Skip to main content
Glama
YawLabs

@yawlabs/aws-mcp

Official
by YawLabs

aws_call

Destructive

Run low-level AWS API operations via the AWS CLI by specifying kebab-case service and operation names, with optional JSON params, query, profile, and region overrides. Returns parsed JSON.

Instructions

Run an arbitrary AWS API operation via the aws CLI. Use kebab-case service and operation names as in aws help (service='s3api', operation='list-buckets'). Pass params as a JSON object using the AWS API's PascalCase keys (e.g. {Bucket: 'foo'}); they go through --cli-input-json. Session profile/region (from aws_session_set) are used by default; override per-call when needed. For high-level wrappers like 'aws s3 cp' or 'aws ec2 wait', use your shell — this tool targets the low-level API. Returns parsed JSON output by default, plus the literal command that was run.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
queryNoJMESPath expression to extract a subset of the response (passed as --query). E.g. 'Buckets[].Name', 'Reservations[].Instances[].{Id:InstanceId,State:State.Name}'. Dramatically reduces output size; reach for this whenever you only need a few fields.
paramsNoOperation parameters as a JSON object (AWS API schema, PascalCase keys). E.g. {Bucket: 'foo', Key: 'bar'}.
regionNoOverride session region for this call.
profileNoOverride session profile for this call.
serviceYesAWS service name in kebab-case: 's3api', 'ec2', 'iam', 'lambda', 'dynamodb', 'logs', 'sts', 'cloudformation', etc.
operationYesOperation name in kebab-case: 'list-buckets', 'describe-instances', 'get-caller-identity', 'put-object'.
timeoutMsNoTimeout in milliseconds. Default 60000 (60s). Raise for slow ops; lower to fail fast.
outputFormatNoOutput format. Default 'json' (parsed into structured data when possible).

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv1.3.2

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and openWorldHint=true; the description adds useful details such as execution through --cli-input-json, session-based defaults, return of parsed JSON, and the literal command that was run. It does not warn about reviewing destructive operations, but that burden is partly covered by annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is information-dense with no filler: core action, naming conventions, parameter format, session behavior, exclusions, and output format are all covered. It is longer than some definitions, but the arbitrary AWS API surface justifies nearly every sentence.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For an arbitrary low-level AWS call with no output schema, the description covers naming conventions, parameter serialization, session defaults, output handling, and when to use a different approach. It could mention pagination or error behavior, but these are partially handled by sibling tools and the general AWS CLI contract.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds meaningful conventions: kebab-case service/operation names, PascalCase API parameter keys, JSON object passing via --cli-input-json, and JMESPath query examples. This goes beyond the schema's individual parameter descriptions and helps an agent invoke correctly.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states it runs arbitrary AWS API operations via the aws CLI with kebab-case service and operation names. It distinguishes itself from high-level wrappers by explicitly targeting the low-level API, making it easy for an agent to separate from sibling resource-specific tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly routes high-level wrappers like 'aws s3 cp' or 'aws ec2 wait' to the shell, and frames this tool as the low-level API option. It also clarifies that session profile/region from aws_session_set are used by default and can be overridden per call, giving clear context for when and how to invoke it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.