AWS Data Processing MCP Server: Setup for Claude, Cursor and Other Apps

• Lists and manages Glue Data Catalog databases

  One tool for Glue catalog databases. It can get and list them, and with --allow-write also create, update and delete.

  Try: “List the databases in my Glue Data Catalog.”

  Delete · manage_aws_glue_databases

• Lists and manages Glue Data Catalog tables

  Gets, lists and searches tables, and with --allow-write creates, updates and deletes them.

  Try: “Show the columns of the sales_orders table.”

  Delete · manage_aws_glue_tables

• Lists and manages Glue ETL jobs and runs

  Looks at Glue jobs and their runs, and with --allow-write creates, updates, starts and deletes them.

  Try: “Which Glue jobs failed in the last day?”

  Delete · manage_aws_glue_jobs

• Lists and manages Glue crawlers

  Looks at crawlers that scan data sources into the catalog, and with --allow-write creates, runs and deletes them.

  Try: “List my Glue crawlers and when they last ran.”

  Delete · manage_aws_glue_crawlers

• Lists and manages Glue workflows

  Looks at Glue workflows that chain jobs and crawlers, and with --allow-write changes them.

  Try: “Show the steps in the nightly-etl workflow.”

  Delete · manage_aws_glue_workflows

• Runs and checks Athena queries

  Gets query status and results. Starting or stopping a query needs --allow-write, and without it only read-only SQL is allowed.

  Try: “Show the results of my last Athena query.”

  Write · manage_aws_athena_query_executions

• Manages saved Athena queries

  Lists and gets saved SQL queries, and with --allow-write creates, updates and deletes them.

  Try: “List my saved Athena queries.”

  Delete · manage_aws_athena_named_queries

• Lists Athena databases and tables

  Looks at the databases and tables Athena can query, and with --allow-write changes them.

  Try: “What tables are in the analytics Athena database?”

  Write · manage_aws_athena_databases_and_tables

• Lists and manages EMR clusters

  Describes and lists EMR clusters, and with --allow-write creates, modifies and terminates them.

  Try: “List my running EMR clusters.”

  Delete · manage_aws_emr_clusters

• Manages EMR Serverless applications

  Looks at EMR Serverless applications, and with --allow-write creates, starts, stops and deletes them.

  Try: “What EMR Serverless applications do I have?”

  Delete · manage_aws_emr_serverless_applications

• Manages EMR Serverless job runs

  Looks at job runs, and with --allow-write starts and cancels them.

  Try: “Show the status of my latest EMR Serverless job run.”

  Write · manage_aws_emr_serverless_job_runs

• Lists S3 buckets used for data work

  Lists S3 buckets, which helps find where job code and data live.

  Try: “List my S3 buckets in us-east-1.”

  Read · list_s3_buckets

• Uploads a Python script to S3

  Uploads Python code the assistant writes to an S3 bucket so a Glue or EMR job can use it.

  Try: “Upload this ETL script to my scripts bucket.”

  Write · upload_to_s3

• Creates an IAM role for data services

  Creates an IAM role that Glue, EMR or Athena can use.

  Try: “Create an IAM role for my Glue jobs.”

  Write · create_data_processing_role

• Adds an inline policy to an IAM role

  Attaches a new inline permissions policy to an IAM role.

  Try: “Give the Glue role read access to the raw-data bucket.”

  Write · add_inline_policy

• Shows the policies on an IAM role

  Lists all policies attached to an IAM role.

  Try: “What policies are on the glue-etl-role role?”

  Read · get_policies_for_role

Watch out for

• With --allow-write it can delete data jobs and clusters

  Glue jobs, EMR clusters and Athena queries can be removed or terminated. Turn the flag on only in accounts where that is fine.

• It can create IAM roles and policies

  The role tools can change who can do what in your account. Review any role it creates before using it.

• --allow-sensitive-data-access exposes logs and results

  With it on, the assistant can read job logs and query output that may contain private data. Leave it off by default.

Security advisories