
Amazon ElastiCache MCP Server: Setup for Claude, Cursor and Other Apps
Lets your AI assistant set up, resize, monitor and delete Amazon ElastiCache caches and clusters.
This AWS Labs server manages ElastiCache itself, not the data inside a cache. It runs on your computer with your AWS credentials and covers serverless caches, replication groups and cache clusters, plus their metrics, logs and costs.
For the keys inside a cache, the README sends you to the Valkey or Memcached servers. Add the --readonly flag if the assistant should only look.
Good for
- Cloud engineers who manage ElastiCache and want to do it by asking
- Ops teams checking cache metrics, logs, events and costs
- Anyone who wants a look-only view of their caches, using the readonly flag
Works in
12 should work
Tap an app to see how to set it up and any known problems.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Client does not support this transport.
Client does not support this transport.
Install elasticache-mcp-server
Claude Code
- 1
Copy this prompt.
Add the elasticache-mcp-server server to Claude Code. Run this command: claude mcp add elasticache -- uvx awslabs.elasticache-mcp-server Then check that it loaded and tell me if I need to sign in or restart.
- 2
Paste it into Claude Code. It shows the change and asks before running it.
Requires uv (Python).
Built from the package data we hold. Not yet tested by us.
Tools
Shows your ElastiCache serverless caches
Returns details about serverless caches in a region.
Try: “Describe my serverless caches in us-west-2.”
Network ·
describe-serverless-cachesShows your replication groups
Returns details about one or more replication groups.
Try: “Describe the replication group orders-cache.”
Network ·
describe-replication-groupsShows your cache clusters
Returns details about one or more cache clusters.
Try: “List my cache clusters and their status.”
Network ·
describe-cache-clustersLists the cache engines and versions
Returns the engines and versions ElastiCache offers.
Try: “Which Valkey versions can I use?”
Network ·
describe-cache-engine-versionsShows default parameters for an engine family
Returns the default settings of a cache engine family.
Try: “What are the default parameters for the valkey8 family?”
Network ·
describe-engine-default-parametersLists recent events for your caches
Returns events for clusters, security groups and parameters.
Try: “Show events for my cache clusters from the last day.”
Network ·
describe-eventsLists available service updates
Returns the updates ElastiCache offers for your resources.
Try: “Are there service updates pending for my caches?”
Network ·
describe-service-updatesReads CloudWatch metrics for ElastiCache
Returns metric statistics for ElastiCache resources over a period you choose.
Try: “Show CPU and cache hit rate for orders-cache over 24 hours.”
Network ·
get-metric-statisticsShows what ElastiCache costs you
Returns Cost Explorer cost and usage data for ElastiCache, by period and granularity.
Try: “How much did ElastiCache cost me last month?”
Network ·
get-cost-and-usageLists CloudWatch log groups
Lists and describes CloudWatch Logs log groups.
Try: “List the log groups for my cache.”
Network ·
describe-log-groupsLists the streams in a log group
Lists and describes the log streams in a log group.
Try: “Show the log streams in the slow-log group.”
Network ·
describe-log-streamsSearches log events
Searches and filters log events across the streams of a log group.
Try: “Search the slow-log group for commands over 100 ms.”
Network ·
filter-log-eventsReads log events from one stream
Returns the log events of one log stream.
Try: “Show the latest entries in this log stream.”
Network ·
get-log-eventsLists your Firehose delivery streams
Lists your Kinesis Data Firehose delivery streams, which can receive cache logs.
Try: “List my Firehose delivery streams.”
Network ·
list-delivery-streamsBuilds an SSH tunnel command for a serverless cache
Generates the SSH command to reach a VPC serverless cache through an EC2 jump host.
Try: “Give me the SSH tunnel command for my serverless cache.”
Network ·
get-ssh-tunnel-command-serverless-cacheBuilds an SSH tunnel command for a replication group
Generates the SSH command to reach a replication group through an EC2 jump host.
Try: “Give me the SSH tunnel command for orders-cache.”
Network ·
get-ssh-tunnel-command-replication-groupBuilds an SSH tunnel command for a cache cluster
Generates the SSH command to reach a cache cluster through an EC2 jump host.
Try: “Give me the SSH tunnel command for my cluster.”
Network ·
get-ssh-tunnel-command-cache-clusterChecks a Redis to ElastiCache migration
Tests a migration from a Redis instance into an ElastiCache replication group before you start it.
Try: “Test migrating my Redis at 10.0.1.5 into orders-cache.”
Network ·
test-migrationCreates a serverless cache
Creates a new serverless cache. A public endpoint option makes a Valkey 9+ cache reachable over the internet with IAM sign-in.
Try: “Create a serverless Valkey cache called sessions.”
Write ·
create-serverless-cacheCreates a replication group
Creates a replication group with the configuration you give.
Try: “Create a replication group with 2 shards.”
Write ·
create-replication-groupCreates a cache cluster
Creates a new cache cluster.
Try: “Create a small Memcached cluster called page-cache.”
Write ·
create-cache-clusterChanges a serverless cache's settings
Modifies the settings of a serverless cache.
Try: “Raise the maximum storage of my serverless cache.”
Write ·
modify-serverless-cacheChanges a replication group's settings
Modifies the settings of an existing replication group.
Try: “Change the node type of orders-cache.”
Write ·
modify-replication-groupChanges the shard layout of a replication group
Changes the number of shards and their configuration.
Try: “Scale orders-cache to 4 shards.”
Write ·
modify-replication-group-shard-configurationChanges a cache cluster's settings
Modifies the settings of an existing cache cluster.
Try: “Change the maintenance window of page-cache.”
Write ·
modify-cache-clusterCreates a CloudWatch log group
Creates a new CloudWatch Logs log group.
Try: “Create a log group for my cache slow log.”
Write ·
create-log-groupApplies service updates to resources
Applies pending service updates to the resources you name.
Try: “Apply the pending service update to orders-cache.”
Write ·
batch-apply-update-actionStops service updates on resources
Stops service updates that are in progress on the resources you name.
Try: “Stop the update on page-cache.”
Write ·
batch-stop-update-actionStarts a Redis to ElastiCache migration
Begins migrating from a Redis instance into an ElastiCache replication group.
Try: “Start migrating my Redis into orders-cache.”
Write ·
start-migrationFinishes a Redis to ElastiCache migration
Completes the migration into the replication group.
Try: “Complete the migration into orders-cache.”
Write ·
complete-migrationSets up an EC2 instance as a jump host for a serverless cache
Configures an existing EC2 instance, including security group access, to reach a VPC serverless cache.
Try: “Use instance i-0abc to reach my serverless cache.”
Write ·
connect-jump-host-serverless-cacheSets up an EC2 instance as a jump host for a replication group
Configures an existing EC2 instance, including security group access, to reach a replication group.
Try: “Use instance i-0abc to reach orders-cache.”
Write ·
connect-jump-host-replication-groupSets up an EC2 instance as a jump host for a cluster
Configures an existing EC2 instance, including security group access, to reach a cache cluster.
Try: “Use instance i-0abc to reach page-cache.”
Write ·
connect-jump-host-cache-clusterLaunches an EC2 jump host for a serverless cache
Creates a new EC2 instance you can tunnel through to reach a VPC serverless cache.
Try: “Create a jump host for my serverless cache.”
Write ·
create-jump-host-serverless-cacheLaunches an EC2 jump host for a replication group
Creates a new EC2 instance you can tunnel through to reach a replication group.
Try: “Create a jump host for orders-cache.”
Write ·
create-jump-host-replication-groupLaunches an EC2 jump host for a cache cluster
Creates a new EC2 instance you can tunnel through to reach a cache cluster.
Try: “Create a jump host for page-cache.”
Write ·
create-jump-host-cache-clusterDeletes a serverless cache
Deletes a serverless cache and its data.
Try: “Delete the serverless cache sessions-test.”
Delete ·
delete-serverless-cacheDeletes a replication group
Deletes a replication group, with an optional final snapshot.
Try: “Delete orders-cache and take a final snapshot.”
Delete ·
delete-replication-groupDeletes a cache cluster
Deletes a cache cluster, with an optional final snapshot.
Try: “Delete page-cache and take a final snapshot.”
Delete ·
delete-cache-cluster
Read from the source code
Permissions
high risk · 3 things to watch
High risk
The assistant can create, change and delete ElastiCache resources, add EC2 jump hosts and edit security groups. Use the --readonly flag, or a read-only IAM policy, unless you want it to make changes.
What it can do
- Read your data
- Create and change things
- Delete things
- Read-only modeHow to turn it on
Watch out for
It can delete caches and replication groups
Three tools delete serverless caches, replication groups and clusters. Use the readonly flag or a read-only IAM policy unless you need changes. github.com
It can create caches and EC2 hosts and open network access
It can create caches and EC2 jump hosts and edit security group rules. Use an IAM policy that limits these actions. github.com
It can create caches with a public endpoint
The README suggests denying elasticache:CreateServerlessCache when the connection type is public, so a cache cannot be exposed to the internet. github.com
Security advisories
No published security advisories as of Nov 1, 2026.
Technical details
| Turning on read-only | Add the --readonly flag to the server arguments. Tools that create, change or delete then return an error. A read-only IAM policy works as well. |
|---|---|
| Talks to | AWS ElastiCache, CloudWatch, Firehose, Cost Explorer and EC2 APIs in your region |
| Sign-in and keys | Uses your AWS credentials from a named AWS profile (AWS_PROFILE) or the standard AWS credential chain, and a region set by AWS_REGION. |
| Scopes |
|
Questions
Can I run it read-only?
Yes. Add the --readonly flag to the server arguments and tools that create, change or delete return an error. You can also give the AWS profile a read-only IAM policy.
Can it delete my caches?
Yes, in the default setup. It has tools that delete serverless caches, replication groups and cache clusters. Use the readonly flag if you only want to look.
Can it read or write the keys in my cache?
No. It manages the ElastiCache service. The README points to the Valkey and Memcached servers for the data inside a cache.
Which AWS permissions does it need?
The ElastiCache actions you want it to use, plus CloudWatch, Logs, Firehose and Cost Explorer reads. The jump-host tools also need EC2 permissions. The README advises read-only permissions if you do not want changes.
What are the jump-host tools for?
VPC caches are not reachable from the internet. These tools set up an EC2 instance, or create one, and give you an SSH tunnel command to connect through it.
How can I stop it creating an internet-facing cache?
Deny elasticache:CreateServerlessCache in IAM when the elasticache:ConnectionType condition key is public, as the README describes.
Information
updated Nov 2, 2026
- Publisher
- Amazon Web Services (official)
- Package
awslabs.elasticache-mcp-server- Registry
- PyPI
- Transport
- stdio
- License
- Apache-2.0
- Last commit
- Oct 30, 2026
- Open issues
- 143
- Listed in
- Docker MCP Catalog
Other AWS MCP servers
Sources
Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.
Show all 3Hide
- ElastiCache MCP Server README · github.com
- ElastiCache server entry point · github.com
- ElastiCache read-only guard source · github.com