The AWS MCP Server is now usually out there

I’ve been constructing with AI brokers and MCP instruments for some time now, and one query stored arising: how do you give an agent actual, authenticated entry to AWS with out handing it the keys to the dominion? Right this moment, there’s a solution.

I’m completely satisfied to announce the final availability of the AWS MCP Server, a managed distant Mannequin Context Protocol (MCP) server that offers AI brokers and coding assistants safe, authenticated entry to all AWS providers via a small, mounted set of instruments.

The AWS MCP Server is a part of the Agent Toolkit for AWS, a collection of tooling that features the MCP Server, expertise, and plugins that assist coding brokers construct extra successfully and effectively on AWS.

AI coding brokers are already helpful for a lot of duties, however they run into actual bother when working with AWS at any significant depth. With out entry to present AWS documentation, brokers depend on coaching information that could be months outdated and should not learn about providers like Amazon S3 Vectors, Amazon Aurora DSQL, or Amazon Bedrock AgentCore. When requested to construct infrastructure, they have an inclination to succeed in for the AWS Command Line Interface (AWS CLI) relatively than AWS Cloud Improvement Equipment (AWS CDK) or AWS CloudFormation, and so they produce AWS Identification and Entry Administration (IAM) insurance policies which are far broader than essential. The result’s infrastructure that works in a demo however is just not production-ready.

The AWS MCP Server addresses this via a compact set of instruments that don’t eat your mannequin’s context window. The call_aws instrument executes any of the 15,000+ AWS API operations utilizing your current IAM credentials. Once we will launch new APIs, they are going to be supported inside days. The search_documentation and read_documentation instruments retrieve present AWS documentation and finest practices at question time, so the agent all the time works from up-to-date data.

With normal availability, we’re introducing a number of new capabilities. The AWS MCP Server now helps IAM context keys, so that you now not want a separate IAM permission to make use of the server and may categorical fine-grained entry in a regular IAM coverage. Documentation retrieval now not requires authentication. Now we have additionally lowered the variety of tokens required per interplay, which issues for complicated, multi-step workflows.

Additionally new, the run_script instrument lets the agent write a brief Python script that runs server-side in a sandboxed surroundings. The sandbox inherits your IAM permissions however has no community entry, so that you may give an agent the flexibility to course of information with out giving it entry to your native file system or a shell. When an agent must name a number of APIs and mix the outcomes, making them one by one is gradual and burns context. With run_script, the agent chains API calls, filters responses, and computes ends in a single round-trip, which is each quicker and extra context-efficient.

Probably the most important addition is the transition from Agent SOPs to Expertise. Expertise present curated steering and finest practices for the duties the place brokers mostly make errors. This helps brokers full work quicker, utilizing validated finest practices, with fewer errors and fewer tokens — all of which saves you money and time. Expertise are contributed and maintained by AWS service groups. This retains the instrument record brief and predictable, which reduces hallucination and retains the agent targeted.

For enterprise prospects, the AWS MCP Server gives a transparent separation between human and agent permissions. You should utilize IAM insurance policies or Service Management Insurance policies to specify {that a} given person can carry out mutating operations whereas the MCP server is restricted to read-only actions. Amazon CloudWatch metrics printed underneath the AWS-MCP namespace allow you to observe MCP server calls individually from direct human calls, supplying you with the audit path that compliance groups require. Amazon CloudTrail captures all API calls for an entire document.

Let’s see it in motion

For this demo, I selected to make use of Claude Code, however I can use the AWS MCP Server with any AI agent that helps MCP, which is mainly all instruments out there right this moment: Kiro CLI, Kiro, Cursor, Codex, and extra. I configure Claude Code to make use of the Anthropic Opus 4.6 mannequin.

Opus 4.6 has a information cutoff date in Could 2025. It means it doesn’t know something that occurred after Could final yr. I ask a query about an AWS service that was launched lately: Amazon S3 Vectors, launched in preview in July 2025 and that went GA in December 2025.

The query is “find out how to retailer embedding on S3″. (embedding is a type of vector)

It offers me 5 options, all appropriate, however none utilizing S3 Vectors as I requested. Observe that this reply comes from the Opus 4.6 mannequin, not from Claude Code. Any AI instrument utilizing the identical mannequin will return related solutions as a result of S3 Vectors wasn’t introduced on the time the mannequin was educated.

Let’s now attempt with the AWS MCP Server.

The AWS MCP Server makes use of AWS Identification and Entry Administration (IAM) and IAM SigV4 authentication. To make use of my native AWS credentials configuration over MCP, which solely helps OAuth 2.1, I configure my AI coding agent to name the AWS MCP Server via a proxy. The MCP Proxy for AWS is an open supply proxy that runs on my machine and bridges the world of IAM authentication to OAuth.

I add the MCP configuration with this command:

claude mcp add-json aws-mcp --scope person 
   '{"command":"uvx","args":["mcp-proxy-for-aws@latest","https://aws-mcp.us-east-1.api.aws/mcp","--metadata","AWS_REGION=us-west-2"]}'

Let’s analyze the JSON configuration:

• I exploit the person scope to make the server out there to all my initiatives on my laptop computer.
• uvx mcp-proxy-for-aws is the command to launch the proxy; the remainder of the arguments are parameters handed to the proxy.
• https://aws-mcp.us-east-1.api.aws/mcp is without doubt one of the two regional endpoints for the AWS MCP Server. The proxy will ahead Claude Code’s requests to that endpoint.
• --metadata are handed to the proxy goal. Right here, it tells the AWS MCP Server to make use of the US West (Oregon) Area.

I begin Claude Code and I sort /mcp to confirm the AWS MCP Server is appropriately put in and may use my credentials.

I ask the identical query: “how can I retailer embedding on S3”.

This time, Claude Code is aware of it has a instrument it might use to reply the query. It asks me permission to invoke the aws___search_documentation instrument. After a couple of seconds, I obtain an accurate reply: “AWS now has a devoted service for this: Amazon S3 Vectors …”

Pricing and availability

The AWS MCP Server is offered right this moment within the US East (N. Virginia) and Europe (Frankfurt) AWS Areas and may make API calls to any Area. There isn’t any extra cost for the AWS MCP server itself. You pay just for the AWS assets you create and any relevant information switch prices.

The AWS MCP Server works with Claude Code, Kiro, Cursor, and any MCP-compatible consumer. To get began, see the AWS MCP Server Person Information.

I’ve been ready for one thing like this since I began utilizing MCP instruments in my AI brokers early final yr. The mix of present documentation, authenticated API entry, and sandboxed script execution in a single server modifications what an agent can really do on AWS. I’m curious what you construct with it. Let me know within the feedback.

— seb