Is Mcp Project Aws safe to install?

SaferSkills independently audited Mcp Project Aws (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md5.0 KB · Markdown

claude-aws-mcp

An MCP server that lets you control AWS resources directly from Claude Desktop or Claude Code using natural language.

Installation

pip install claude-aws-mcp

Setup

Step 1. Create a .env file in your working directory:

AWS_ACCESS_KEY_ID=your_access_key
AWS_SECRET_ACCESS_KEY=your_secret_key
AWS_DEFAULT_REGION=ap-northeast-2

Step 2. Run the MCP server:

aws-mcp

Claude Desktop Integration

Config file location:

OS	Path
Windows	`%APPDATA%\Claude\claude_desktop_config.json`
Mac	`~/Library/Application Support/Claude/claude_desktop_config.json`

Add this to claude_desktop_config.json:

{
  "mcpServers": {
    "aws": {
      "command": "aws-mcp",
      "env": {
        "AWS_ACCESS_KEY_ID": "your_access_key",
        "AWS_SECRET_ACCESS_KEY": "your_secret_key",
        "AWS_DEFAULT_REGION": "ap-northeast-2"
      }
    }
  }
}

Restart Claude Desktop — the AWS tools will appear automatically.

Claude Code Integration

claude mcp add aws aws-mcp

Or add directly to .claude/settings.json:

{
  "mcpServers": {
    "aws": {
      "command": "aws-mcp"
    }
  }
}

Available Tools

Security Groups

Tool	Description
`list_security_groups`	List all security groups with inbound/outbound rules
`get_my_public_ip`	Get the current public IP address
`add_my_ip_to_security_group`	Add current IP to a specified security group
`remove_ip_from_security_group`	Remove a specific CIDR rule (supports port ranges e.g. `0-65535`)
`create_security_group`	Create a new security group

EC2 Instances

Tool	Description
`list_ec2_instances`	List instances with state, IP, and type
`get_instance_details`	Get detailed info for a specific instance
`start_ec2_instance`	Start an instance
`stop_ec2_instance`	Stop an instance
`reboot_ec2_instance`	Reboot an instance
`create_ec2_instance`	Create a new instance
`terminate_ec2_instance`	Permanently delete an instance
`get_instance_console_output`	Get boot log (console output)

Elastic IP

Tool	Description
`list_elastic_ips`	List allocated EIPs with associated instance info
`allocate_elastic_ip`	Allocate a new EIP
`associate_elastic_ip`	Associate an EIP with an instance
`disassociate_elastic_ip`	Disassociate an EIP
`release_elastic_ip`	Release an EIP

Utilities

Tool	Description
`get_ssh_command`	Generate SSH command (auto-detects username from AMI)
`add_instance_tag`	Add or update instance tags
`change_instance_type`	Change instance type (auto stops if running)

S3

Tool	Description
`list_s3_buckets`	List all buckets with region
`list_s3_objects`	List objects in a bucket (supports prefix filter)
`create_s3_bucket`	Create a new bucket
`delete_s3_object`	Delete a file from a bucket
`get_s3_presigned_url`	Generate a temporary download URL

Bedrock AI

Tool	Description
`list_bedrock_models`	List available foundation models (supports provider filter)
`invoke_bedrock_claude`	Invoke Claude model (default: Claude 3.5 Sonnet v2)
`invoke_bedrock_model_raw`	Invoke any Bedrock model with raw JSON
`list_bedrock_knowledge_bases`	List Knowledge Bases
`query_bedrock_knowledge_base`	RAG query against a Knowledge Base

Infrastructure Info

Tool	Description
`list_key_pairs`	List available key pairs
`list_vpcs`	List VPCs and subnets
`list_available_amis`	List latest official AMIs (Amazon Linux / Ubuntu / Windows)

Example Prompts

Once connected to Claude, just type naturally:

Show me all security groups
Add my current IP to sg-0abc1234 on port 22
Remove 0.0.0.0/0 from sg-0abc1234 on port range 0-65535
List all running EC2 instances
Stop instance i-0abc1234
List all S3 buckets
Generate a presigned URL for my-bucket/report.pdf

IAM Permissions Required

Service	Recommended Policy
EC2 / Security Groups	`AmazonEC2FullAccess`
S3	`AmazonS3FullAccess`
Bedrock	`AmazonBedrockFullAccess`

Troubleshooting

`aws-mcp` command not found

pip install --upgrade claude-aws-mcp

AWS authentication errors

Check that your .env values are correct
Confirm the IAM user has the required permissions

Mcp Project Aws— agent skill

Is Mcp Project Aws safe to install?

claude-aws-mcp

Installation

Setup

Claude Desktop Integration

Claude Code Integration

Available Tools

Security Groups

EC2 Instances

Elastic IP

Utilities

S3

Bedrock AI

Infrastructure Info

Example Prompts

IAM Permissions Required

Troubleshooting

Links

Audit the pieces. Scan the whole. Decide.