MCP Server Aws Sso

🚀 Model Context Protocol (MCP) Server for AWS SSO

The Model Context Protocol (MCP) is an open standard that enables AI systems to securely and contextually connect to external tools and data sources.

🚀 Quick Start

Prerequisites

• Node.js (>=18.x): Download
• AWS account with SSO configuration: You need an AWS account with SSO enabled and appropriate permissions.
• AWS CLI v2: Used for local SSO authentication setup.

Step 1: Configure AWS SSO

If you haven't already, set up AWS SSO in your AWS account:

1. Enable AWS IAM Identity Center (successor to SSO).
2. Configure the identity source (AWS SSO Directory, Active Directory, or an external IdP).
3. Set up permission sets and assign users to AWS accounts.
4. Record your AWS SSO start URL—it will be used during configuration.

Step 2: Configure Credentials

Method A: MCP Configuration File (Recommended)

Create or edit ~/.mcp/configs.json:

{
    "aws-sso": {
        "environments": {
            "DEBUG": "true",
            "AWS_REGION": "us-east-1",
            "AWS_SSO_START_URL": "https://your-sso-portal.awsapps.com/start"
        }
    }
}

• AWS_REGION: Your primary AWS region (e.g., us-east-1).
• AWS_SSO_START_URL: Your AWS SSO portal URL.

Note: For backward compatibility, the server also recognizes configurations using the full package name (@aashari/mcp-server-aws-sso) or environment variables (AWS_SSO_START_URL and AWS_REGION).

Step 3: Installation and Usage

Quick Start with npx

# Set the required environment variables (replace with your values)
export AWS_SSO_START_URL=https://your-sso-portal.awsapps.com/start
export AWS_REGION=us-east-1

# Log in to AWS SSO
npx -y @aashari/mcp-server-aws-sso login

# List available accounts and roles
npx -y @aashari/mcp-server-aws-sso ls-accounts

# Execute an AWS CLI command using SSO credentials
npx -y @aashari/mcp-server-aws-sso exec-cmd \
  --account-id 123456789012 \
  --role-name ReadOnly \
  --command "aws s3 ls"

Global Installation

npm install -g @aashari/mcp-server-aws-sso

Then run directly:

mcp-aws-sso login
mcp-aws-sso ls-accounts
mcp-aws-sso exec-cmd --account-id 123456789012 --role-name ReadOnly --command "aws s3 ls"

Command Line Interface (CLI)

The CLI uses hyphenated commands (e.g., login) and options (e.g., --account-id).

Get Help

Use --help to view flags and usage for all available commands:

mcp-aws-sso --help

Or get detailed help for a specific command:

mcp-aws-sso login --help
mcp-aws-sso ls-accounts --help
mcp-aws-sso exec-cmd --help

✨ Features

What is MCP?

The Model Context Protocol (MCP) is an open standard that allows AI systems to securely and contextually connect to external tools and data sources.

This server implements MCP for AWS SSO, bridging your AI assistants (such as Anthropic's Claude, Cursor AI, or other MCP-compatible clients) to AWS services using secure single sign-on (SSO) authentication.

Why Use This Server?

• Seamless AWS SSO Integration: Connect to AWS via secure single sign-on, avoiding the need to manage or expose long-term credentials during AI interactions.
• Secure Credential Management: Use temporary credentials obtained through AWS SSO, following AWS security best practices and automatically rotating credentials.
• Multi-Account Access: Easily discover and use all AWS accounts and roles you have configured via SSO profiles.
• Full AWS CLI Support: Execute any AWS CLI command directly through your AI assistant, with proper authentication and credential management.
• Automated Authentication Process: Handles browser launch and token polling automatically, making the authentication process simple and intuitive.

📄 License

ISC License