--- title: "AWS Serverless MCP Server: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/mcp-servers/awslabs-aws-serverless/ description: "Works with AWS serverless resources in an account you administer. A deploy is a write." --- # AWS Serverless MCP Server: review, setup & limitations · Undominated.ai > Works with AWS serverless resources in an account you administer. A deploy is a write. [← Explore all mcp servers](/mcp-servers/) CLOUD OPERATIONS / Amazon Web Services # AWS Serverless MCP Server Works with AWS serverless resources in an account you administer. A deploy is a write. [See setup guidance ↓](#setup)[Original source ↗](https://github.com/awslabs/mcp/tree/49de7cc11ae064b9224f07ae050c612c3f92dd55/src/aws-serverless-mcp-server) SOURCE REVIEW Reviewed 2026-10-14 Evidence 2 linked sources Publisher Amazon Web Services Licence [Apache-2.0 ↗](https://github.com/awslabs/mcp/blob/49de7cc11ae064b9224f07ae050c612c3f92dd55/LICENSE) Revision 49de7cc11ae0 [Read what was—and wasn’t—checked ↓](#review) “The AWS Serverless Model Context Protocol (MCP) Server is an open-source tool that combines AI assistance with serverless expertise to streamline how developers build serverless applications.” [Amazon Web Services · upstream description ↗](https://github.com/awslabs/mcp/blob/49de7cc11ae064b9224f07ae050c612c3f92dd55/src/aws-serverless-mcp-server/README.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - The README is for SAM and Lambda guidance with deploys and log reads held behind flags. - Event source mapping tools are documented as generating templates and waiting for confirmation before deployment. ### A good fit for - SAM or Lambda design help while the server stays in the default read-only mode - A deploy only after --allow-write, with SAM CLI and Docker already installed for the commands that need them ### Weigh up before choosing - @latest is not a pin. - This review confirmed the README contains uvx and the package name. It did not call the AWS API. - sam_deploy, deploy_webapp, configure_domain, and frontend upload do not run as mutations unless --allow-write is set. - sam_logs is treated as sensitive and is restricted unless --allow-sensitive-data-access is set. - The README does not install SAM CLI or Docker for the operator. Several tools say those must already be present. - A pin does not verify transitive dependencies. Documented uvx examples use a floating package tag, not the reviewed commit. - This review did not execute the resource. - The server was not started and its tools were not called. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - src/aws-serverless-mcp-server/README.md - LICENSE ### Our findings - README contains awslabs.aws-serverless-mcp-server. - README contains a uvx command. - The server combines serverless guidance with SAM lifecycle tools, and it says the default is read-only so changes to AWS resources are prevented. - --allow-write is required before mutating operations such as sam_deploy and deploy_webapp. Logs stay restricted unless --allow-sensitive-data-access is set. - ESM tools generate SAM templates and do not deploy them until the user confirms. SAM build, deploy, and local invoke also assume the SAM CLI, and local invoke assumes Docker, are already installed. ### Not established by this review - No AWS API call was made. - The server was not started and its tools were not called. - A pin does not verify transitive dependencies. - No tools/list or tool call was made. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Connect a server deliberately. [Upstream setup instructions ↗](https://github.com/awslabs/mcp/blob/49de7cc11ae064b9224f07ae050c612c3f92dd55/src/aws-serverless-mcp-server/README.md) DOCUMENTED COMMAND uvx awslabs.aws-serverless-mcp-server@latest Copy command ↗ Copying does not execute this command. It may retrieve a newer version than the reviewed source. - Register the uvx command. - Use credentials for the account you mean. - The one-line command above is the uvx launch in the README temporary-credentials block at this commit, without either switch. It was not run. ### Before you start - uv - AWS credentials for the service - AWS SAM CLI - AWS CLI ### Documented configuration example Use the client and authentication context described in the setup guidance. Configuration formats vary between hosts. { "mcpServers": { "awslabs.aws-serverless-mcp-server": { "command": "uvx", "args": [ "awslabs.aws-serverless-mcp-server@latest", "--allow-write", "--allow-sensitive-data-access" ], "env": { "AWS_PROFILE": "your-aws-profile", "AWS_REGION": "us-east-1" }, "disabled": false, "autoApprove": [] } } } Copy configuration ↗ ### Compatibility Local stdio MCP clients ### Implementation Python ### Transports stdio ### Local process, AWS credentials - Call the AWS APIs the credential allows for this server ### Cost model Apache-2.0 server. AWS usage may be billed. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [Server documentation ↗](https://github.com/awslabs/mcp/blob/49de7cc11ae064b9224f07ae050c612c3f92dd55/src/aws-serverless-mcp-server/README.md) Checked 2026-10-07 https://github.com/awslabs/mcp/blob/49de7cc11ae064b9224f07ae050c612c3f92dd55/src/aws-serverless-mcp-server/README.md Supports: Package name and uvx launch - [Repository licence ↗](https://github.com/awslabs/mcp/blob/49de7cc11ae064b9224f07ae050c612c3f92dd55/LICENSE) Checked 2026-10-07 https://github.com/awslabs/mcp/blob/49de7cc11ae064b9224f07ae050c612c3f92dd55/LICENSE Supports: Redistribution terms KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### AWS Billing and Cost Management MCP Server ↗ Reads realised AWS billing and cost-management data, which is a different number from the advertised unit price.](/mcp-servers/awslabs-aws-billing-cost-management/)[### AWS CloudTrail MCP Server ↗ Queries CloudTrail events for an account you administer.](/mcp-servers/awslabs-cloudtrail/)[### AWS CloudWatch Application Signals MCP Server ↗ Reads CloudWatch Application Signals for an account you administer. It is not the general CloudWatch server.](/mcp-servers/awslabs-cloudwatch-applicationsignals/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Inspect resource evidence](/tools/) - [Choose a host](/agents/) - [Inspect reusable workflows](/skills/) - [Use Undominated data](/api/)