AWS Cognito MCP Server

What is AWS Cognito MCP Server?

It is a Model Context Protocol (MCP) server that connects to AWS Cognito for authentication and user management, providing tools for user sign-up, sign-in, password management, and profile updates. It is intended for developers who want to integrate AWS Cognito flows into AI assistants like Claude.

How to use AWS Cognito MCP Server?

Clone the repository, install dependencies (npm install), build (npm run build), then configure AWS Cognito credentials via environment variables (AWS_COGNITO_USER_POOL_ID, AWS_COGNITO_USER_POOL_CLIENT_ID). The server can be added to Claude Desktop via claude_desktop_config.json or to Claude Code using the claude mcp add command.

Key features of AWS Cognito MCP Server

• User registration (sign_up)
• Account verification with confirmation code
• Authentication (sign_in) and session refresh
• Password reset and change
• Update user profile attributes
• User deletion and token management

Use cases of AWS Cognito MCP Server

• Allow an AI agent to register new users in a Cognito User Pool
• Let an AI assistant authenticate users and manage sessions
• Enable password recovery workflows through natural language interactions
• Update user profile attributes without manual AWS Console access
• Implement secure sign-out and token refresh via an MCP client

FAQ from AWS Cognito MCP Server

What does this server do?

It provides MCP tools to perform AWS Cognito authentication operations such as sign-up, sign-in, password reset, and user attribute updates directly from an MCP client (e.g., Claude Desktop or Claude Code).

What are the prerequisites?

You need an AWS account with a Cognito User Pool configured, Node.js 18 or higher, and the User Pool ID and App Client ID set as environment variables.

How do I configure the server?

Set the AWS_COGNITO_USER_POOL_ID and AWS_COGNITO_USER_POOL_CLIENT_ID environment variables. For Claude Desktop, add them to the env field in claude_desktop_config.json; for Claude Code, use the claude mcp add command with the appropriate path.

Where does user data live?

All user data is stored and managed in your AWS Cognito User Pool. The server does not store data locally—it only sends requests to AWS Cognito APIs.

What tools are available?

The server exposes 13 tools covering registration, verification, authentication, password management, session refresh, attribute updates, and user deletion. See the README for the full list with parameters.