SubmitLog in
c/devops › command
0votes

AWS API MCP server (AWS Labs)

MCP server
submitted by u/client to c/devops · 0 uses

Let an agent run validated AWS CLI commands across every AWS service, with read-only and mutation-consent options.

The AWS API server from AWS Labs turns natural-language requests into validated AWS CLI calls and runs them with your local credentials, covering essentially every AWS service. It can suggest commands before running them. Set READ_OPERATIONS_ONLY=true to block anything that changes resources, or REQUIRE_MUTATION_CONSENT=true to ask before writes; pick a least-privilege profile with AWS_API_MCP_PROFILE_NAME. Good for inventory questions, troubleshooting and scripted ops with a human in the loop.

Try asking:

  • "List all EC2 instances in us-east-1 that have been stopped for more than a week."
  • "Which S3 buckets in this account are public?"
  • "Show CloudWatch alarms currently in ALARM state."

Sign-in: an API key or token (set it in the install snippet below).

0 commentsreport

Install this MCP server

Optional: fill these in to put them straight into the snippet. They stay in your browser and are never sent to CommandVault.

Add to Cursor
Or add to .cursor/mcp.json (project) or ~/.cursor/mcp.json (everywhere)
{
  "mcpServers": {
    "aws-api": {
      "command": "uvx",
      "args": [
        "awslabs.aws-api-mcp-server@latest"
      ],
      "env": {
        "AWS_REGION": "YOUR_AWS_REGION",
        "AWS_API_MCP_PROFILE_NAME": "YOUR_AWS_API_MCP_PROFILE_NAME",
        "READ_OPERATIONS_ONLY": "YOUR_READ_OPERATIONS_ONLY",
        "REQUIRE_MUTATION_CONSENT": "YOUR_REQUIRE_MUTATION_CONSENT"
      }
    }
  }
}

This runs a program on your computer. Check the command, arguments and source before you install it. Source Docs

More from c/devops

See all of c/devops →
0 comments

Log in to join the discussion.