AWS IaC MCP Server: Setup for Claude, Cursor and Other Apps

• Checks a CloudFormation template for errors and suggests fixes

  Runs your template through cfn-lint and lists each syntax, schema or property error with a fix suggestion and line number. You can pick regions to check against and skip chosen checks. This runs on your computer and needs no AWS permissions.

  Try: “Validate this CloudFormation template and tell me what is wrong: [paste template]”

  Read · validate_cloudformation_template

• Checks a template against security and compliance rules

  Runs your template through cfn-guard using the rules bundled with the server and returns what fails, with guidance on how to fix it. This runs locally and needs no AWS permissions.

  Try: “Check this template for security and compliance problems: [paste template]”

  Read · check_cloudformation_template_compliance

• Explains why a CloudFormation stack failed to deploy

  Reads a failed stack by name and region, matches the failure against 30+ known cases, and suggests fixes. It can add CloudTrail deep links, which is on by default. This is the one tool that calls AWS with your credentials.

  Try: “Troubleshoot my CloudFormation stack named my-app-stack in us-east-1.”

  Network · troubleshoot_cloudformation_deployment

• Searches CloudFormation docs for resource types and syntax

  Searches the CloudFormation documentation knowledge base and returns relevant guidance and best practices.

  Try: “Search CloudFormation documentation for AWS::Lambda::Function properties.”

  Network · search_cloudformation_documentation

• Reads a full CDK or CloudFormation docs page

  Fetches a documentation page from a search result and converts it to markdown, so the assistant reads the whole page and not just an excerpt.

  Try: “Read the full CDK documentation for aws-s3.Bucket from the page you just found.”

  Network · read_iac_documentation_page

• Searches AWS CDK docs, API reference and best practices

  Searches the CDK API reference, best practices guide, code samples and CDK-NAG rules, and returns relevant excerpts. Specific construct names and boolean terms like "S3 AND encryption" give better results.

  Try: “Search the CDK docs for S3 bucket encryption best practices.”

  Network · search_cdk_documentation

• Finds CDK code samples and community constructs

  Searches CDK samples, examples and constructs. You can filter by programming language, and the default is TypeScript.

  Try: “Find Python CDK examples for API Gateway with a Lambda integration.”

  Network · search_cdk_samples_and_constructs

• Returns AWS CDK best practices

  Returns guidance on CDK application setup, coding, constructs, security and testing. It takes no input.

  Try: “What are the CDK security best practices for S3 buckets?”

  Read · cdk_best_practices

• Shows how to use CloudFormation pre-deployment validation

  Returns instructions and CLI commands for the CloudFormation feature that validates a template while a change set is created, plus remediation guidance. It takes no input.

  Try: “How do I validate my template before deploying it with a change set?”

  Read · get_cloudformation_pre_deploy_validation_instructions

Watch out for

• Stack details go to your AI provider

  The README warns that AWS responses are shared with your AI model provider. Check its data policy before troubleshooting stacks that hold sensitive names or settings. github.com

• AWS access is needed only for troubleshooting

  Template validation and compliance checks run locally. Give the server a role with only the four read permissions listed in the README. github.com

Security advisories