What is aws-mcp-connector?

MCP server for the AWS CLI. Read-only by default; single Go binary.

How do I install aws-mcp-connector?

Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.

Is aws-mcp-connector official?

No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.

How is the trust score calculated?

This listing scores 50 (Fair). The formula is published on the methodology page.

aws-mcp-connector MCP Server

Loading the directory

Environment

Name	Required	Notes
AWS_PROFILE	No	Named profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGION	No	Default AWS region if not set elsewhere.
AWS_ACCESS_KEY_ID	No	Static AWS access key. Only needed if not using a profile/SSO/role. Secret.
AWS_SECRET_ACCESS_KEY	No	Static AWS secret key. Only needed if not using a profile/SSO/role. Secret.
AWS_SESSION_TOKEN	No	Temporary session token, if using short-lived credentials. Secret.
AWS_MCP_ALLOW_WRITE	No	Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICES	No	Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATH	No	Optional path to the aws binary. Defaults to "aws" resolved via PATH.
AWS_PROFILE	No	Named profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGION	No	Default AWS region if not set elsewhere.
AWS_ACCESS_KEY_ID	No	Static AWS access key. Only needed if not using a profile/SSO/role. Secret.
AWS_SECRET_ACCESS_KEY	No	Static AWS secret key. Only needed if not using a profile/SSO/role. Secret.
AWS_SESSION_TOKEN	No	Temporary session token, if using short-lived credentials. Secret.
AWS_MCP_ALLOW_WRITE	No	Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICES	No	Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATH	No	Optional path to the aws binary. Defaults to "aws" resolved via PATH.
AWS_PROFILE	No	Named profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGION	No	Default AWS region if not set elsewhere.
AWS_ACCESS_KEY_ID	No	Static AWS access key. Only needed if not using a profile/SSO/role. Secret.
AWS_SECRET_ACCESS_KEY	No	Static AWS secret key. Only needed if not using a profile/SSO/role. Secret.
AWS_SESSION_TOKEN	No	Temporary session token, if using short-lived credentials. Secret.
AWS_MCP_ALLOW_WRITE	No	Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICES	No	Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATH	No	Optional path to the aws binary. Defaults to "aws" resolved via PATH.
AWS_PROFILE	No	Named profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGION	No	Default AWS region if not set elsewhere.
AWS_ACCESS_KEY_ID	No	Static AWS access key. Only needed if not using a profile/SSO/role. Secret.
AWS_SECRET_ACCESS_KEY	No	Static AWS secret key. Only needed if not using a profile/SSO/role. Secret.
AWS_SESSION_TOKEN	No	Temporary session token, if using short-lived credentials. Secret.
AWS_MCP_ALLOW_WRITE	No	Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICES	No	Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATH	No	Optional path to the aws binary. Defaults to "aws" resolved via PATH.
AWS_PROFILE	No	Named profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGION	No	Default AWS region if not set elsewhere.
AWS_ACCESS_KEY_ID	No	Static AWS access key. Only needed if not using a profile/SSO/role. Secret.
AWS_SECRET_ACCESS_KEY	No	Static AWS secret key. Only needed if not using a profile/SSO/role. Secret.
AWS_SESSION_TOKEN	No	Temporary session token, if using short-lived credentials. Secret.
AWS_MCP_ALLOW_WRITE	No	Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICES	No	Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATH	No	Optional path to the aws binary. Defaults to "aws" resolved via PATH.
AWS_PROFILE	No	Named profile from ~/.aws/config to use. Leave unset to use the default profile.
AWS_REGION	No	Default AWS region if not set elsewhere.
AWS_ACCESS_KEY_ID	No	Static AWS access key. Only needed if not using a profile/SSO/role. Secret.
AWS_SECRET_ACCESS_KEY	No	Static AWS secret key. Only needed if not using a profile/SSO/role. Secret.
AWS_SESSION_TOKEN	No	Temporary session token, if using short-lived credentials. Secret.
AWS_MCP_ALLOW_WRITE	No	Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.
AWS_MCP_ALLOWED_SERVICES	No	Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.
AWS_MCP_CLI_PATH	No	Optional path to the aws binary. Defaults to "aws" resolved via PATH.

Name

Required

Notes

AWS_PROFILE

Named profile from ~/.aws/config to use. Leave unset to use the default profile.

AWS_REGION

Default AWS region if not set elsewhere.

AWS_ACCESS_KEY_ID

Static AWS access key. Only needed if not using a profile/SSO/role. Secret.

AWS_SECRET_ACCESS_KEY

Static AWS secret key. Only needed if not using a profile/SSO/role. Secret.

AWS_SESSION_TOKEN

Temporary session token, if using short-lived credentials. Secret.

AWS_MCP_ALLOW_WRITE

Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.

AWS_MCP_ALLOWED_SERVICES

Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.

AWS_MCP_CLI_PATH

Optional path to the aws binary. Defaults to "aws" resolved via PATH.

AWS_PROFILE

Named profile from ~/.aws/config to use. Leave unset to use the default profile.

AWS_REGION

Default AWS region if not set elsewhere.

AWS_ACCESS_KEY_ID

Static AWS access key. Only needed if not using a profile/SSO/role. Secret.

AWS_SECRET_ACCESS_KEY

Static AWS secret key. Only needed if not using a profile/SSO/role. Secret.

AWS_SESSION_TOKEN

Temporary session token, if using short-lived credentials. Secret.

AWS_MCP_ALLOW_WRITE

Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.

AWS_MCP_ALLOWED_SERVICES

Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.

AWS_MCP_CLI_PATH

Optional path to the aws binary. Defaults to "aws" resolved via PATH.

AWS_PROFILE

Named profile from ~/.aws/config to use. Leave unset to use the default profile.

AWS_REGION

Default AWS region if not set elsewhere.

AWS_ACCESS_KEY_ID

Static AWS access key. Only needed if not using a profile/SSO/role. Secret.

AWS_SECRET_ACCESS_KEY

Static AWS secret key. Only needed if not using a profile/SSO/role. Secret.

AWS_SESSION_TOKEN

Temporary session token, if using short-lived credentials. Secret.

AWS_MCP_ALLOW_WRITE

Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.

AWS_MCP_ALLOWED_SERVICES

Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.

AWS_MCP_CLI_PATH

Optional path to the aws binary. Defaults to "aws" resolved via PATH.

AWS_PROFILE

Named profile from ~/.aws/config to use. Leave unset to use the default profile.

AWS_REGION

Default AWS region if not set elsewhere.

AWS_ACCESS_KEY_ID

Static AWS access key. Only needed if not using a profile/SSO/role. Secret.

AWS_SECRET_ACCESS_KEY

Static AWS secret key. Only needed if not using a profile/SSO/role. Secret.

AWS_SESSION_TOKEN

Temporary session token, if using short-lived credentials. Secret.

AWS_MCP_ALLOW_WRITE

Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.

AWS_MCP_ALLOWED_SERVICES

Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.

AWS_MCP_CLI_PATH

Optional path to the aws binary. Defaults to "aws" resolved via PATH.

AWS_PROFILE

Named profile from ~/.aws/config to use. Leave unset to use the default profile.

AWS_REGION

Default AWS region if not set elsewhere.

AWS_ACCESS_KEY_ID

Static AWS access key. Only needed if not using a profile/SSO/role. Secret.

AWS_SECRET_ACCESS_KEY

Static AWS secret key. Only needed if not using a profile/SSO/role. Secret.

AWS_SESSION_TOKEN

Temporary session token, if using short-lived credentials. Secret.

AWS_MCP_ALLOW_WRITE

Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.

AWS_MCP_ALLOWED_SERVICES

Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.

AWS_MCP_CLI_PATH

Optional path to the aws binary. Defaults to "aws" resolved via PATH.

AWS_PROFILE

Named profile from ~/.aws/config to use. Leave unset to use the default profile.

AWS_REGION

Default AWS region if not set elsewhere.

AWS_ACCESS_KEY_ID

Static AWS access key. Only needed if not using a profile/SSO/role. Secret.

AWS_SECRET_ACCESS_KEY

Static AWS secret key. Only needed if not using a profile/SSO/role. Secret.

AWS_SESSION_TOKEN

Temporary session token, if using short-lived credentials. Secret.

AWS_MCP_ALLOW_WRITE

Set to "true" to permit mutating AWS CLI commands. Defaults to read-only.

AWS_MCP_ALLOWED_SERVICES

Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all.

AWS_MCP_CLI_PATH

Optional path to the aws binary. Defaults to "aws" resolved via PATH.

aws-mcp-connector MCP Server

Install

Related servers

TerraVision

kubeview

Environment

Tools

About

FAQ

Reviews

Azure MCP Server

KSail

clawops

mcp-ts-core