MCP.so
Sign In

AWS SSO MCP Server

@aashari

Repository

About AWS SSO MCP Server

Node.js/TypeScript MCP server for AWS Single Sign-On (SSO). Enables AI systems (LLMs) with tools to initiate SSO login (device auth flow), list accounts/roles, and securely execute AWS CLI commands using temporary credentials. Streamlines AI interaction with AWS resources.

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-server-aws-sso": {
      "command": "npx",
      "args": [
        "-y",
        "@aashari/mcp-server-aws-sso",
        "login"
      ]
    }
  }
}

Tools

No tools detected

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is AWS SSO MCP Server?

A server that connects AI assistants (Claude, Cursor) to AWS accounts through AWS IAM Identity Center (SSO). It enables natural‑language management of AWS resources, execution of AWS CLI commands, and remote EC2 instance control via Systems Manager. Designed for DevOps engineers, cloud architects, developers, SRE teams, and IT administrators.

How to use AWS SSO MCP Server?

Install via npx or npm install -g @aashari/mcp-server-aws-sso. Set environment variables AWS_SSO_START_URL and AWS_REGION. Run mcp-aws-sso login to authenticate. Then either use CLI commands (e.g., mcp-aws-sso exec-command) or add the server to an MCP client configuration (e.g., Claude Desktop’s claude_desktop_config.json) using the "aws-sso" key. The server exposes tools such as aws_sso_login, aws_sso_ls_accounts, aws_sso_exec_command, and aws_sso_ec2_exec_command.

Key features of AWS SSO MCP Server?

  • Authenticate via AWS IAM Identity Center
  • List accessible AWS accounts and roles
  • Execute arbitrary AWS CLI commands
  • Run shell commands on EC2 via SSM
  • Supports multi‑account AWS environments
  • Two transport modes: STDIO and HTTP/SSE

Use cases of AWS SSO MCP Server?

  • List all S3 buckets in a production account using natural language
  • Check disk usage or run uptime on an EC2 instance via Systems Manager
  • Switch between AWS accounts and describe VPCs in the staging account
  • Monitor CloudWatch alarms and get status of running EC2 instances
  • Compare running instances between staging and production accounts

FAQ from AWS SSO MCP Server

What prerequisites are needed?

An AWS IAM Identity Center (SSO) setup with a start URL (e.g., https://your-company.awsapps.com/start), a configured identity source, and permission sets assigned to users. The server also requires Node.js (≥18) and the AWS CLI.

How do I authenticate?

Run mcp-aws-sso login (or aws_sso_login tool). This opens your browser for device authorization and caches tokens for subsequent operations. You can also launch without a browser using --no-launch-browser.

What transports are supported?

Two modes: STDIO (default for local MCP clients like Claude Desktop) and HTTP (default for server mode, uses SSE on port 3000). Set the TRANSPORT_MODE environment variable to stdio or http.

Can I run shell commands on an EC2 instance without SSH?

Yes. Use the aws_sso_ec2_exec_command tool (or CLI ec2-exec-command). It uses AWS Systems Manager, so the instance must have the SSM Agent installed and the appropriate IAM role.

How do I troubleshoot authentication failures?

Re‑run mcp-aws-sso login to refresh tokens. Verify that AWS_SSO_START_URL and AWS_REGION are correct. Check that your AWS account assignments are active in the SSO portal.

Frequently asked questions

What prerequisites are needed?

An AWS IAM Identity Center (SSO) setup with a start URL (e.g., `https://your-company.awsapps.com/start`), a configured identity source, and permission sets assigned to users. The server also requires Node.js (≥18) and the AWS CLI.

How do I authenticate?

Run `mcp-aws-sso login` (or `aws_sso_login` tool). This opens your browser for device authorization and caches tokens for subsequent operations. You can also launch without a browser using `--no-launch-browser`.

What transports are supported?

Two modes: STDIO (default for local MCP clients like Claude Desktop) and HTTP (default for server mode, uses SSE on port 3000). Set the `TRANSPORT_MODE` environment variable to `stdio` or `http`.

Can I run shell commands on an EC2 instance without SSH?

Yes. Use the `aws_sso_ec2_exec_command` tool (or CLI `ec2-exec-command`). It uses AWS Systems Manager, so the instance must have the SSM Agent installed and the appropriate IAM role.

How do I troubleshoot authentication failures?

Re‑run `mcp-aws-sso login` to refresh tokens. Verify that `AWS_SSO_START_URL` and `AWS_REGION` are correct. Check that your AWS account assignments are active in the SSO portal.

Comments

Basic information

Category

Developer Tools

Transports

stdio

Author

aashari

More Developer Tools MCP servers

Windframe

Windframe MCP gives your AI the design taste needed to create consistent, production-ready UI that feels intentionally designed. Available at https://windframe.dev/mcp

Termany

thinkany-ai

Agent-Native Terminal

174

OrangePro

Aamir Siddiqui

OrangePro local-first CLI + MCP server for behavior mapping, grounded test generation, and dynamic proof.

12

AptiBuild AI — Career Intelligence

ParklandBuilds

AptiBuild AI — Career Intelligence MCP Server Structured career decision scaffolding for AI agents. Provides personality-conditioned business idea generation, official BLS OEWS wage data, FRED labor market signals, and

discoverGPT

Joe Monastiero

discoverGPT is visualAI's unified MCP gateway for AI commerce, exposing 29 tools across four capabilities on one canonical product catalog: trimodal search (natural-language, precise-color, and image-similarity), AI cata