default, pretty tables for a chat UI) or json (for programmatic use).

🚀 Quickstart

Fastest path: grab a prebuilt bundle from the latest release — download aws-mcp-connector-plugin---.zip, unzip it, and point Cowork/Claude at the plugin/ folder inside (see step 4 of SETUP.md). No Go toolchain required.

From source:

# 1. Build
cd go-server
go mod tidy
go build -o aws-connector-server .
cp aws-connector-server ../plugin/servers/go/

# 2. Set up auth — needs the aws CLI itself installed and configured

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

AWS Connector: common questions

Is AWS Connector MCP server safe?: Mostly: it is graded B (73/100). Read the AWS Connector safety report
Does AWS Connector need an API key?: Yes. The registry entry asks for AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN.
Is AWS Connector maintained?: The last commit was 45 days ago (2026-09-20). The latest release is v0.1.2.
What can I use instead of AWS Connector?: Servers from other publishers that do the same job: Strimzi Kafka CLI MCP server, clawops MCP server and TerraVision MCP server.

Alternatives to AWS Connector

Same job from other publishers: the closest match first, then the best rated.

Strimzi Kafka CLI
Manage Apache Kafka on Kubernetes via Strimzi. Clusters, topics, users, connectors, MM2.
not reviewed
Growing
A
clawops
Deploy self-hosted OpenClaw to AWS, GCP, Azure or a local VM — a CLI and an MCP server in one.
not reviewed
Growing
C
TerraVision
Draw cloud architecture diagrams with official AWS, Azure and GCP icons from a prompt or Terraform.
not reviewed
Established
A
Gk CLI
The GitKraken MCP Server for managing repos, PRs, issues across GitHub, GitLab, Bitbucket and more.
not reviewed
Established
B
cloud-audit
AWS security scanner with attack chain detection, IAM privilege escalation, and fixes
not reviewed
Established
A

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: B · 73/100
Stars: 0
Downloads/wk: –
Price: Free
Licence: MIT
Transport: Local · mcpb
Version: 0.1.2
Category: Developer tools
Last release: 2026-09-20

Credentials it needs

AWS_PROFILENamed profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGIONDefault AWS region if not set elsewhere.
AWS_ACCESS_KEY_IDsecretStatic AWS access key. Only needed if not using a profile/SSO/role.
AWS_SECRET_ACCESS_KEYsecretStatic AWS secret key. Only needed if not using a profile/SSO/role.
AWS_SESSION_TOKENsecretTemporary session token, if using short-lived credentials.
AWS_MCP_ALLOW_WRITESet to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICESOptional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATHOptional path to the aws binary. Defaults to "aws" resolved via PATH.
AWS_PROFILENamed profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGIONDefault AWS region if not set elsewhere.
AWS_ACCESS_KEY_IDsecretStatic AWS access key. Only needed if not using a profile/SSO/role.
AWS_SECRET_ACCESS_KEYsecretStatic AWS secret key. Only needed if not using a profile/SSO/role.
AWS_SESSION_TOKENsecretTemporary session token, if using short-lived credentials.
AWS_MCP_ALLOW_WRITESet to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICESOptional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATHOptional path to the aws binary. Defaults to "aws" resolved via PATH.
AWS_PROFILENamed profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGIONDefault AWS region if not set elsewhere.
AWS_ACCESS_KEY_IDsecretStatic AWS access key. Only needed if not using a profile/SSO/role.
AWS_SECRET_ACCESS_KEYsecretStatic AWS secret key. Only needed if not using a profile/SSO/role.
AWS_SESSION_TOKENsecretTemporary session token, if using short-lived credentials.
AWS_MCP_ALLOW_WRITESet to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICESOptional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATHOptional path to the aws binary. Defaults to "aws" resolved via PATH.
AWS_PROFILENamed profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGIONDefault AWS region if not set elsewhere.
AWS_ACCESS_KEY_IDsecretStatic AWS access key. Only needed if not using a profile/SSO/role.
AWS_SECRET_ACCESS_KEYsecretStatic AWS secret key. Only needed if not using a profile/SSO/role.
AWS_SESSION_TOKENsecretTemporary session token, if using short-lived credentials.
AWS_MCP_ALLOW_WRITESet to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICESOptional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATHOptional path to the aws binary. Defaults to "aws" resolved via PATH.
AWS_PROFILENamed profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGIONDefault AWS region if not set elsewhere.
AWS_ACCESS_KEY_IDsecretStatic AWS access key. Only needed if not using a profile/SSO/role.
AWS_SECRET_ACCESS_KEYsecretStatic AWS secret key. Only needed if not using a profile/SSO/role.
AWS_SESSION_TOKENsecretTemporary session token, if using short-lived credentials.
AWS_MCP_ALLOW_WRITESet to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICESOptional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATHOptional path to the aws binary. Defaults to "aws" resolved via PATH.
AWS_PROFILENamed profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGIONDefault AWS region if not set elsewhere.
AWS_ACCESS_KEY_IDsecretStatic AWS access key. Only needed if not using a profile/SSO/role.
AWS_SECRET_ACCESS_KEYsecretStatic AWS secret key. Only needed if not using a profile/SSO/role.
AWS_SESSION_TOKENsecretTemporary session token, if using short-lived credentials.
AWS_MCP_ALLOW_WRITESet to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICESOptional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATHOptional path to the aws binary. Defaults to "aws" resolved via PATH.

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/ferhatdundar-aws-mcp-connector.svg)](https://mcp.market/server/ferhatdundar-aws-mcp-connector)

How the badge works