Observability - official AWS server
AWS Labs CloudWatch MCP server
Open source local MCP server from AWS Labs that gives troubleshooting agents access to CloudWatch metrics, alarms and Logs Insights for root cause analysis. It runs locally from awslabs.cloudwatch-mcp-server (pypi); the notes below cover how it authenticates.
Last verified 2 sources
Install
Generic
{
"mcpServers": {
"awslabs.cloudwatch-mcp-server": {
"autoApprove": [],
"disabled": false,
"command": "uvx",
"args": [
"awslabs.cloudwatch-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "[The AWS Profile Name to use for AWS access]",
"FASTMCP_LOG_LEVEL": "ERROR"
},
"transportType": "stdio"
}
}
}Notes and caveats
- Uses local AWS credentials.
- Agent Toolkit for AWS is the stated successor to AWS Labs servers.
More MCP servers for observability
- AWS
Amazon EKS MCP server
Open source local MCP server from AWS Labs that gives agents EKS cluster and Kubernetes resource management, manifest generation and application, and troubleshooting tools.
Transport: stdioAuth: Other - AWS
AWS Infrastructure as Code MCP server
Open source local MCP server from AWS Labs for CloudFormation template validation and compliance checks, deployment troubleshooting, and CDK and CloudFormation documentation, samples and best practices.
Transport: stdioAuth: Other - AWSStatus: GA
AWS Knowledge MCP server
AWS-managed remote MCP server that gives agents current AWS documentation, API references, What's New posts, regional availability data, CDK and CloudFormation guidance, and AWS agent skills without authentication.
Transport: Streamable HTTPAuth: No auth - AWSStatus: GA
AWS MCP server
AWS-managed remote MCP server, part of the Agent Toolkit for AWS, that lets agents look up AWS documentation and skills without credentials and run authenticated AWS API calls and Python scripts in a sandbox under IAM.
Transport: Streamable HTTPAuth: OAuth - ArizeStatus: Preview
Arize AX MCP server
Hosted MCP server that gives agents access to Arize AX projects, traces, spans, datasets, experiments, evaluators, monitors and prompts. It is a thin layer over the Arize REST API v2.
Transport: Streamable HTTPAuth: OAuth or API key - ArizeStatus: GA
Phoenix MCP server
Local npm-distributed MCP server for Arize Phoenix that connects to a Phoenix instance with a base URL and API key. Covers projects, traces, spans, sessions, annotation configs, prompts, datasets and experiments.
Transport: stdioAuth: API key
Related reading
- OpenAI's Daybreak Cyber Models Land on Amazon Bedrock: GPT-5.6-Cyber Gets Its First Cloud PathOpenAI Daybreak cyber models are on Amazon Bedrock: GPT-5.6-Cyber and GPT-5.6 Sol for eligible customers, gated by Trusted Access for Cyber enrollment.
- AWS Billing Bug Shows Trillion-Dollar Estimates, Causes Developer PanicAWS billing bug: a unit conversion error in S3 cost estimates sent developers alerts for billions and even trillions of dollars. What caused it and what to do.
- AWS Kiro Developer Guide: The Spec-Driven IDE That Replaced Amazon QAWS Kiro is the spec-driven agentic IDE replacing Amazon Q Developer. How it differs, how pricing compares, and the migration timeline before April 2027.
- Fable 5 on AWS Bedrock: When Your Data Leaves the AWS BoundaryClaude Fable 5 on Amazon Bedrock: how the 30-day retention rule and provider_data_share mode affected the AWS data boundary, updated for the aws_review mode.
- Fable 5 for Government and Regulated Teams: The GovCloud QuestionClaude Fable 5 for GovCloud, FedRAMP, ITAR and CJIS teams: why the Bedrock provider_data_share requirement matters for compliance, and your realistic options.
- Claude Platform on AWS Is Enterprise Agent Plumbing, Not Just ProcurementClaude Platform on AWS moves enterprise agent adoption into identity, billing, commitments and platform controls - where enterprise AI work gets real.
FAQ
What does the AWS Labs CloudWatch MCP server do?
Open source local MCP server from AWS Labs that gives troubleshooting agents access to CloudWatch metrics, alarms and Logs Insights for root cause analysis.
How do I add the AWS Labs CloudWatch MCP server to an MCP client?
AWS documents a Generic config; copy it from the Generic section of this page.
Does the AWS Labs CloudWatch MCP server need authentication?
It uses a scheme other than OAuth or an API key, such as the session of the app or instance it runs in; the notes on this page describe it. Transport: stdio. Status: Unlabelled, last checked October 17, 2026.
Sources
Last verified against 2 AWS pages, then re-checked independently.
- raw.githubusercontent.comhttps://raw.githubusercontent.com/awslabs/mcp/main/src/cloudwatch-mcp-server/README.md
- raw.githubusercontent.comhttps://raw.githubusercontent.com/awslabs/mcp/main/README.md
Newsletter
New MCP servers, the week they ship
One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.