MCP server

AWS API

Run validated AWS CLI commands from natural language

The AWS Labs AWS API MCP server lets agents execute AWS CLI commands with validation and suggests commands from natural language descriptions. It uses your local AWS credentials/profile, relies on IAM for security, and supports read-only and mutation-consent modes.

Also available as

Connect

  1. 1Add the server to Codex
    codex mcp add aws-api --env AWS_REGION=YOUR_AWS_REGION --env AWS_API_MCP_PROFILE_NAME=YOUR_AWS_API_MCP_PROFILE_NAME --env READ_OPERATIONS_ONLY=YOUR_READ_OPERATIONS_ONLY -- uvx awslabs.aws-api-mcp-server@latest

Configs are generated from the publisher's documented endpoint. Check their docs for plan requirements and scopes. New to this? Read the step-by-step tutorial.

Tools 3

call_awssuggest_aws_commandsget_execution_plan

Things to ask

  • “List my EC2 instances in us-east-1 with their state”
  • “Which S3 buckets have public access enabled?”
  • “How do I create a DynamoDB table with on-demand billing via the CLI?”
  • “Show CloudWatch alarms currently in ALARM state”

Related