Cloud and hosting - official AWS server
Amazon EKS MCP server
Open source local MCP server from AWS Labs that gives agents EKS cluster and Kubernetes resource management, manifest generation and application, and troubleshooting tools. It runs locally from awslabs.eks-mcp-server (pypi); the notes below cover how it authenticates.
Last verified 6 tools2 sources
Install
Generic
{
"mcpServers": {
"awslabs.eks-mcp-server": {
"command": "uvx",
"args": [
"awslabs.eks-mcp-server@latest",
"--allow-write",
"--allow-sensitive-data-access"
],
"env": {
"FASTMCP_LOG_LEVEL": "ERROR"
},
"autoApprove": [],
"disabled": false
}
}
}Tools
manage_eks_stacks- Manage EKS CloudFormation stacks
manage_k8s_resource- Manage a Kubernetes resource
apply_yaml- Apply Kubernetes YAML
list_k8s_resources- List Kubernetes resources
list_api_versions- List Kubernetes API versions
generate_app_manifest- Generate an application manifest
As documented on October 17, 2026. A running server reports its current list through tools/list.
Notes and caveats
- Write and sensitive-data access are opt-in flags (--allow-write, --allow-sensitive-data-access).
- Agent Toolkit for AWS is the stated successor to AWS Labs servers.
- Tool descriptions are short summaries of README headings.
More MCP servers for cloud and hosting
- AWS
AWS Infrastructure as Code MCP server
Open source local MCP server from AWS Labs for CloudFormation template validation and compliance checks, deployment troubleshooting, and CDK and CloudFormation documentation, samples and best practices.
Transport: stdioAuth: Other - AWSStatus: GA
AWS Knowledge MCP server
AWS-managed remote MCP server that gives agents current AWS documentation, API references, What's New posts, regional availability data, CDK and CloudFormation guidance, and AWS agent skills without authentication.
Transport: Streamable HTTPAuth: No auth - AWS
AWS Labs CloudWatch MCP server
Open source local MCP server from AWS Labs that gives troubleshooting agents access to CloudWatch metrics, alarms and Logs Insights for root cause analysis.
Transport: stdioAuth: Other - AWSStatus: GA
AWS MCP server
AWS-managed remote MCP server, part of the Agent Toolkit for AWS, that lets agents look up AWS documentation and skills without credentials and run authenticated AWS API calls and Python scripts in a sandbox under IAM.
Transport: Streamable HTTPAuth: OAuth - Cloudflare
Cloudflare API MCP server
Cloudflare's recommended remote MCP server covering the whole Cloudflare API (over 2,500 endpoints) through a Code Mode search-and-execute pattern. It also searches the Cloudflare developer docs.
Transport: Streamable HTTPAuth: OAuth or API key - Cloudflare
Cloudflare Container Sandbox MCP server
A remote MCP server that gives an agent an ephemeral sandboxed container on Cloudflare where it can write files and run commands such as Node or Python.
Transport: Streamable HTTPAuth: OAuth
Related reading
- OpenAI's Daybreak Cyber Models Land on Amazon Bedrock: GPT-5.6-Cyber Gets Its First Cloud PathOpenAI Daybreak cyber models are on Amazon Bedrock: GPT-5.6-Cyber and GPT-5.6 Sol for eligible customers, gated by Trusted Access for Cyber enrollment.
- AWS Billing Bug Shows Trillion-Dollar Estimates, Causes Developer PanicAWS billing bug: a unit conversion error in S3 cost estimates sent developers alerts for billions and even trillions of dollars. What caused it and what to do.
- AWS Kiro Developer Guide: The Spec-Driven IDE That Replaced Amazon QAWS Kiro is the spec-driven agentic IDE replacing Amazon Q Developer. How it differs, how pricing compares, and the migration timeline before April 2027.
- Fable 5 on AWS Bedrock: When Your Data Leaves the AWS BoundaryClaude Fable 5 on Amazon Bedrock: how the 30-day retention rule and provider_data_share mode affected the AWS data boundary, updated for the aws_review mode.
- Fable 5 for Government and Regulated Teams: The GovCloud QuestionClaude Fable 5 for GovCloud, FedRAMP, ITAR and CJIS teams: why the Bedrock provider_data_share requirement matters for compliance, and your realistic options.
- Claude Platform on AWS Is Enterprise Agent Plumbing, Not Just ProcurementClaude Platform on AWS moves enterprise agent adoption into identity, billing, commitments and platform controls - where enterprise AI work gets real.
FAQ
What does the Amazon EKS MCP server do?
Open source local MCP server from AWS Labs that gives agents EKS cluster and Kubernetes resource management, manifest generation and application, and troubleshooting tools. The vendor documents 6 tools, including manage_eks_stacks, manage_k8s_resource, apply_yaml and list_k8s_resources.
How do I add the Amazon EKS MCP server to an MCP client?
AWS documents a Generic config; copy it from the Generic section of this page.
Does the Amazon EKS MCP server need authentication?
It uses a scheme other than OAuth or an API key, such as the session of the app or instance it runs in; the notes on this page describe it. Transport: stdio. Status: Unlabelled, last checked October 17, 2026.
Sources
Last verified against 2 AWS pages, then re-checked independently.
- raw.githubusercontent.comhttps://raw.githubusercontent.com/awslabs/mcp/main/src/eks-mcp-server/README.md
- raw.githubusercontent.comhttps://raw.githubusercontent.com/awslabs/mcp/main/README.md
Newsletter
New MCP servers, the week they ship
One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.