aws_ssm_get_parameters_by_path
Retrieve AWS Systems Manager parameters from a specified path hierarchy to access configuration data and secrets stored in Parameter Store.
Instructions
Get all SSM parameters under a path hierarchy.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"path": "<path>"
},
"name": "aws_ssm_get_parameters_by_path"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| profile | No | AWS profile name from ~/.aws/config (e.g., 'default', 'production') | |
| region | No | AWS region override (e.g., 'us-east-1', 'sa-east-1') | |
| sensitive_access_token | No | Out-of-band approval token configured in AWS_MCP_SENSITIVE_ACCESS_TOKEN. Required for operations that can return decrypted or secret values. | |
| sensitive_access_reason | No | Short human reason for retrieving sensitive data. Required for auditability. | |
| sensitive_access_acknowledged | No | Must be true to confirm that the response may contain secret or decrypted data. | |
| path | Yes | Parameter path prefix (e.g., '/app/prod/') | |
| recursive | No | Include nested paths (default: true) | |
| with_decryption | No | Decrypt SecureString values (default: false) | |
| max_results | No | Maximum parameters to return |