AWS MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| AWS_ACCESS_KEY_ID | Yes | AWS Access Key ID | |
| AWS_SESSION_TOKEN | No | AWS Session Token for temporary credentials | |
| AWS_SECRET_ACCESS_KEY | Yes | AWS Secret Access Key |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
| logging | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| list-vpcsB | List all the VPCs in the given region |
| create-vpcB | Create a new VPC in the given region |
| delete-vpcB | Delete a VPC by VPC ID in the given region |
| update-vpc-attributeB | Update a VPC attribute(EnableDnsHostnames, EnableDnsSupport, EnableNetworkAddressUsageMetrics) by VPC ID in the given region |
| update-vpc-endpointB | Update a VPC endpoint(Gateway endpoint, Interface endpoint) by VPC endpoint ID in the given region |
| list-db-instancesB | List all the RDS DB instances in the given region |
| create-db-instanceB | Create a new RDS DB instance in the given region |
| delete-db-instanceB | Delete a given RDS DB instance in the given region |
| update-db-instanceB | Update a given RDS DB instance in the given region |
| list-bucketsB | List all the S3 buckets in the given region |
| create-bucketB | Create a new S3 bucket in the given region |
| delete-bucketA | Delete an S3 bucket in the given region |
| list-subnetsB | List all the subnets in the given region |
| create-subnetB | Create a subnet in the given region |
| update-subnet-attributeB | Update a subnet attributes by subnet ID in the given region |
| delete-subnetB | Delete a subnet by subnet ID in the given region |
| list-internet-gatewaysB | List all internet gateways in the given region |
| create-internet-gatewayB | Create a new internet gateway in the given region |
| delete-internet-gatewayB | Delete an internet gateway by ID in the given region |
| attach-internet-gatewayB | Attach an internet gateway to a VPC |
| detach-internet-gatewayB | Detach an internet gateway from a VPC |
| list-route-tablesA | List route tables in the given region |
| create-route-tableB | Create a route table in the given region |
| associate-route-tableB | Associate a route table with a subnet or internet gateway or virtual private gateway |
| disassociate-route-tableB | Disassociate a route table from a subnet or internet gateway or virtual private gateway |
| replace-route-table-associationA | Replace the route table association for a subnet or internet gateway or virtual private gateway |
| delete-route-tableA | Delete a route table in the given region |
| list-security-groupsB | List all security groups in the given region |
| list-security-group-rulesB | List all security group rules in the given region |
| create-security-groupB | Create a security group in the given region |
| authorize-security-group-ingressB | Authorize a security group ingress in the given region |
| authorize-security-group-egressC | Authorize a security group egress in the given region |
| modify-security-group-rulesB | Modify a security group rule in the given region |
| update-security-group-rule-descriptions-ingressC | Update the description of a security group rule ingress in the given region |
| update-security-group-rule-descriptions-egressB | Update the description of a security group rule egress in the given region |
| revoke-security-group-ingressB | Revoke a security group ingress in the given region |
| revoke-security-group-egressB | Revoke a security group egress in the given region |
| delete-security-groupB | Delete a security group in the given region |
| list-key-pairsB | List key pairs in the given region |
| create-key-pairC | Create a key pair in the given region |
| import-key-pairC | Import a key pair in the given region |
| delete-key-pairB | Delete a key pair in the given region |
| list-ec2-instancesB | List EC2 instances in a given region |
| launch-ec2-instanceB | Launch an EC2 instance in a given region |
| stop-ec2-instanceB | Stop an EC2 instance in a given region |
| start-ec2-instanceB | Start an EC2 instance in a given region |
| reboot-ec2-instanceB | Reboot an EC2 instance in a given region |
| terminate-ec2-instanceB | Terminate an EC2 instance in a given region |
| list-amisC | List AMIs |
| create-amiC | Create an AMI |
| delete-amiC | Delete an AMI |
| list-instance-tagsC | List instance tags |
| create-instance-tagC | Create instance tag |
| delete-instance-tagC | Delete instance tag |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 54 tools
Most tools have distinct purposes targeting specific AWS resources and actions, with clear boundaries (e.g., create-vpc vs. update-vpc-attribute). However, some overlap exists in security group operations (authorize/revoke egress/ingress vs. modify-security-group-rules), which could cause minor confusion for agents.
Tool names follow a highly consistent verb-noun pattern with hyphens throughout (e.g., create-vpc, list-subnets, delete-ami). All 54 tools adhere to this convention, making them predictable and easy to parse.
With 54 tools, the count is excessive for a single server, likely overwhelming for agents. While AWS is a broad domain, this feels heavy and could be better scoped into multiple servers (e.g., separate EC2, VPC, S3 servers) for improved usability.
The tool set provides comprehensive CRUD and lifecycle coverage across AWS services like EC2, VPC, S3, and RDS. It includes creation, listing, updating, and deletion for most resources, with no obvious gaps for core operations, ensuring agents can handle full workflows.