Skip to content

alexei-led/aws-mcp-server

MCP SaaS Integrations

An MCP server that lets Claude execute arbitrary AWS CLI commands on your behalf, with IAM‑controlled permissions.

Python Latest v1.7.0 · 3mo ago Security brief →

Features

  • Provides two tools: `aws_cli_help` for command documentation and `aws_cli_pipeline` for executing CLI calls (with optional pipes).
  • Supports Docker isolation for stronger security when running commands in a container.
  • Introduces streamable‑HTTP transport for web‑based MCP clients, replacing the deprecated SSE transport.
  • Handles input validation errors by returning proper MCP tool errors (`isError: true`).

Recent releases

View all 5 releases →
v1.7.0 Breaking risk

LLM-friendly documentation and codebase cleanup.

Full changelog

What's New

LLM-Friendly Documentation (#38)

Added llms.txt following the llms.txt spec — a structured, concise project overview designed for consumption by AI assistants at inference time:

  • Tools, resources, and key environment variables
  • Architecture overview and source layout map
  • Links to all relevant docs

Improved AI Agent Development Guide (#39)

Rewrote CLAUDE.md to be project-specific and actionable:

  • Architecture walkthroughs for each module (server, sandbox, cli_executor, resources, prompts)
  • Testing patterns: mocking strategy, sandbox test split, coverage targets
  • MCP development guidelines: ToolAnnotations, ToolError/SEP-1303, FastMCP patterns
  • Security notes on credential handling and sandbox policy

Codebase Cleanup

  • Removed completed Ralphex progress logs (progress-mcp-spec-updates.txt)
  • Removed completed plan file (docs/plans/mcp-spec-updates.md)

Previous Release Highlights (v1.6.0)

MCP spec 2025-11-25 compliance: input validation errors as isError: true (SEP-1303), server description, server icon, streamable-http transport, graceful stdio disconnect handling.

v1.6.0 Breaking risk
Notable features
  • Streamable HTTP transport
  • Tool execution errors for validation failures
  • Server metadata support
Full changelog

🚀 What's New

Streamable HTTP Transport (#33)

New streamable-http transport option for running the server over HTTP. SSE transport is now deprecated and will emit a warning — migrate to streamable-http or stdio.

AWS_MCP_TRANSPORT=streamable-http aws-mcp-server

Improved Error Handling (#34)

Input validation errors (empty commands, timeouts) are now returned as tool execution errors (isError=True) instead of crashing the JSON-RPC protocol. This enables AI models to self-correct per SEP-1303.

Server Metadata (#35, #36)

  • Server description is now exposed to clients via the MCP instructions field
  • Server icon metadata added for client UIs that support it

Graceful Shutdown on Client Disconnect (#16)

The stdio transport now monitors for client disconnects using select.poll() (with parent PID fallback on macOS) and exits cleanly instead of leaving orphaned containers.

🐛 Bug Fixes

  • Fixed ToolError import mismatchfastmcp.exceptions.ToolError and mcp.server.fastmcp.exceptions.ToolError are two distinct classes; the wrong one was being used, preventing proper error handling by the MCP SDK
  • Fixed CI test hangsmonitor_stdio_disconnect test hung on Linux CI due to unmocked sys.stdin.fileno()

📦 Installation

# pip / uvx
pip install aws-mcp-server==1.6.0

# Docker
docker pull ghcr.io/alexei-led/aws-mcp-server:1.6.0

Full Changelog: https://github.com/alexei-led/aws-mcp-server/compare/v1.5.6...v1.6.0

1.5.6 Bug fix

Minor fixes and improvements.

Full changelog

What's Changed

  • refactor: code review fixes and cleanup by @alexei-led in https://github.com/alexei-led/aws-mcp-server/pull/28
  • fix: add /opt/homebrew to macOS Seatbelt sandbox allowed paths by @alexei-led in https://github.com/alexei-led/aws-mcp-server/pull/29

Full Changelog: https://github.com/alexei-led/aws-mcp-server/compare/1.5.5...1.5.6

1.5.5 Bug fix

Minor fixes and improvements.

Full changelog

What's Changed

  • fix: bind SSE to 0.0.0.0 in Docker for port mapping by @alexei-led in https://github.com/alexei-led/aws-mcp-server/pull/27

Full Changelog: https://github.com/alexei-led/aws-mcp-server/compare/1.5.4...1.5.5

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
182
Forks
31
Languages
Python Makefile Dockerfile

Install & Platforms

Install via
docker binary

Beta — feedback welcome: [email protected]