Cloud and hosting - official AWS server
AWS Infrastructure as Code MCP server
Open source local MCP server from AWS Labs for CloudFormation template validation and compliance checks, deployment troubleshooting, and CDK and CloudFormation documentation, samples and best practices. It runs locally from awslabs.aws-iac-mcp-server (pypi); the notes below cover how it authenticates.
Last verified 2 sources
Install
Generic
{
"mcpServers": {
"awslabs.aws-iac-mcp-server": {
"command": "uvx",
"args": ["awslabs.aws-iac-mcp-server@latest"],
"env": {
"AWS_PROFILE": "your-named-profile",
"FASTMCP_LOG_LEVEL": "ERROR"
},
"disabled": false,
"autoApprove": []
}
}
}Notes and caveats
- Part of the awslabs/mcp monorepo (about 58 servers).
- AWS says the Agent Toolkit for AWS is the successor to the AWS Labs MCP servers; the repo keeps working and useful projects will move into the toolkit over time.
- Replaces the deprecated Cloud Control API MCP Server.
- Uses local AWS credentials (AWS_PROFILE).
More MCP servers for cloud and hosting
- AWS
Amazon EKS MCP server
Open source local MCP server from AWS Labs that gives agents EKS cluster and Kubernetes resource management, manifest generation and application, and troubleshooting tools.
Transport: stdioAuth: Other - AWSStatus: GA
AWS Knowledge MCP server
AWS-managed remote MCP server that gives agents current AWS documentation, API references, What's New posts, regional availability data, CDK and CloudFormation guidance, and AWS agent skills without authentication.
Transport: Streamable HTTPAuth: No auth - AWS
AWS Labs CloudWatch MCP server
Open source local MCP server from AWS Labs that gives troubleshooting agents access to CloudWatch metrics, alarms and Logs Insights for root cause analysis.
Transport: stdioAuth: Other - AWSStatus: GA
AWS MCP server
AWS-managed remote MCP server, part of the Agent Toolkit for AWS, that lets agents look up AWS documentation and skills without credentials and run authenticated AWS API calls and Python scripts in a sandbox under IAM.
Transport: Streamable HTTPAuth: OAuth - Cloudflare
Cloudflare API MCP server
Cloudflare's recommended remote MCP server covering the whole Cloudflare API (over 2,500 endpoints) through a Code Mode search-and-execute pattern. It also searches the Cloudflare developer docs.
Transport: Streamable HTTPAuth: OAuth or API key - Cloudflare
Cloudflare Container Sandbox MCP server
A remote MCP server that gives an agent an ephemeral sandboxed container on Cloudflare where it can write files and run commands such as Node or Python.
Transport: Streamable HTTPAuth: OAuth
Related reading
- OpenAI's Daybreak Cyber Models Land on Amazon Bedrock: GPT-5.6-Cyber Gets Its First Cloud PathOpenAI Daybreak cyber models are on Amazon Bedrock: GPT-5.6-Cyber and GPT-5.6 Sol for eligible customers, gated by Trusted Access for Cyber enrollment.
- AWS Billing Bug Shows Trillion-Dollar Estimates, Causes Developer PanicAWS billing bug: a unit conversion error in S3 cost estimates sent developers alerts for billions and even trillions of dollars. What caused it and what to do.
- AWS Kiro Developer Guide: The Spec-Driven IDE That Replaced Amazon QAWS Kiro is the spec-driven agentic IDE replacing Amazon Q Developer. How it differs, how pricing compares, and the migration timeline before April 2027.
- Fable 5 on AWS Bedrock: When Your Data Leaves the AWS BoundaryClaude Fable 5 on Amazon Bedrock: how the 30-day retention rule and provider_data_share mode affected the AWS data boundary, updated for the aws_review mode.
- Fable 5 for Government and Regulated Teams: The GovCloud QuestionClaude Fable 5 for GovCloud, FedRAMP, ITAR and CJIS teams: why the Bedrock provider_data_share requirement matters for compliance, and your realistic options.
- Claude Platform on AWS Is Enterprise Agent Plumbing, Not Just ProcurementClaude Platform on AWS moves enterprise agent adoption into identity, billing, commitments and platform controls - where enterprise AI work gets real.
FAQ
What does the AWS Infrastructure as Code MCP server do?
Open source local MCP server from AWS Labs for CloudFormation template validation and compliance checks, deployment troubleshooting, and CDK and CloudFormation documentation, samples and best practices.
How do I add the AWS Infrastructure as Code MCP server to an MCP client?
AWS documents a Generic config; copy it from the Generic section of this page.
Does the AWS Infrastructure as Code MCP server need authentication?
It uses a scheme other than OAuth or an API key, such as the session of the app or instance it runs in; the notes on this page describe it. Transport: stdio. Status: Unlabelled, last checked October 17, 2026.
Sources
Last verified against 2 AWS pages, then re-checked independently.
- raw.githubusercontent.comhttps://raw.githubusercontent.com/awslabs/mcp/main/src/aws-iac-mcp-server/README.md
- raw.githubusercontent.comhttps://raw.githubusercontent.com/awslabs/mcp/main/README.md
Newsletter
New MCP servers, the week they ship
One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.