AWS Serverless MCP Server: Setup for Claude, Cursor and Other Apps

• Creates a new SAM project

  Starts a serverless project with the AWS SAM command line tool, with a template, runtime and folder layout.

  Try: “Create a Python SAM project called my-todo-app.”

  Write · sam_init

• Builds a SAM app

  Compiles the Lambda code and prepares deployment files for a SAM project. It can build inside a container.

  Try: “Build the SAM app in this folder.”

  Runs code · sam_build

• Deploys a SAM app to AWS

  Deploys the app to your AWS account through CloudFormation. It needs the write flag to be switched on.

  Try: “Deploy my-todo-app to us-east-1.”

  Write · sam_deploy

• Fetches CloudWatch logs

  Returns logs for the resources in a SAM app to help debug failures. It is off until you allow sensitive data access.

  Try: “Show the last 30 minutes of logs for the API function.”

  Network · sam_logs

• Runs a Lambda function locally

  Runs a function in a local Docker container that mimics Lambda, so you can test before deploying.

  Try: “Invoke the hello function locally with this event.”

  Runs code · sam_local_invoke

• Helps choose SAM, CDK or CloudFormation

  Explains how to pick an infrastructure-as-code tool for a serverless deployment, with examples.

  Try: “Should I use SAM or CDK for this project?”

  Read · get_iac_guidance

• Says whether Lambda fits your use case

  Returns a guide on when to choose Lambda, with pros, cons and decision criteria for your use case.

  Try: “Is Lambda a good fit for a nightly batch job?”

  Read · get_lambda_guidance

• Gets Lambda event types by source and language

  Returns the event schema for a source such as S3, SQS or API Gateway, with types for your language.

  Try: “Give me the Python event type for an S3 trigger.”

  Read · get_lambda_event_schemas

• Gets example SAM templates

  Returns example SAM templates from the Serverless Land GitHub repo.

  Try: “Show a SAM template for an SQS-triggered Lambda.”

  Network · get_serverless_templates

• Explains how to deploy a Lambda app

  Gives the steps for deploying a Lambda application: templates, build, package and deploy.

  Try: “How do I deploy this Lambda app?”

  Read · deploy_serverless_app_help

• Deploys a web app on Lambda

  Deploys a frontend, backend or full-stack web app on Lambda, API Gateway and CloudFront. It can create public resources and DNS records, and needs the write flag.

  Try: “Deploy my Node.js app as a full-stack site on AWS.”

  Write · deploy_webapp

• Uploads new frontend files

  Uploads built frontend files to S3 and can clear the CloudFront cache. It needs the write flag.

  Try: “Push the new build to my deployed web app.”

  Write · update_webapp_frontend

• Sets up a custom domain

  Creates the Route 53 records and ACM certificate for a custom domain and ties it to the app's CloudFront. It needs the write flag.

  Try: “Point shop.example.com at my deployed app.”

  Write · configure_domain

• Explains web app deployment

  Returns help on using the web app deployment tool for each deployment type.

  Try: “How do I deploy a backend-only web app?”

  Read · webapp_deployment_help

• Reads CloudWatch metrics for a deployed app

  Returns error rates, latency and concurrency for the Lambda and API Gateway parts of a deployed web app.

  Try: “What is the error rate for my-web-app this week?”

  Network · get_metrics

• Lists EventBridge schema registries

  Lists the schema registries in your AWS account.

  Try: “List my EventBridge schema registries.”

  Network · list_registries

• Searches EventBridge schemas

  Searches a registry for event schemas by keyword.

  Try: “Find the autoscaling event schema in aws.events.”

  Network · search_schema

• Gets an EventBridge schema definition

  Returns the full definition of one schema version, so code can be generated against it.

  Try: “Describe that autoscaling schema.”

  Network · describe_schema

• Guides event source mapping setup

  Gives step-by-step help for setting up and troubleshooting event source mappings, and can write IAM policies and SAM templates. The README says it asks you to confirm before any deployment.

  Try: “Set up a Lambda consumer for my Kafka cluster in my VPC.”

  Write · esm_guidance

• Diagnoses Kafka event source problems

  Diagnoses connection, sign-in and performance problems with a Kafka event source mapping and writes fix templates.

  Try: “Why is my Kafka trigger not firing?”

  Write · esm_kafka_troubleshoot

• Tunes event source mappings

  Writes SAM templates that improve how an event source mapping is configured. It asks you to confirm before deploying.

  Try: “Optimize my SQS event source mapping.”

  Write · esm_optimize

• Makes an IAM policy for Kafka triggers

  Fills a fixed AWS-approved IAM policy template for a Lambda function reading from an MSK cluster. It writes no policy of its own and needs the write flag.

  Try: “Create the IAM policy for my Lambda to read the orders MSK cluster.”

  Read · secure_esm_msk_policy

• Makes an IAM policy for SQS triggers

  Fills a fixed AWS-approved IAM policy template for a Lambda function reading from an SQS queue. It needs the write flag.

  Try: “Create the IAM policy for my Lambda to read the jobs queue.”

  Read · secure_esm_sqs_policy

• Makes an IAM policy for Kinesis triggers

  Fills a fixed AWS-approved IAM policy template for a Lambda function reading from a Kinesis stream. It needs the write flag.

  Try: “Create the IAM policy for my Lambda to read the clickstream stream.”

  Read · secure_esm_kinesis_policy

• Makes an IAM policy for DynamoDB Streams triggers

  Fills a fixed AWS-approved IAM policy template for a Lambda function reading from a DynamoDB stream. It needs the write flag.

  Try: “Create the IAM policy for my Lambda to read the orders table stream.”

  Read · secure_esm_dynamodb_policy

Watch out for

• Write mode can deploy and create public resources

  Deploys go through CloudFormation and can create CloudFront distributions and Route 53 records. Switch the write flag on only for a task, and review each deploy. raw.githubusercontent.com

• Default mode still runs local commands and reads your AWS account

  Without the write flag the server cannot deploy, but sam_init writes project files, sam_build and sam_local_invoke run on your machine (local invoke uses Docker), and the schema and metrics tools read from your AWS account. raw.githubusercontent.com

• It uses your AWS credentials

  Anything your profile can do, the deploy tools can attempt. The README advises a dedicated least-privilege role, tagging and CloudTrail. raw.githubusercontent.com

• Logs can contain sensitive data

  The log tool is off by default and returns your Lambda and API Gateway logs when allowed. The server says it scrubs credentials and personal data, but check what you share. raw.githubusercontent.com

Security advisories