aashari/mcp-server-aws-sso

MCP Security & Auth

AWS Single Sign-On (SSO) integration enabling AI systems to securely interact with AWS resources by initiating SSO login, listing accounts/roles, and executing AWS CLI commands using temporary credentials.

Track releases GitHub

TypeScript Latest v4.0.0 · 5mo ago Security brief →

Features

Connect AI assistants to AWS accounts via IAM Identity Center
Execute arbitrary AWS CLI commands using natural language
Manage EC2 instances and run shell commands through AI

Recent releases

View all 14 releases →

v4.0.0 Breaking risk 5mo

Breaking changes

Removed support for publishing with NPM_TOKEN; now requires OIDC trusted publisher configuration on npmjs.com.

Notable features

Modernized dependencies and migrated to OIDC trusted publishing

Full changelog

4.0.0 (2026-02-04)

Features

modernize dependencies and migrate to OIDC trusted publishing (7c23f37)

BREAKING CHANGES

Requires OIDC trusted publisher configuration on npmjs.com. The package will no longer publish with NPM_TOKEN. Follow docs/OIDC-TRUSTED-PUBLISHING-SETUP.md for migration instructions.

View release on GitHub

v3.1.0 New feature 7mo

Notable features

Raw response logging with configurable truncation for large API responses

Full changelog

3.1.0 (2025-12-03)

Features

add raw response logging with truncation for large API responses (6ec5c29)

View release on GitHub

v3.0.0 Breaking risk 10mo

Notable features

Enhance AI guidance for AWS SSO login instructions

Full changelog

3.0.0 (2025-09-20)

Features

enhance AI guidance for AWS SSO login instructions (775033d)

BREAKING CHANGES

None - backward compatible enhancement

View release on GitHub

v2.0.1 Bug fix 10mo

Fixed dotenv from outputting to STDOUT in MCP mode.

Full changelog

2.0.1 (2025-09-20)

Bug Fixes

prevent dotenv from outputting to STDIO in MCP mode (#151) (9ec8c30)

View release on GitHub

v2.0.0 Breaking risk 10mo

Breaking changes

AWS CLI commands now properly handle cross‑region authentication by using the SSO token region for API calls while preserving the user's region preference for command execution.

Full changelog

2.0.0 (2025-09-20)

Bug Fixes

eliminate AWS CLI path warnings and unused imports (6a222c4)
resolve AWS CLI execution and credential region mismatch issues (aa3789c)
resolve CLI test failures and finalize warning elimination (62bfe62)
resolve test environment issues and improve type safety (183aba3)

BREAKING CHANGES

AWS CLI commands now properly handle cross-region authentication by using SSO token region for API calls while preserving user's region preference for command execution

View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.