Aws Sso MCP Server

Node.js/TypeScript MCP server for AWS Single Sign-On (SSO). Enables AI systems (LLMs) with tools to initiate SSO login (device auth flow), list

Local serverstdioTypeScript

What is the Aws Sso MCP Server?

Node.js/TypeScript MCP server for AWS Single Sign-On (SSO). Enables AI systems (LLMs) with tools to initiate SSO login (device auth flow), list accounts/roles, and

What you get

Transform how you manage and access your AWS infrastructure by connecting Claude, Cursor AI, and other AI assistants directly to your AWS accounts through AWS IAM Identity Center (formerly AWS SSO). Get instant access to your cloud resources, execute commands, and manage EC2 instances using natural language.

TOON (Token-Oriented Object Notation) is an output format optimized for Large Language Models: - More compact than JSON (saves tokens when sending data to AI) - Still human-readable - Automatically used when available, falls back to JSON if needed - Learn more: @toon-format/toon

Configuration and credentials

  • Node.js: Version 18.0.0 or higher - AWS CLI: Version 2.x (required only for aws_sso_exec_command) - AWS IAM Identity Center: Configured and accessible - Operating System: macOS, Linux, or Windows

Recorded tools

  • login — Authenticates via AWS SSO (--no-launch-browser). Ex: mcp-aws-sso login.
  • status — Checks authentication status (no options). Ex: mcp-aws-sso status.
  • ls-accounts — Lists accounts/roles (no options). Ex: mcp-aws-sso ls-accounts.
  • exec-command — Runs AWS CLI command (--account-id, --role-name, --command, --region). Ex: mcp-aws-sso exec-command --account-id 123456789012 --role-name ReadOnly --command "aws s3 ls".
  • ec2-exec-command — Runs shell command on EC2 (--instance-id, --account-id, --role-name, --command, --region). Ex: mcp-aws-sso ec2-exec-command --instance-id i-0a69e80761897dcce --account-id 123456789012 --role-name InfraOps --command "upti
  • aws_sso_login — The aws_sso_login tool exposed by this server.
  • aws_sso_status — The aws_sso_status tool exposed by this server.
  • aws_sso_ls_accounts — The aws_sso_ls_accounts tool exposed by this server.
  • aws_sso_exec_command — The aws_sso_exec_command tool exposed by this server.
  • aws_sso_ec2_exec_command — The aws_sso_ec2_exec_command tool exposed by this server.

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
ParameterslaunchBrowser (optional, boolean, default: true)

How to install the Aws Sso MCP Server

{
  "mcpServers": {
    "aws-sso": {
      "command": "npx",
      "args": [
        "-y",
        "@aashari/mcp-server-aws-sso"
      ],
      "env": {
        "AWS_SSO_START_URL": "https://your-company.awsapps.com/start",
        "AWS_REGION": "us-east-1"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

  • Node.js: Version 18.0.0 or higher - AWS CLI: Version 2.x (required only for aws_sso_exec_command) - AWS IAM Identity Center: Configured and accessible - Operating System: macOS, Linux, or Windows
VariableDescriptionRequired
AWS_SSO_START_URLDeclared in the maintainer’s client configuration.Check documentation
AWS_REGIONDeclared in the maintainer’s client configuration.Check documentation

Example prompts to try

  • “Use Aws Sso to Parameters.”
  • “Use Aws Sso to Required.”
  • “Use Aws Sso to Optional.”

Frequently asked questions

Node.js/TypeScript MCP server for AWS Single Sign-On (SSO). Enables AI systems (LLMs) with tools to initiate SSO login (device auth flow), list accounts/roles, and Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.