Cloud · AWS Labs

Set up AWS API

Runs validated AWS CLI commands so an agent can inspect and change your AWS resources.

Publisher: AWS Labs Official
Run locally: uvx awslabs.aws-api-mcp-server@latest
Transports: stdio
Authentication: Your local AWS credentials from the environment or a profile, with AWS_REGION set.
Environment: AWS_REGIONREAD_OPERATIONS_ONLYREQUIRE_MUTATION_CONSENT
What it can touch: Read and write; READ_OPERATIONS_ONLY=true restricts it to reads.
Licence: Apache-2.0
Source: github.com/awslabs/mcp/tree/main/src/aws-api-mcp-server
Status: Active

Install

This server runs on your machine as a child process of the client. You need the runtime its command uses, such as Node.js for npx, uv for uvx or Docker, plus any variables listed under Environment.

Claude Code

shell

claude mcp add --scope project --env AWS_REGION=us-east-1 --env READ_OPERATIONS_ONLY=true --env REQUIRE_MUTATION_CONSENT=true aws-api -- uvx awslabs.aws-api-mcp-server@latest

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "aws-api": {
      "command": "uvx",
      "args": [
        "awslabs.aws-api-mcp-server@latest"
      ],
      "env": {
        "AWS_REGION": "us-east-1",
        "READ_OPERATIONS_ONLY": "true",
        "REQUIRE_MUTATION_CONSENT": "true"
      }
    }
  }
}

Codex

~/.codex/config.toml

[mcp_servers.aws-api]
command = "uvx"
args = ["awslabs.aws-api-mcp-server@latest"]

[mcp_servers.aws-api.env]
AWS_REGION = "us-east-1"
READ_OPERATIONS_ONLY = "true"
REQUIRE_MUTATION_CONSENT = "true"

Config for other clients →

The generated config sets READ_OPERATIONS_ONLY and REQUIRE_MUTATION_CONSENT to true; remove them only if the agent should change resources.

Other servers in cloud

Cloudflare

One endpoint for the whole Cloudflare API; separate servers cover docs, bindings, observability and browser.

Microsoft

Azure

Query and manage Azure resources such as Storage, Cosmos DB, Key Vault and Monitor. Version 2.0 is GA.

Google (Firebase)

Firebase

The Firebase CLI as an MCP server: manage projects, Auth users, Firestore, Remote Config, security rules and more.

Vercel

Search Vercel docs and inspect projects, deployments and build logs. In Beta, and already supports spec 2026-07-28.

Netlify

Create, deploy and configure Netlify sites, environment variables and extensions from an agent.

Heroku (Salesforce)

Heroku

Manage Heroku apps, dynos, add-ons, Postgres and pipelines from an agent, through the Heroku CLI.

Sources

github.com/awslabs/mcp