mwaa-mcp-server

A Model Context Protocol (MCP) server for Amazon Managed Workflows for Apache Airflow (MWAA).

Features

• MWAA Environment Management: List, describe, create, update, and delete MWAA environments

• Airflow DAG Operations: List DAGs, view details, get source code, trigger runs, pause/unpause

• DAG Run Monitoring: List and inspect DAG runs, task instances, and task logs

• Configuration Access: View Airflow connections (with password redaction) and variables

• Error Diagnostics: Retrieve DAG import/parsing errors

• Secure by Design: All Airflow API operations go through AWS invoke_rest_api — no CLI or web tokens are exposed

• Read-only by Default: Write operations require the --allow-write flag

• Airflow 2.x and 3.x: The server detects each environment's Airflow major version and translates API differences (e.g. execution_date vs logical_date) transparently — tools keep one stable interface

Related MCP server: astro-airflow-mcp

Prerequisites

• Python 3.10+

• AWS credentials configured (via environment variables, AWS CLI profile, or IAM role)

• An Amazon MWAA environment (Airflow 2.x or 3.x)

Installation

Using uvx (recommended)

uvx --from git+https://github.com/biswasbiplob/mwaa-mcp-server mwaa-mcp-server

Using pip

pip install git+https://github.com/biswasbiplob/mwaa-mcp-server

Using Docker

docker build -t mwaa-mcp-server .
docker run -it mwaa-mcp-server

Configuration

Environment Variables

CLI Arguments

Usage with Claude Desktop

Add to your Claude Desktop MCP configuration:

{
  "mcpServers": {
    "mwaa-mcp-server": {
      "command": "uvx",
      "args": ["--from", "git+https://github.com/biswasbiplob/mwaa-mcp-server", "mwaa-mcp-server"],
      "env": {
        "AWS_REGION": "us-east-1",
        "AWS_PROFILE": "my-profile",
        "MWAA_ENVIRONMENT": "my-environment",
        "FASTMCP_LOG_LEVEL": "INFO"
      }
    }
  }
}

For write access:

{
  "mcpServers": {
    "mwaa-mcp-server": {
      "command": "uvx",
      "args": ["--from", "git+https://github.com/biswasbiplob/mwaa-mcp-server", "mwaa-mcp-server", "--allow-write"],
      "env": {
        "AWS_REGION": "us-east-1",
        "AWS_PROFILE": "my-profile",
        "MWAA_ENVIRONMENT": "my-environment",
        "FASTMCP_LOG_LEVEL": "INFO"
      }
    }
  }
}

Tool Reference

Environment Management Tools

Airflow Tools

IAM Permissions

Minimum Read-only Policy

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "airflow:GetEnvironment",
        "airflow:ListEnvironments",
        "airflow:InvokeRestApi"
      ],
      "Resource": "*"
    }
  ]
}

Full Access Policy (Read + Write)

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "airflow:GetEnvironment",
        "airflow:ListEnvironments",
        "airflow:CreateEnvironment",
        "airflow:UpdateEnvironment",
        "airflow:DeleteEnvironment",
        "airflow:InvokeRestApi"
      ],
      "Resource": "*"
    }
  ]
}

Security

• No token exposure: Unlike other MWAA tools, this server does not expose create_cli_token or create_web_login_token as tools. All Airflow API operations go through the AWS-native invoke_rest_api.

• Password redaction: Connection passwords and extra fields are automatically redacted in responses.

• Variable redaction: Variable values with sensitive keys (matching patterns like secret, password, token, api_key) are automatically redacted.

• Input validation: Environment names and path parameters are validated to prevent injection.

• Read-only by default: Write operations are disabled unless --allow-write is explicitly passed.

License

Apache-2.0