MCP server for the AWS CLI. Read-only by default; single Go binary.
MCPpedia last refreshed this data
io.github.FerhatDundar/aws-mcp-connector is an MCP server that MCP server for the AWS CLI. Read-only by default; single Go binary. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 39/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"io-github-ferhatdundar-aws-mcp-connector": {
"command": "<see-readme>",
"args": []
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
A single static Go binary that speaks the Model Context Protocol and lets an agent run AWS CLI commands: any aws invocation, across every service the CLI supports, with a read-only-by-default safety gate on anything that mutates state.
No automated test available for this server. Check the GitHub README for setup instructions.
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
No package registry to scan.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in cloud
MCP Server for GCP environment for interacting with various Observability APIs.
Evidence-grounded agent memory with mandatory provenance, on local SQLite or Cloudflare D1
MCP Server for kubernetes management commands
Upload, organize, search, and transform images, videos, and files with AI-powered tools.
MCP Security Weekly
Get CVE alerts and security updates for io.github.FerhatDundar/aws-mcp-connector and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
A single static Go binary that speaks the Model Context Protocol
and lets an agent run AWS CLI commands: any aws <service> <operation>
invocation, across every service the CLI supports, with a read-only-by-default
safety gate on anything that mutates state.
No Python, no uv, no runtime dependency to install — just a binary and
an .mcp.json. It shells out to the aws binary already installed and
configured on the host (profile, SSO, IAM role, or static keys — whatever
the AWS CLI's own credential chain resolves) instead of reimplementing the
AWS SDK, so it gets the full breadth of the CLI for free rather than a
hand-curated subset of services.
An agent that only has a narrow, hand-picked set of AWS tools hits a wall the moment you need something outside that set. This connector instead wraps the AWS CLI itself, so an agent can run
aws s3 ls,aws ec2 describe-instances,aws iam list-users— anything the CLI can do — without waiting on a new tool to be written for it. Mutating commands are blocked by default and require both a server-level opt-in and a per-callconfirm=true, so exploring/debugging is safe out of the box.
| Tool | What it does | Write? |
|---|---|---|
aws_exec | Run any aws <service> <operation> ... command. Read-only by default — mutating commands need AWS_MCP_ALLOW_WRITE=true on the server and confirm=true on the call. | ✅ (gated) |
aws_help | Show aws <service> [subcommand] help text — always safe, use it to check exact syntax before calling aws_exec. | |
aws_whoami | Show the AWS identity (account, ARN, user/role) the configured credentials resolve to. | |
aws_list_profiles | List named profiles configured in ~/.aws/config on the host. |
Every tool accepts an optional response_format: markdown (default,
pretty tables for a chat UI) or json (for programmatic use).
Fastest path: grab a prebuilt bundle from the latest release —
download aws-mcp-connector-plugin-<version>-<os>-<arch>.zip, unzip it,
and point Cowork/Claude at the plugin/ folder inside (see step 4 of
SETUP.md). No Go toolchain required.
From source:
# 1. Build
cd go-server
go mod tidy
go build -o aws-connector-server .
cp aws-connector-server ../plugin/servers/go/
# 2. Set up auth — needs the aws CLI itself installed and configured
# (a
... [View full README on GitHub](https://github.com/ferhatdundar/aws-mcp-connector#readme)