Agent Toolkit For AWS
by
Enables AI coding agents to work with AWS services by providing built‑in plugins, skill libraries, and an MCP server that offers full API access, sandboxed script execution, and real‑time documentation search.
Agent Toolkit For AWS Overview
What is Agent Toolkit For AWS about?
The toolkit supplies AI coding agents with the necessary tools, knowledge, and guardrails to interact with AWS services. It bundles plugins, skill packages, and a managed MCP server so agents can select services, write infrastructure as code, deploy resources, and perform operational tasks.
How to use Agent Toolkit For AWS?
- AWS CLI:
aws configure agent-toolkitconfigures the MCP server directly from the terminal. - Claude Code: Install plugins from the Anthropic marketplace, e.g.,
/plugin install aws-core@claude-plugins-official. - Codex: Add the repo to the Codex marketplace with
codex plugin marketplace add aws/agent-toolkit-for-awsand installaws-corevia/plugins. - Cursor: Import the repository as a team marketplace and install desired plugins from the Plugins panel.
- Kiro: Add an MCP server entry in
.kiro/settings/mcp.json(using theuvxcommand) and install skills withnpx skills add aws/agent-toolkit-for-aws/skills. - Other agents: Follow the AWS MCP Server getting‑started guide, then add skills using the same
npx skills add …command.
Key Features
- Plugins covering core AWS operations, AI agent development, data analytics, and DevSecOps workflows.
- Skill library with curated instruction sets and reference material loaded on demand.
- AWS MCP Server providing:
- Full coverage of >300 AWS services via a single endpoint.
- Sandboxed Python script execution for multi‑step tasks.
- Real‑time AWS documentation and API reference search.
- Enterprise controls: CloudWatch metrics, IAM condition keys, CloudTrail audit logging.
- Seamless integration with Claude Code, Codex, Cursor, Kiro, and any custom agent.
- Guardrails that distinguish agent actions from human actions for fine‑grained policy enforcement.
Use Cases
- Automating infrastructure provisioning (CDK, CloudFormation, serverless, containers).
- Building autonomous AI agents that leverage Amazon Bedrock and AgentCore.
- Creating data‑lake, ETL, and analytics pipelines using S3 Tables, Glue, and Athena.
- Conducting DevSecOps activities such as incident investigation, code review, vulnerability scanning, and penetration testing.
- Enabling AI‑assisted developers to query AWS documentation and execute safe scripts without manual CLI work.
FAQ
- How do I install the toolkit? Use the AWS CLI command
aws configure agent-toolkitor install the appropriate plugin for your coding agent (Claude, Codex, Cursor, Kiro). - Do I need AWS credentials? Yes, for any operation that calls AWS APIs or runs scripts; they are not required for documentation search or skill discovery.
- Can I use it with my own agent? Absolutely. Configure the MCP server as described in the "AWS MCP Server getting started guide" and add the skill packages via
npx skills add …. - Where is the documentation? Main user guide: https://docs.aws.amazon.com/agent-toolkit/latest/userguide/.
- What license is the project under? Apache‑2.0.
Agent Toolkit For AWS's README
Agent Toolkit for AWS
Help AI coding agents build, deploy, and manage applications on AWS.
The Agent Toolkit for AWS gives AI coding agents the tools, knowledge, and guardrails they need to work with AWS services. It works with the coding agents developers already use — including Claude Code, Codex, Cursor, and Kiro.
Quick start
AWS CLI
Use the Agent Toolkit directly from your terminal with the AWS CLI:
aws configure agent-toolkit
See the AWS CLI integration guide for setup, configuration, and usage instructions.
Claude Code
The plugins are available on the official Anthropic marketplace (claude-plugins-official) which is added to your Claude Code installation by default.
Use the following commands to install supported plugins from the toolkit:
For aws-core that covers service selection, CDK/CloudFormation, serverless, containers, storage, observability, billing, SDK usage, and deployment:
/plugin install aws-core@claude-plugins-official
Tip: If you get
Plugin not found, update your local marketplace index first:/plugin marketplace update claude-plugins-official
For aws-agents that covers building AI agents on AWS with Amazon Bedrock and AgentCore:
/plugin install aws-agents@claude-plugins-official
For aws-data-analytics that covers data lake, analytics, and ETL workflows with S3 Tables, AWS Glue, and Athena:
/plugin install aws-data-analytics@claude-plugins-official
For aws-agents-for-devsecops used to investigate incidents, review code and execute UAT for release readiness, scan code for vulnerabilities, and run penetration tests with AWS DevOps Agent and AWS Security Agent.
/plugin marketplace add aws/agent-toolkit-for-aws
/plugin install aws-agents-for-devsecops
/reload-plugins
# Or from Claude's official marketplace:
/plugin install aws-agents-for-devsecops@claude-plugins-official
/reload-plugins
# Setup:
/aws-agents-for-devsecops:setup
Codex
In your terminal:
codex plugin marketplace add aws/agent-toolkit-for-aws
Then launch Codex and run /plugins to browse and install the aws-core plugin.
Cursor
Add this repository as a team marketplace from Settings → Plugins → Team Marketplaces → Add Marketplace → Import from Repo, pointing it at aws/agent-toolkit-for-aws. Cursor indexes the plugins listed in .cursor-plugin/marketplace.json on import.
Then open the Plugins panel and install the aws-core plugin (start here), or aws-agents and aws-data-analytics as needed. Each plugin bundles the AWS MCP Server configuration and agent skills.
Kiro
Kiro setup has two independent parts: the AWS MCP Server (for runtime AWS API access and documentation search) and local skills (for task-specific agent guidance). They complement each other but work independently — skills don't require the MCP server, and the MCP server doesn't serve locally-installed skills.
1. Add the AWS MCP Server to your Kiro MCP configuration (.kiro/settings/mcp.json):
{
"mcpServers": {
"aws": {
"command": "uvx",
"args": [
"mcp-proxy-for-aws@1.6.4",
"https://aws-mcp.us-east-1.api.aws/mcp",
"--metadata",
"AWS_REGION=us-west-2"
]
}
}
}
Note: It is recommended to pin to a specific version (e.g.,
@1.6.4) to ensure reproducible behavior and protect against supply chain risks. We recommend regularly checking PyPI for new stable versions and updating accordingly.
The MCP server gives your agent access to AWS APIs, sandboxed script execution, and real-time documentation search.
2. Install skills from this repository:
npx skills add aws/agent-toolkit-for-aws/skills
This installs skill files to ~/.kiro/skills/ (global) or .kiro/skills/ (project-level). Each skill is a directory containing a SKILL.md file and optionally a references/ subdirectory with additional context the agent reads from the local filesystem when needed. Kiro discovers installed skills automatically and activates them on demand when a task matches.
Prerequisites: You need uv installed. An AWS account with credentials configured locally is required for API calls and script execution, but not for documentation search or skill discovery. See the user guide for detailed setup instructions.
Other agents
See the AWS MCP Server getting started guide for instructions on configuring the AWS MCP Server with your agent.
Then install skills from this repository:
npx skills add aws/agent-toolkit-for-aws/skills
Prerequisites: You need uv installed. An AWS account with credentials configured locally is required for API calls and script execution, but not for documentation search or skill discovery. See the user guide for detailed setup instructions.
What's included
Plugins
Plugins bundle the AWS MCP Server configuration and agent skills into a single install for your coding agent.
| Plugin | Description |
|---|---|
| aws-core | Core AWS skills and MCP Server configuration. Covers service selection, CDK/CloudFormation, serverless, containers, storage, observability, billing, SDK usage, and deployment. Start here. |
| aws-agents | Skills for building AI agents on AWS with Amazon Bedrock and AgentCore. |
| aws-data-analytics | Skills for data lake, analytics, and ETL workflows with S3 Tables, AWS Glue, and Athena. |
| aws-agents-for-devsecops | Investigate incidents, review code and execute UAT for release readiness, scan code for vulnerabilities, and run penetration tests with AWS DevOps Agent and AWS Security Agent. |
Plugins are currently available for Claude Code, Codex, and Cursor. For other agents, configure the AWS MCP Server directly and install skills from this repository.
Skills
Agent skills are curated packages of instructions and reference materials that help agents complete specific AWS tasks. Skills are loaded on demand — agents discover and retrieve only what's relevant to the current task.
npx skills add aws/agent-toolkit-for-aws/skills
Browse the skills/ directory to see all available skills.
Rules files
Recommended project-level configuration files that tell agents how to use AWS most effectively — for example, by using the AWS MCP Server, discovering available skills, or searching documentation before acting.
See rules/ for details.
AWS MCP Server
The AWS MCP Server is a managed server that gives agents access to AWS through the Model Context Protocol. It provides:
- Full AWS API coverage — Interact with any of the 300+ AWS services through a single authenticated endpoint.
- Sandboxed script execution — Agents can run Python scripts in an isolated environment for complex multi-step operations.
- Real-time documentation access — Search and retrieve current AWS documentation, API references, and service capabilities without authentication.
- Enterprise controls — Amazon CloudWatch metrics, IAM context keys for agent-specific policies, and AWS CloudTrail audit logging.
For details on operation, available tools, authentication, and supported Regions, see the AWS MCP Server documentation.
Documentation
- User guide — Setup, configuration, and reference documentation.
- AWS MCP Server tools — Reference for all available MCP tools.
How the Agent Toolkit relates to the MCP servers, skills, and plugins in AWS Labs
In 2025, AWS began releasing MCP servers, skills, and plugins as part of AWS Labs. The Agent Toolkit for AWS is the successor to those tools. We recommend using the Agent Toolkit for AWS, because it offers key features including:
- IAM condition keys that distinguish between agent actions and human actions, so you can write policies that apply only to agents. For example, you can write policies that only allow read-only actions through the MCP server, even if the user’s underlying IAM role can take write actions).
- CloudWatch metrics and CloudTrail audit logging for every request, so you can monitor and audit coding agent activity.
- Agent skills that have undergone thorough end-to-end evaluations, so you can be confident that workflows will complete successfully.
AWS Labs MCP servers, skills, and plugins will continue to work and accept contributions, and over time the best of AWS Labs will be transitioned to the Agent Toolkit for AWS to ensure that customers can access the broadest array of tooling and guidance for their agents.
License
This project is licensed under the Apache-2.0 License. See LICENSE for details.
Agent Toolkit For AWS Reviews
Login Required
Please log in to share your review and rating for this MCP.
Similar MCP Servers like Agent Toolkit For AWS
Explore related MCPs that share similar capabilities and solve comparable challenges
Webiny
by webiny
A self‑hosted, serverless CMS platform built on AWS that enables developers to extend content management with TypeScript code and AI‑assisted tooling.
Aws Mcp Servers
Officialby awslabs
Provides specialized servers that expose AWS capabilities through the Model Context Protocol, enabling AI assistants to retrieve up-to-date documentation, execute API calls, and automate infrastructure workflows directly within development environments.
Cloudflare MCP Server
by cloudflare
Provides a collection of Model Context Protocol servers that enable MCP‑compatible clients to interact with Cloudflare services such as Workers, Observability, Radar, and more, allowing natural‑language driven management of configurations, data, and operations.
MCP Server Kubernetes
by Flux159
Connects to a Kubernetes cluster and offers a unified MCP interface for kubectl, Helm, port‑forwarding, diagnostics, and non‑destructive read‑only mode.
Run Model Context Protocol Servers With AWS Lambda
by awslabs
Wrap existing stdio‑based MCP servers to run as AWS Lambda functions, exposing them via HTTPS, API Gateway, Bedrock AgentCore, Lambda function URLs or the Lambda Invoke API.
EdgeOne Pages MCP
by TencentEdgeOne
Deploy HTML, folders, or zip archives to EdgeOne Pages and instantly obtain a public URL for fast edge delivery.
Volcengine MCP Servers
by volcengine
A comprehensive collection of Model Context Protocol (MCP) servers that expose Volcengine cloud resources and third‑party services through natural‑language interfaces, enabling AI‑driven operations across compute, storage, databases, networking, security, and developer utilities.
AWS MCP Server
by rishikavikondala
Provides Model Context Protocol tools for performing AWS S3 and DynamoDB operations, with automatic logging and audit access via the `audit://aws-operations` endpoint.
Mcp Confluent
by confluentinc
Enables AI assistants to manage Confluent Cloud resources such as Kafka topics, connectors, and Flink SQL statements through natural‑language interactions.