Guides9 min read

Best MCP Servers for AWS Developers in 2026

Level up your AWS workflows with these top MCP servers. From S3 and Lambda to Bedrock and CloudWatch, these Model Context Protocol servers give your AI assistant direct access to your AWS infrastructure.

By MyMCPTools Team·

AWS is the backbone of most modern cloud infrastructure — but wrangling S3 buckets, Lambda functions, EC2 instances, and CloudWatch logs across dozens of services is genuinely painful. Context-switching between the AWS console, CLI, and your AI assistant wastes hours every week.

MCP servers solve this. By giving your AI assistant structured, real-time access to your AWS resources, you can query infrastructure state, debug Lambda errors, inspect S3 contents, and manage deployments — all from within your AI chat without leaving your workflow.

Here are the best MCP servers for AWS developers in 2026.

1. AWS MCP Server — Core Infrastructure Access

The foundational AWS MCP server provides broad access to AWS services through a unified interface. It wraps the AWS SDK and exposes your infrastructure as queryable tools your AI can use directly.

Key capabilities:

  • Query EC2 instances, security groups, and VPC configurations
  • List and inspect CloudFormation stacks and resources
  • Access IAM roles, policies, and permission boundaries
  • Read CloudWatch metrics and alarm states
  • Inspect ECS clusters, services, and task definitions

Best for: Platform engineers and DevOps teams managing multi-service AWS environments. Instead of memorizing CLI flags, ask your AI "which EC2 instances are in the us-east-1 prod VPC and what are their security groups?"

2. AWS S3 MCP Server — Storage Intelligence

S3 is everywhere — static assets, data lakes, backups, ML training sets, deployment artifacts. The AWS S3 MCP server gives your AI assistant full read access to bucket contents, metadata, and configurations.

Key capabilities:

  • List buckets and objects with prefix/filter support
  • Read file contents directly (text files, JSON configs, CSV data)
  • Inspect bucket policies, ACLs, and versioning settings
  • Check storage class distribution and object sizes
  • Analyze bucket access logs

Best for: Data engineers debugging pipeline failures ("what's in the failed-jobs prefix of our ETL bucket?"), devs reviewing deployment artifacts, and anyone who's ever had to click through 15 S3 console pages to find a config file.

3. AWS Lambda MCP Server — Serverless Debugging

Lambda cold starts, timeouts, and cryptic error logs are every serverless developer's nightmare. The AWS Lambda MCP server gives your AI assistant direct access to function configs, invocation logs, and runtime metrics — making debugging dramatically faster.

Key capabilities:

  • List Lambda functions with runtime, memory, and timeout settings
  • Fetch recent CloudWatch log streams for any function
  • Inspect environment variables and layer configurations
  • Check concurrency limits and throttling events
  • View recent invocation error rates and durations

Best for: Serverless developers who spend too much time in CloudWatch Logs. Ask your AI "show me the last 20 error logs for the payment-processor Lambda" and get an instant summary with root cause analysis.

4. AWS Bedrock MCP Server — AI on AWS

If you're building AI applications on AWS, the Bedrock MCP server is essential. It bridges your development AI assistant with your Bedrock models, knowledge bases, and agents — letting you query, test, and manage Bedrock resources conversationally.

Key capabilities:

  • List available foundation models and their capabilities
  • Query Bedrock Knowledge Bases with natural language
  • Inspect Bedrock Agent configurations and action groups
  • Test prompts against different models interactively
  • Monitor model invocation metrics and costs

Best for: Teams building RAG systems, AI agents, or fine-tuned models on AWS Bedrock. Dramatically speeds up the "why is my knowledge base returning the wrong context?" debugging cycle.

5. AWS CLI MCP Server — Full AWS API Surface

The AWS CLI MCP server takes a different approach: instead of wrapping specific services, it exposes the entire AWS CLI as MCP tools. If the AWS CLI can do it, this server can too.

Key capabilities:

  • Access every AWS service and subcommand via natural language
  • Chain multiple CLI commands in a single AI query
  • Handle complex filters and output formatting automatically
  • Works with named profiles and assumed roles
  • Supports all regions and partitions

Best for: Power users who know the AWS CLI well but want to speed up complex multi-step operations. Also excellent for learning — ask your AI to translate your request into the exact CLI command and explain each flag.

6. Datadog MCP Server — AWS Observability

Most serious AWS environments run Datadog for monitoring. The Datadog MCP server connects your AI assistant to your observability stack — metrics, logs, APM traces, and dashboards.

Key capabilities:

  • Query metrics with full PromQL/DQL support
  • Search and filter logs across your AWS services
  • Access APM traces and service dependency maps
  • Read alert states and incident timelines
  • Correlate infrastructure events with application errors

Best for: SREs and platform engineers during incidents. Instead of tab-switching between Datadog dashboards, ask "what changed in our API latency 30 minutes ago and which Lambda functions spiked?" and get a correlated answer.

7. Grafana MCP Server — Custom Dashboards and Loki Logs

If you use Grafana for metrics visualization and Loki for log aggregation, the Grafana MCP server gives your AI assistant access to your dashboards and log streams.

Key capabilities:

  • Query Grafana dashboards and panels programmatically
  • Search Loki logs with LogQL queries
  • Access Prometheus metrics via PromQL
  • Read alert rules and notification channels
  • Inspect data source configurations

Best for: Teams running self-managed Grafana stacks alongside AWS services. Great complement to the AWS MCP server for teams who prefer open-source observability over Datadog.

Building Your AWS MCP Stack

The most impactful combination depends on your role:

  • Backend developers: AWS S3 + AWS Lambda → instant access to your code's environment and logs
  • Platform/DevOps: AWS (core) + Datadog → infrastructure state + observability in one context window
  • Data engineers: AWS S3 + AWS Lambda + Grafana → pipeline debugging across storage, compute, and metrics
  • AI/ML engineers: AWS Bedrock + AWS S3 → model management + training data access

Start with the two servers that touch your most painful daily workflows. Add more once you see how much time the first pair saves.

Related guides:

Recommended Tools

Better Stack

Free Plan

Get alerted when your APIs, browser tests, payment pipelines, or MCP server dependencies go down. Used by 100K+ developers.

Start monitoring free →

1Password

14-day Free Trial

Store and inject API keys, payment credentials, tokens, and file access secrets into your MCP server configs. Trusted by 150K+ developers.

Try 1Password free →

🔧 MCP Servers Mentioned in This Article

☁️

AWS MCP Servers

AWS Labs maintains a monorepo of specialized, open-source MCP servers that bring AWS best practices directly into AI-assisted development workflows, spanning infrastructure, data, AI/ML, cost management, and healthcare/life-sciences domains. Rather than one monolithic server, the project ships dozens of focused servers you install individually depending on the task: the AWS Documentation MCP Server for real-time official docs and API references, dedicated servers for Terraform/CDK/CloudFormation infrastructure-as-code, container and serverless platforms (ECS, EKS, Lambda), SQL/NoSQL databases (DynamoDB, RDS, Aurora), search and analytics (OpenSearch), messaging (SQS/SNS), and cost/billing analysis. Most servers install via uvx with a package name like awslabs.aws-documentation-mcp-server, run locally over stdio, and use standard AWS credential chains (IAM roles, profiles, or access keys) rather than exposing raw account credentials to the model. AWS also now offers a managed, remote "AWS MCP Server" (in preview) that combines full API coverage with pre-built agent SOPs, syntactically validated API calls, and complete CloudTrail audit logging for teams that want centralized governance instead of running servers locally. The Getting Started with Kiro/Cursor/VS Code/Claude Code sections in the repo provide one-click install configs for each server, making it straightforward to wire up only the AWS services a given project actually touches.

Local
☁️

AWS S3

Interact with Amazon S3 buckets and objects. Upload, download, list, and manage files, configure bucket policies, and analyze storage costs. Repository corrected 3 August 2026: this listing pointed at aws/mcp-proxy-for-aws, which is AWS's SigV4 authentication proxy and not an S3 server at all, and carried that repo's star count. The closest real S3 server is aws-samples/sample-mcp-server-s3 (78 stars, MIT-0, Python), which exposes ListBuckets, ListObjectsV2 and GetObject as tools and additionally surfaces PDF documents as MCP resources, capped at 1,000 objects. It is sample code rather than a supported product and is not published to PyPI, so it has to be cloned and run with uv rather than installed with a one-liner; the command below is the documented local path. For production AWS access, AWS's maintained servers live in the awslabs/mcp monorepo.

Local
☁️

AWS Lambda

Invoke and manage AWS Lambda functions. Test functions locally, deploy code, view execution logs, and manage layers and event source mappings.

Local
☁️

AWS EC2

Manage EC2 instances, security groups, AMIs, and VPCs. Start/stop instances, query metadata, analyze costs, and automate infrastructure tasks.

Local
🤖

AWS Bedrock

Retrieval from AWS Knowledge Base using Bedrock Agent Runtime.

Local
☁️

AWS CLI

Execute AWS CLI commands via MCP. Query any AWS service, manage resources across regions, configure profiles, and automate complex multi-service workflows.

Local
📊

Datadog MCP Server

The Datadog MCP Server is Datadog's official, vendor-hosted Model Context Protocol endpoint — not a package. Each Datadog site has its own URL of the form https://mcp.<your-site>/api/unstable/mcp-server/mcp (US1: mcp.datadoghq.com, EU1: mcp.datadoghq.eu), and OAuth 2.0 is the recommended way in; a Personal or Service Access Token as an Authorization bearer header is the documented fallback for CI, with DD_API_KEY plus DD_APPLICATION_KEY headers as a third option. Datadog ships first-party client integrations rather than expecting hand-written config: a Claude Code plugin (/plugin install datadog@claude-plugins-official, then /ddsetup and /ddtoolsets), a Claude connector from the Connectors Directory, plugins for Cursor, VS Code/Copilot, JetBrains and OpenCode, and a ChatGPT app in Preview for US1. Tools are grouped into toolsets selected with a ?toolsets= query parameter, and only `core` — logs, metrics, traces, dashboards, monitors, incidents, hosts, services, events, notebooks — loads by default; two dozen more cover alerting, DBM, DDSQL, RUM, profiling, security, Kubernetes, error tracking, feature flags, cost management and data observability, with apm, cases, code-exec and remote-actions in Preview and excluded from toolsets=all. Access requires the mcp_read or mcp_write role permission in addition to the normal resource permission, which is why a working connection can still return no data. Limits at time of writing are 50 requests per 10 seconds of tool-call burst and 50,000 tool calls per month, and the server is not GovCloud compatible.

Local📘
📊

Grafana MCP Server

The official Grafana MCP server connects Claude and other AI assistants directly to your Grafana instance and its surrounding observability ecosystem, turning natural-language questions into dashboard lookups, incident investigations, and datasource queries. Dashboard tools cover search, retrieval, JSONPath-scoped property extraction, patch-based editing, and per-panel query/datasource introspection, with context-window-aware helpers like get_dashboard_summary so an agent never has to pull a full multi-megabyte dashboard JSON just to answer a simple question. Query tools speak PromQL against Prometheus (including histogram-percentile helpers), LogQL against Loki, and native query languages for InfluxDB, ClickHouse, CloudWatch, Graphite, Athena, Snowflake, Elasticsearch/OpenSearch, and Quickwit datasources — most gated behind opt-in --enabled-tools flags to keep the default tool surface lean. It also wraps Grafana Incident for creating and updating incidents, Sift for automated error-pattern and slow-request investigations, full alerting CRUD (rules, contact points, notification policies) across Grafana-managed and external Alertmanager sources, Grafana OnCall schedule/shift/alert-group management, RBAC-gated admin tools for teams/users/roles, deeplink generation so the LLM never has to guess a dashboard URL, annotations, snapshots, PNG rendering via the Grafana Image Renderer, and provisioning-repo validation for git-sync workflows. Authentication is a Grafana service account token (Editor role, or granular RBAC scopes) passed as GRAFANA_SERVICE_ACCOUNT_TOKEN alongside GRAFANA_URL, and every tool category can be individually disabled to control context-window usage. On install, the recommended route is uvx: `uvx mcp-grafana` pulls the PyPI package mcp-grafana, which is published by Grafana Labs from this same repository — so despite the server being written in Go, the copy-paste command most Claude Desktop and Cursor configs use is a Python-tooling one, not a binary download. The alternatives are `go install github.com/grafana/mcp-grafana/cmd/mcp-grafana@latest` for a real binary, or the grafana/mcp-grafana container — `-t stdio` for local clients, or the default HTTP mode on :8000 (add `-t streamable-http`) with MCP_GRAFANA_SERVER_TOKEN set to authenticate callers when you expose it.

Local

📚 More from the Blog