Which integrations are available for this server?

Provides tools for listing Amazon EKS clusters and updating the local Kubernetes kubeconfig to switch context to a selected EKS cluster. Enables updating the local Kubernetes kubeconfig context for AWS EKS clusters, allowing quick context switching for kubectl.

How do I use AWS-Auth?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@AWS-Auth check my current AWS profile" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

de en es ja ko ru zh

AWS-Auth

by N0mansky

Overview Schema Related Servers Score Discussions

Python

Local

⚡ AWS-Auth

Fast, Intelligent AWS SSO Authentication & Model Context Protocol (MCP) Server

Release License: MIT Python Version MCP Ready

Eliminate AWS SSO login fatigue. Zero configuration boilerplate, smart role prioritization, atomic credential caching, and native AI pair-programming integration.

Quick Start • Why aws-auth? • AI / MCP Integration • Features • Documentation

  ┌───────────────────────┐       ┌────────────────────────┐       ┌───────────────────────┐
  │  IAM Identity Center  │ ────> │       aws-auth         │ ────> │  ~/.aws/credentials   │
  │     (AWS SSO OIDC)    │       │  (Smart Role Selector) │       │ (Strict 0600 POSIX)   │
  └───────────────────────┘       └───────────┬────────────┘       └───────────┬───────────┘
                                              │                                │
                                  ┌───────────▼────────────┐       ┌───────────▼───────────┐
                                  │   MCP Server (stdio)   │       │ Terraform / K8s / CLI │
                                  │ (Claude / Cursor / AI) │       │ (Instant Compatibility)│
                                  └────────────────────────┘       └───────────────────────┘

💡 Why `aws-auth` vs Alternatives?

Feature	`aws-auth`	Official `aws sso login`	`granted` / `assume`	`aws-vault`
Zero-Config Account Discovery	✅ Automatic	❌ Requires manual `~/.aws/config`	⚠️ Partial	❌ Manual
Model Context Protocol (MCP)	✅ Native built-in	❌ None	❌ None	❌ None
1-Second MRU / Pinned Logins	✅ Smart Prioritization	❌ None	⚠️ History prompt	❌ None
Real-time Substring & Alias Filter	✅ Instant typing	❌ None	✅ Yes	❌ None
Direct `~/.aws/credentials` Sync	✅ Atomic & `0600`	❌ Token cache only	⚠️ Shell wrapper	⚠️ Keychain wrapper
Legacy & GUI Tool Compatibility	✅ 100% Out of Box	⚠️ Many tools fail	⚠️ Requires wrapper	⚠️ Requires wrapper
WSL2 -> Windows Browser Bridge	✅ Automatic	❌ Fails / manual copy	⚠️ Partial	❌ No
EC2 SSM & EKS Context Switching	✅ Built-in	❌ Separate tools	❌ Separate tools	❌ No

👉 Read the full Feature Comparison Guide.

✨ Key Features

⚡ Zero-Boilerplate Discovery: No need to maintain hundreds of lines in ~/.aws/config. Enter your SSO Start URL once, and all authorized accounts and roles are loaded dynamically.
⭐ Smart Role Prioritization (MRU): Automatically pins your most recently used roles (e.g. QA Admin, Prod Admin) to #1 and #2. Pressing Enter logs you in within 1 second.
🔍 Interactive Substring Search: Type any keyword (prod, qa, admin, gpu, eks) at the selection prompt to instantly filter dozens of accounts.
🤖 Native Model Context Protocol (MCP) Server: Expose AWS profile switching, caller identity, and EC2/EKS exploration to LLM pair programmers (Claude Desktop, Cursor, Antigravity, Gemini).
🔒 Enterprise-Grade Security: Strict POSIX 0600 file permissions, atomic file replacement (os.replace), and 300-second expiration safety margins.
🌐 WSL2 Seamless Browser Bridge: Automatically detects WSL2 and opens authorization URLs directly in your Windows host browser.
☸️ DevOps Acceleration: Instant EC2 SSM shell sessions and 1-click Amazon EKS kubeconfig context switching.

📦 Installation

Option 1: Standalone Binary (Recommended)

Download the latest pre-compiled binary from GitHub Releases:

Windows (PowerShell 1-Liner)

Run in PowerShell to automatically download the binary and configure your PATH:

irm https://raw.githubusercontent.com/N0mansky/aws-auth/main/install.ps1 | iex

Or manual download via PowerShell:

curl.exe -L https://github.com/N0mansky/aws-auth/releases/latest/download/aws-auth-windows-amd64.exe -o aws-auth.exe

Linux (x86_64)

curl -L https://github.com/N0mansky/aws-auth/releases/latest/download/aws-auth-linux-amd64 -o aws-auth
chmod +x aws-auth && sudo mv aws-auth /usr/local/bin/

macOS (Universal)

curl -L https://github.com/N0mansky/aws-auth/releases/latest/download/aws-auth-macos-universal -o aws-auth
chmod +x aws-auth && sudo mv aws-auth /usr/local/bin/

Option 2: Install via pip

pip install git+https://github.com/N0mansky/aws-auth.git

Option 3: Clone & Install from Source

git clone https://github.com/N0mansky/aws-auth.git
cd aws-auth

./install.sh                      # Linux / macOS / WSL2
powershell .\install.ps1          # Windows (PowerShell)
.\install.bat                     # Windows (Command Prompt)

🚀 Quick Start

aws-auth

Available account-role combinations (Showing 1-10 of 18):
+-----+------------------------------+-----------------+------------------------------+-------------+
| #   | Account                      | Account ID      | Role                         | Region      |
+-----+------------------------------+-----------------+------------------------------+-------------+
| 1   | ⭐ Production-App (PROD)        | (111222333444)  | AdministratorAccess     | us-east-1   |
| 2   | ⭐ Staging-Web (QA)          | (555666777888)  | AdministratorAccess     | us-east-1   |
| 3   | Analytics-Data                  | (999888777666)  | AdministratorAccess     | us-east-1   |
...
Select number 1-10 (default: 1) (type keyword to filter): [ENTER]

✅ Profile 'production-app-admin' set as default in ~/.aws/credentials.

2. Configure Portal & Custom Aliases

aws-auth --configure

Customize environment labels and preferred accounts in ~/.aws-auth/config.json:

{
  "sso_start_url": "https://my-company.awsapps.com/start",
  "sso_region": "us-east-1",
  "preferred_accounts": ["Staging-Web", "Production-App"],
  "aliases": {
    "555666777888": "QA",
    "111222333444": "PROD"
  }
}

🤖 AI Agent Integration (Model Context Protocol)

aws-auth runs as a high-performance MCP Server over stdio.

Add to Claude Desktop (`claude_desktop_config.json`) or Cursor:

{
  "mcpServers": {
    "aws-auth": {
      "command": "aws-auth",
      "args": ["--mcp"]
    }
  }
}

What AI Assistants Can Do with `aws-auth`:

Check active AWS Account, Region, and IAM Role ARN (aws_get_caller_identity).
Switch active AWS profile (aws_switch_profile) without human intervention.
Inspect running EC2 instances and Amazon EKS clusters (aws_list_ec2_instances, aws_list_eks_clusters).
Update local Kubernetes context (aws_update_kubeconfig).

👉 Read the full MCP Setup & Tool Reference Guide.

🛠️ CLI Command Reference

# Core Authentication
aws-auth                     # Interactive SSO login & smart role switch
aws-auth --configure         # Interactive SSO portal setup
aws-auth --identity          # Show current STS caller identity
aws-auth --refresh-cache     # Force refresh remote account/role metadata

# Profile Management
aws-auth --list-profiles     # List all stored AWS profiles
aws-auth --switch-profile    # Switch active default profile
aws-auth --set-default NAME  # Set specific profile as default
aws-auth --delete NAME       # Delete profile credentials

# Resource Discovery & DevOps
aws-auth --list-ec2          # List EC2 instances and connect via SSM
aws-auth --list-eks          # List EKS clusters and update kubeconfig

# Scripting & Headless Automation
aws-auth --list-profiles --json
aws-auth --identity --json
eval $(aws-auth --export-env prod-profile)  # Export AWS keys to current shell

# AWS credential_process standard
aws-auth --credential-process my-profile

📚 Documentation

🤝 Contributing

Contributions are welcome! Please check out CONTRIBUTING.md for details on setting up a development environment and running tests.

📄 License

This project is licensed under the MIT License.

This server cannot be installed

license - not tested

quality - not tested

maintenance

How are these scores calculated?

Maintenance

–Maintainers

–Response time

–Release cycle

1Releases (12mo)

Commit activity

Resources

GitHub Repository

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

DataDoe MCP
Hosted Amazon Seller and Vendor MCP server for Claude, ChatGPT, Cursor, Codex, Gemini, Copilot.
microservices.sh
MCP server for AI agents to plan, verify, and deploy Cloudflare-native apps.
agentcentral
Hosted Amazon Seller Central and Amazon Ads MCP server for Claude, ChatGPT, Cursor, and agents.

View all MCP Connectors

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/N0mansky/aws-auth'

If you have feedback or need assistance with the MCP directory API, please join our Discord server