AWS SSO MCP Server

Name: AWS SSO MCP Server
Author: aashari

@aashari

About AWS SSO MCP Server

Node.js/TypeScript MCP server for AWS Single Sign-On (SSO). Enables AI systems (LLMs) with tools to initiate SSO login (device auth flow), list accounts/roles, and securely execute AWS CLI commands using temporary credentials. Streamlines AI interaction with AWS resources.

Basic information

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-server-aws-sso": {
      "command": "npx",
      "args": [
        "-y",
        "@aashari/mcp-server-aws-sso",
        "login"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is AWS SSO MCP Server?

A server that connects AI assistants (Claude, Cursor) to AWS accounts through AWS IAM Identity Center (SSO). It enables natural‑language management of AWS resources, execution of AWS CLI commands, and remote EC2 instance control via Systems Manager. Designed for DevOps engineers, cloud architects, developers, SRE teams, and IT administrators.

How to use AWS SSO MCP Server?

Install via npx or npm install -g @aashari/mcp-server-aws-sso. Set environment variables AWS_SSO_START_URL and AWS_REGION. Run mcp-aws-sso login to authenticate. Then either use CLI commands (e.g., mcp-aws-sso exec-command) or add the server to an MCP client configuration (e.g., Claude Desktop’s claude_desktop_config.json) using the "aws-sso" key. The server exposes tools such as aws_sso_login, aws_sso_ls_accounts, aws_sso_exec_command, and aws_sso_ec2_exec_command.

Key features of AWS SSO MCP Server?

Authenticate via AWS IAM Identity Center
List accessible AWS accounts and roles
Execute arbitrary AWS CLI commands
Run shell commands on EC2 via SSM
Supports multi‑account AWS environments
Two transport modes: STDIO and HTTP/SSE

Use cases of AWS SSO MCP Server?

List all S3 buckets in a production account using natural language
Check disk usage or run uptime on an EC2 instance via Systems Manager
Switch between AWS accounts and describe VPCs in the staging account
Monitor CloudWatch alarms and get status of running EC2 instances
Compare running instances between staging and production accounts

FAQ from AWS SSO MCP Server

What prerequisites are needed?

An AWS IAM Identity Center (SSO) setup with a start URL (e.g., https://your-company.awsapps.com/start), a configured identity source, and permission sets assigned to users. The server also requires Node.js (≥18) and the AWS CLI.

How do I authenticate?

Run mcp-aws-sso login (or aws_sso_login tool). This opens your browser for device authorization and caches tokens for subsequent operations. You can also launch without a browser using --no-launch-browser.

What transports are supported?

Two modes: STDIO (default for local MCP clients like Claude Desktop) and HTTP (default for server mode, uses SSE on port 3000). Set the TRANSPORT_MODE environment variable to stdio or http.

Can I run shell commands on an EC2 instance without SSH?

Yes. Use the aws_sso_ec2_exec_command tool (or CLI ec2-exec-command). It uses AWS Systems Manager, so the instance must have the SSM Agent installed and the appropriate IAM role.

How do I troubleshoot authentication failures?

Re‑run mcp-aws-sso login to refresh tokens. Verify that AWS_SSO_START_URL and AWS_REGION are correct. Check that your AWS account assignments are active in the SSO portal.

Comments

More Developer Tools MCP servers

Burp Suite MCP Server Extension

PortSwigger

MCP Server for Burp

961

Golf

golf-mcp

Production-Ready MCP Server Framework • Build, deploy & scale secure AI agent infrastructure • Includes Auth, Observability, Debugger, Telemetry & Runtime • Run real-world MCPs powering AI Agents

834