CLOUD OPERATIONS / Amazon Web Services
AWS Serverless MCP Server
Works with AWS serverless resources in an account you administer. A deploy is a write.
“The AWS Serverless Model Context Protocol (MCP) Server is an open-source tool that combines AI assistance with serverless expertise to streamline how developers build serverless applications.”
01 / THE REASONING
Why this made the selection.
- The README is for SAM and Lambda guidance with deploys and log reads held behind flags.
- Event source mapping tools are documented as generating templates and waiting for confirmation before deployment.
02 / THE REVIEW RECORD
What we actually inspected.
Source review has boundaries.
A clear record is more useful than a “safe” badge.
Material inspected
- src/aws-serverless-mcp-server/README.md
- LICENSE
Our findings
- README contains awslabs.aws-serverless-mcp-server.
- README contains a uvx command.
- The server combines serverless guidance with SAM lifecycle tools, and it says the default is read-only so changes to AWS resources are prevented.
- --allow-write is required before mutating operations such as sam_deploy and deploy_webapp. Logs stay restricted unless --allow-sensitive-data-access is set.
- ESM tools generate SAM templates and do not deploy them until the user confirms. SAM build, deploy, and local invoke also assume the SAM CLI, and local invoke assumes Docker, are already installed.
Not established by this review
- No AWS API call was made.
- The server was not started and its tools were not called.
- A pin does not verify transitive dependencies.
- No tools/list or tool call was made.
The review applies to the material and revision named here. A newer upstream release can change its behavior.
03 / PUT IT TO WORK
Connect a server deliberately.
DOCUMENTED COMMAND
uvx awslabs.aws-serverless-mcp-server@latestCopying does not execute this command. It may retrieve a newer version than the reviewed source.
- Register the uvx command.
- Use credentials for the account you mean.
- The one-line command above is the uvx launch in the README temporary-credentials block at this commit, without either switch. It was not run.
Before you start
- uv
- AWS credentials for the service
- AWS SAM CLI
- AWS CLI
Documented configuration example
Use the client and authentication context described in the setup guidance. Configuration formats vary between hosts.
{
"mcpServers": {
"awslabs.aws-serverless-mcp-server": {
"command": "uvx",
"args": [
"awslabs.aws-serverless-mcp-server@latest",
"--allow-write",
"--allow-sensitive-data-access"
],
"env": {
"AWS_PROFILE": "your-aws-profile",
"AWS_REGION": "us-east-1"
},
"disabled": false,
"autoApprove": []
}
}
}04 / FOLLOW THE EVIDENCE
The source trail.
Our notes are separate from the original resource.
Check upstream before adopting a new version.
- Server documentation ↗Checked
https://github.com/awslabs/mcp/blob/49de7cc11ae064b9224f07ae050c612c3f92dd55/src/aws-serverless-mcp-server/README.md
Supports: Package name and uvx launch
- Repository licence ↗Checked
https://github.com/awslabs/mcp/blob/49de7cc11ae064b9224f07ae050c612c3f92dd55/LICENSE
Supports: Redistribution terms