PlugWiki
elasticache-mcp-server logo

Amazon ElastiCache MCP Server: Setup for Claude, Cursor and Other Apps

Official · by Amazon Web ServicesLocal
GetPyPIawslabs.elasticache-mcp-serverawslabs/mcp/tree/HEAD/src/elasticache-mcp-server

Lets your AI assistant set up, resize, monitor and delete Amazon ElastiCache caches and clusters.

This AWS Labs server manages ElastiCache itself, not the data inside a cache. It runs on your computer with your AWS credentials and covers serverless caches, replication groups and cache clusters, plus their metrics, logs and costs.

For the keys inside a cache, the README sends you to the Valkey or Memcached servers. Add the --readonly flag if the assistant should only look.

Good for

  • Cloud engineers who manage ElastiCache and want to do it by asking
  • Ops teams checking cache metrics, logs, events and costs
  • Anyone who wants a look-only view of their caches, using the readonly flag

Works in

12 should work

Tap an app to see how to set it up and any known problems.

Install elasticache-mcp-server

Claude Code

  1. 1

    Copy this prompt.

    Add the elasticache-mcp-server server to Claude Code. Run this command:
    
    claude mcp add elasticache -- uvx awslabs.elasticache-mcp-server
    
    Then check that it loaded and tell me if I need to sign in or restart.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires uv (Python).

Built from the package data we hold. Not yet tested by us.

Tools

  • Shows your ElastiCache serverless caches

    Returns details about serverless caches in a region.

    Try: “Describe my serverless caches in us-west-2.”

    Network · describe-serverless-caches

  • Shows your replication groups

    Returns details about one or more replication groups.

    Try: “Describe the replication group orders-cache.”

    Network · describe-replication-groups

  • Shows your cache clusters

    Returns details about one or more cache clusters.

    Try: “List my cache clusters and their status.”

    Network · describe-cache-clusters

  • Lists the cache engines and versions

    Returns the engines and versions ElastiCache offers.

    Try: “Which Valkey versions can I use?”

    Network · describe-cache-engine-versions

  • Shows default parameters for an engine family

    Returns the default settings of a cache engine family.

    Try: “What are the default parameters for the valkey8 family?”

    Network · describe-engine-default-parameters

  • Lists recent events for your caches

    Returns events for clusters, security groups and parameters.

    Try: “Show events for my cache clusters from the last day.”

    Network · describe-events

  • Lists available service updates

    Returns the updates ElastiCache offers for your resources.

    Try: “Are there service updates pending for my caches?”

    Network · describe-service-updates

  • Reads CloudWatch metrics for ElastiCache

    Returns metric statistics for ElastiCache resources over a period you choose.

    Try: “Show CPU and cache hit rate for orders-cache over 24 hours.”

    Network · get-metric-statistics

  • Shows what ElastiCache costs you

    Returns Cost Explorer cost and usage data for ElastiCache, by period and granularity.

    Try: “How much did ElastiCache cost me last month?”

    Network · get-cost-and-usage

  • Lists CloudWatch log groups

    Lists and describes CloudWatch Logs log groups.

    Try: “List the log groups for my cache.”

    Network · describe-log-groups

  • Lists the streams in a log group

    Lists and describes the log streams in a log group.

    Try: “Show the log streams in the slow-log group.”

    Network · describe-log-streams

  • Searches log events

    Searches and filters log events across the streams of a log group.

    Try: “Search the slow-log group for commands over 100 ms.”

    Network · filter-log-events

Read from the source code

Permissions

high risk · 3 things to watch

High risk

The assistant can create, change and delete ElastiCache resources, add EC2 jump hosts and edit security groups. Use the --readonly flag, or a read-only IAM policy, unless you want it to make changes.

What it can do

Watch out for

  • It can delete caches and replication groups

    Three tools delete serverless caches, replication groups and clusters. Use the readonly flag or a read-only IAM policy unless you need changes. github.com

  • It can create caches and EC2 hosts and open network access

    It can create caches and EC2 jump hosts and edit security group rules. Use an IAM policy that limits these actions. github.com

  • It can create caches with a public endpoint

    The README suggests denying elasticache:CreateServerlessCache when the connection type is public, so a cache cannot be exposed to the internet. github.com

Security advisories

No published security advisories as of Nov 1, 2026.

Technical details
Turning on read-onlyAdd the --readonly flag to the server arguments. Tools that create, change or delete then return an error. A read-only IAM policy works as well.
Talks toAWS ElastiCache, CloudWatch, Firehose, Cost Explorer and EC2 APIs in your region
Sign-in and keysUses your AWS credentials from a named AWS profile (AWS_PROFILE) or the standard AWS credential chain, and a region set by AWS_REGION.
Scopes
  • ElastiCache actions

  • CloudWatch, CloudWatch Logs, Firehose and Cost Explorer read actions

  • EC2 actions for the jump-host tools

Questions

Can I run it read-only?

Yes. Add the --readonly flag to the server arguments and tools that create, change or delete return an error. You can also give the AWS profile a read-only IAM policy.

Can it delete my caches?

Yes, in the default setup. It has tools that delete serverless caches, replication groups and cache clusters. Use the readonly flag if you only want to look.

Can it read or write the keys in my cache?

No. It manages the ElastiCache service. The README points to the Valkey and Memcached servers for the data inside a cache.

Which AWS permissions does it need?

The ElastiCache actions you want it to use, plus CloudWatch, Logs, Firehose and Cost Explorer reads. The jump-host tools also need EC2 permissions. The README advises read-only permissions if you do not want changes.

What are the jump-host tools for?

VPC caches are not reachable from the internet. These tools set up an EC2 instance, or create one, and give you an SSH tunnel command to connect through it.

How can I stop it creating an internet-facing cache?

Deny elasticache:CreateServerlessCache in IAM when the elasticache:ConnectionType condition key is public, as the README describes.

Information

updated Nov 2, 2026

Publisher
Amazon Web Services (official)
Package
awslabs.elasticache-mcp-server
Registry
PyPI
Transport
stdio
License
Apache-2.0
Last commit
Oct 30, 2026
Open issues
143
Listed in
Docker MCP Catalog

GitHubDockerDocker MCP Catalog

Other AWS MCP servers

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 3
  1. ElastiCache MCP Server README · github.com
  2. ElastiCache server entry point · github.com
  3. ElastiCache read-only guard source · github.com

Facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Updated Nov 2, 2026.