AWS MCP servers: which one to use

Q: How do I make it read-only?

For the AWS MCP Server, run it through AWS's local proxy (mcp-proxy-for-aws) with --read-only, or deny write actions in IAM using the aws:ViaAWSMCPService condition key. For the local AWS API server, set READ_OPERATIONS_ONLY=true. The Serverless and EKS servers stay read-only unless you start them with --allow-write, and the ECS server until you set ALLOW_WRITE.

Q: What is the AWS MCP Server URL, and how do I sign in?

The address is regional, such as https://aws-mcp.us-east-1.api.aws/mcp, in eight AWS Regions. With OAuth, your client opens AWS Sign-in in the browser after you attach the AWSMCPSignInOAuthAccessPolicy policy. With SigV4, AWS's local proxy signs each request with your AWS CLI credentials after aws login; only SigV4 offers the proxy's read-only mode and switching between account profiles.

Start with AWS's managed MCP Server, then add a local service server like Serverless, EKS or Billing only when you need its extra tools.

Servers: 100; active
Official: 34; by AWS
Hosted: 11; nothing to install
Local: 67; runs on your machine
OAuth: 1; sign in, no key

Start with the AWS MCP Server. AWS runs it for you, and it can call any AWS API and search the AWS docs. Add one of AWS's local service servers, such as Serverless, EKS or Billing, only when you need tools it does not have. Every one of them acts with the AWS permissions you give it, so connect it with a role that can only do what you want.

Good for

Developers who want Claude Code, Cursor or Kiro to look at and change their AWS account
Anyone who wants answers from current AWS docs, with no AWS account needed
Teams checking which services cost the most this month and how that compares to last month
Platform engineers troubleshooting EKS clusters, ECS services or serverless apps
Security teams who want every agent call in CloudTrail and IAM rules that apply only to agents

Which AWS MCP server to use

Use the AWS MCP Server for almost everything, and AWS Knowledge if you only need the docs without an AWS account. Add a local service server only for tools the managed server lacks, such as cost reports or serverless debugging.

Server	Runs	Sign-in	Can change things	Read-only option
AWS MCP Server	Hosted	AWS account	Yes	Proxy or IAM
AWS Knowledge	Hosted	No sign-in	No	Always read-only
AWS API (local)	Local	AWS profile	Yes	Env setting
AWS Documentation	Local	No sign-in	No	Always read-only
CloudWatch	Local	AWS profile	–	–
Billing and Cost Management	Local	AWS profile	–	–
Serverless	Local	AWS profile	With a flag	Default

All AWS MCP servers

100 active · 34 official · official first, then by GitHub stars

Show all 100

Questions

Is there an official AWS MCP server?

Yes. AWS runs the AWS MCP Server, a hosted server that became generally available on 6 May 2026 and can call any AWS API, search the AWS docs and run small scripts in a sandbox. AWS also publishes more than 60 open-source local servers in its awslabs/mcp repo.

Which AWS MCP server should I use?

The AWS MCP Server. AWS tells users of its older AWS API and AWS Knowledge servers to switch to it and remove the old entries so their tools do not clash. Add a service server like Serverless, EKS or Billing only when you need its extra tools.

Is the AWS MCP server free?

Yes. AWS charges nothing extra for the AWS MCP Server itself, and you pay only for the AWS resources your agent creates or uses and for data transfer. AWS Knowledge is free too, with rate limits.

How do I make it read-only?

For the AWS MCP Server, run it through AWS's local proxy (mcp-proxy-for-aws) with --read-only, or deny write actions in IAM using the aws:ViaAWSMCPService condition key. For the local AWS API server, set READ_OPERATIONS_ONLY=true. The Serverless and EKS servers stay read-only unless you start them with --allow-write, and the ECS server until you set ALLOW_WRITE.

What is the AWS MCP Server URL, and how do I sign in?

The address is regional, such as https://aws-mcp.us-east-1.api.aws/mcp, in eight AWS Regions. With OAuth, your client opens AWS Sign-in in the browser after you attach the AWSMCPSignInOAuthAccessPolicy policy. With SigV4, AWS's local proxy signs each request with your AWS CLI credentials after aws login; only SigV4 offers the proxy's read-only mode and switching between account profiles.

Which AWS MCP servers are deprecated?

The CDK, CloudFormation, Cloud Control API, Core, Terraform, Cost Explorer, Diagram, Nova Canvas and IAM servers. Use the AWS IaC server in place of CDK, CloudFormation and Cloud Control, and the Billing and Cost Management server in place of Cost Explorer. For Terraform, AWS points to HashiCorp's own Terraform MCP server.

What is the difference between AWS Knowledge and AWS Documentation?

AWS Knowledge is hosted by AWS and needs no sign-in. AWS Documentation is a local server you run on your machine. The AWS MCP Server now searches the docs too, and its doc tools need no credentials.

Which AWS MCP server should I use for costs?

The Billing and Cost Management server, for what you are spending now. It covers Cost Explorer, Budgets, cost anomalies and Savings Plans, and replaces the deprecated Cost Explorer server. For list prices before you build, use the AWS Pricing server.

Can it change or delete things in my AWS account?

Yes. Every AWS server acts with the credentials you give it, so an admin profile lets the agent change or delete resources. Use a least-privilege role, and remember that read-only calls can still return secrets.

Have AWS MCP servers had security problems?

Yes. The local AWS API server had three published advisories, all fixed by version 1.6.0, and the Aurora and RDS Postgres server had a critical read-only bypass fixed in 1.1.7. Run the local servers with @latest so you get fixes.