MCP Proxy for AWS: Setup for Claude, Cursor and Other Apps
Connects your assistant to MCP servers on AWS that need an AWS sign-in, using the credentials already on your machine.
Some MCP servers on AWS accept only AWS IAM signed requests, which most assistants cannot send. This proxy from AWS runs on your computer and signs each request with your AWS credentials, so Claude Desktop, Cursor or Kiro can use those servers. It has no tools of its own. You pass it the address of the AWS server you want, and you get that server's tools. Add the read-only flag to hide tools that need write access.
Good for
- Developers who use AWS-hosted MCP servers that need IAM sign-in
- Teams that switch between AWS accounts and want one setup for several profiles
- Python developers who want to connect LangChain, Strands Agents or LlamaIndex agents to those servers
Works in
12 should work
Tap an app to see how to set it up and any known problems.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Client does not support this transport.
Client does not support this transport.
Install mcp-proxy-for-aws
Claude Code
- 1
Copy this prompt.
Add the mcp-proxy-for-aws server to Claude Code. Run this command: claude mcp add proxy-for-aws -e AWS_PROFILE=<AWS_PROFILE> -e AWS_REGION=<AWS_REGION> -- uvx mcp-proxy-for-aws-cli <ENDPOINT_URL> Then check that it loaded and tell me if I need to sign in or restart.
- 2
Paste it into Claude Code. It shows the change and asks before running it.
Requires uv (Python).
Read-only mode: Add --read-only to the arguments, after the endpoint address.
Replace <ENDPOINT_URL> with the address of the AWS MCP server you want to reach. You need uv, Python 3.10+ and AWS credentials set up. The first run can take tens of seconds while uvx downloads packages.
From the project README. Source.
Tools
We don't list mcp-proxy-for-aws's tools here yet. After you connect it, ask your assistant "What can you do with mcp-proxy-for-aws?" to see them.
Permissions
medium risk · 4 things to watch
Medium risk
What it can do
- Read your data
- Create and change things
- Delete things
- Read-only modeHow to turn it on
Watch out for
It acts with your AWS permissions
Every request is signed with your credentials, so the assistant can do whatever the remote server and your IAM role allow. Use a read-only profile and the read-only flag. github.com
Multi-profile mode lets the agent pick an account
With several profiles set, the agent can choose which one to use per call. Only list profiles you are happy for it to use. github.com
Telemetry is on by default
The README documents a flag to switch telemetry off. github.com
Use the CLI package for the proxy
Install the CLI distribution for uvx. The plain package is a library for your own code. github.com
Technical details
| Turning on read-only | Pass --read-only to disable tools that may need write permissions. |
|---|---|
| Talks to | The AWS MCP endpoint you give it. Telemetry data collection, which the --disable-telemetry flag turns off (the README does not say where it goes) |
| Sign-in and keys | Uses your existing AWS credentials: a profile, environment variables or an IAM role. It reads them fresh from disk on every request. |
Questions
Is the MCP Proxy for AWS official?
Yes. It is published by AWS in the aws GitHub organization under the Apache-2.0 license.
What does the proxy do?
It signs each request with your AWS credentials (SigV4) so assistants that only know OAuth can reach IAM-secured MCP servers on AWS. It has no tools of its own and passes through the tools of the server you point it at.
Do I need to pass an endpoint?
Yes. You give it the address of the AWS MCP server you want. The README uses https://aws-mcp.us-east-1.api.aws/mcp in its multi-account example.
Can I run it read-only?
Yes. Add the read-only flag and it disables tools that may need write permissions. Tools that only read are not affected.
Which AWS credentials does it use?
Your AWS CLI profile, environment variables, or an IAM role. It reads them fresh on every request, so refreshing your login takes effect right away.
Which package should I install, mcp-proxy-for-aws or mcp-proxy-for-aws-cli?
Use mcp-proxy-for-aws-cli to run the proxy with uvx. Use mcp-proxy-for-aws if you want the library in your own Python code.
Can I use several AWS accounts?
Yes. List several profiles and the agent can pass a profile name on each call. The first profile is the default.
Information
updated Nov 2, 2026
- Publisher
- Amazon Web Services (official)
- Package
mcp-proxy-for-aws-cli- Registry
- PyPI
- Transport
- stdio
- Auth
- token in env
- Version
- 1.7.0
- License
- Apache-2.0
- Last commit
- Oct 30, 2026
- Open issues
- 10
Other AWS MCP servers
Sources
Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.
Show all 1Hide
- github.com · github.com