The AWS Labs AWS API MCP server lets agents execute AWS CLI commands with validation and suggests commands from natural language descriptions. It uses your local AWS credentials/profile, relies on IAM for security, and supports read-only and mutation-consent modes.
Also available as
Connect
- 1Add the server to Codex
codex mcp add aws-api --env AWS_REGION=YOUR_AWS_REGION --env AWS_API_MCP_PROFILE_NAME=YOUR_AWS_API_MCP_PROFILE_NAME --env READ_OPERATIONS_ONLY=YOUR_READ_OPERATIONS_ONLY -- uvx awslabs.aws-api-mcp-server@latest
Configs are generated from the publisher's documented endpoint. Check their docs for plan requirements and scopes. New to this? Read the step-by-step tutorial.
Tools 3
call_awssuggest_aws_commandsget_execution_planThings to ask
- “List my EC2 instances in us-east-1 with their state”
- “Which S3 buckets have public access enabled?”
- “How do I create a DynamoDB table with on-demand billing via the CLI?”
- “Show CloudWatch alarms currently in ALARM state”