Mcp Server Aws Cognito

What is Mcp Server Aws Cognito about?

Mcp Server Aws Cognito connects a Model Context Protocol (MCP) server to Amazon Cognito, enabling Claude agents to perform user authentication flows, manage user attributes, and handle session lifecycle directly through MCP‑compatible tools.

How to use Mcp Server Aws Cognito?

1. Clone and install

   git clone https://github.com/gitCarrot/mcp-server-aws-cognito.git
   cd mcp-server-aws-cognito
   npm install
   npm run build
   

2. Configure Cognito credentials – create a .env file (or set environment variables) with:

   AWS_COGNITO_USER_POOL_ID=your-user-pool-id
   AWS_COGNITO_USER_POOL_CLIENT_ID=your-app-client-id
   

3. Run the server (example for Claude Desktop):

   {
     "mcpServers": {
       "aws-cognito-mcp-server": {
         "command": "/path/to/mcp-server-aws-cognito/build/index.js",
         "env": {
           "AWS_COGNITO_USER_POOL_ID": "your-user-pool-id",
           "AWS_COGNITO_USER_POOL_CLIENT_ID": "your-app-client-id"
         }
       }
     }
   }
   

   Or start the inspector for debugging:

   npm run inspector
   

4. Access tools – the MCP inspector URL (displayed on start) lets you test each action from a browser.

Key Features

• Sign‑up and email‑based account confirmation
• Sign‑in, sign‑out, and session refresh
• Password reset workflow (send code → verify code)
• Change password and update arbitrary user attributes
• MFA support via TOTP verification
• Delete user account
• Resend confirmation codes
• Fully typed TypeScript implementation

Use Cases

• Integrating Claude agents with existing AWS Cognito user bases
• Building conversational assistants that can onboard, authenticate, and manage users without exposing raw Cognito APIs
• Prototyping secure login flows in AI‑driven applications
• Automating account recovery and MFA enrollment through natural language interfaces

FAQ

Q: Do I need an AWS account to run this server? A: Yes, a Cognito User Pool must be provisioned and its IDs supplied via environment variables.

Q: Which Node.js version is required? A: Node.js 18 or newer.

Q: Can I run the server without building it first? A: For development, use npm run watch to auto‑rebuild and then execute npx tsx index.ts.

Q: How does Claude interact with this server? A: Claude communicates over stdio using the MCP protocol; each tool appears as an MCP action that Claude can invoke.

Q: Is there a way to debug the server? A: Run npm run inspector to launch the MCP Inspector, which provides a web UI for inspecting request/response payloads.

AWS Cognito MCP Server

A Model Context Protocol (MCP) server implementation that connects to AWS Cognito for authentication and user management. This server provides a set of tools for user authentication flows including sign-up, sign-in, password management, and more.

Prerequisites

• AWS account with Cognito User Pool configured
• Node.js 18 or higher

Installation

# Clone the repository
git clone https://github.com/yourusername/mcp-server-aws-cognito.git

# Install dependencies
cd mcp-server-aws-cognito
npm install

# Build the server
npm run build

AWS Cognito Configuration

1. Log in to your AWS Console and navigate to Amazon Cognito
2. Create a User Pool or use an existing one
3. Note your User Pool ID and App Client ID
4. Set these values as environment variables or in a .env file (you need .env file only when you use claude code, not claude desktop):

AWS_COGNITO_USER_POOL_ID=your-user-pool-id
AWS_COGNITO_USER_POOL_CLIENT_ID=your-app-client-id

Available Tools

Tool Name	Description	Parameters
sign_up	Register a new user	email: string, password: string
sign_up_confirm_code_from_email	Verify account with confirmation code	username: string, confirmationCode: string
sign_in	Authenticate a user	username: string, password: string
sign_out	Sign out the current user	None
getCurrentUser	Get the current signed-in user	None
reset_password_send_code	Request password reset code	username: string
reset_password_veryify_code	Reset password with verification code	username: string, code: string, newPassword: string
change_password	Change password for signed-in user	oldPassword: string, newPassword: string
refresh_session	Refresh the authentication tokens	None
update_user_attributes	Update user profile attributes	attributes: Array of {name: string, value: string}
delete_user	Delete the current signed-in user	None
resend_confirmation_code	Resend account verification code	username: string
verify_software_token	Verify TOTP for MFA	username: string, totpCode: string

The Inspector will provide a URL to access debugging tools in your browser.

Using with Claude Desktop

Before starting make sure Node.js is installed on your desktop for npx to work.

1. Go to: Settings > Developer > Edit Config

2. Add the following to your claude_desktop_config.json:

{
  "mcpServers": {
    "aws-cognito-mcp-server": {
      "command": "/path/to/mcp-server-aws-cognito/build/index.js",
      "env": {
        "AWS_COGNITO_USER_POOL_ID": "your-user-pool-id",
        "AWS_COGNITO_USER_POOL_CLIENT_ID": "your-app-client-id"
      }
    }
  }
}

Using with Claude Code

Claude Code is a command-line interface for Claude. To use this MCP server with Claude Code:

1. Install Claude Code by following the instructions at Claude Code Documentation

2. Add the MCP server to Claude Code:

claude mcp add "aws-cognito-mcp" npx tsx index.ts

3. Verify it's been added:

claude mcp list

4. Run Claude with your MCP server:

claude

Development

For development with auto-rebuild:

npm run watch

Debugging

Since MCP servers communicate over stdio, debugging can be challenging. Use the MCP Inspector for better visibility:

npm run inspector

Now you can use the AWS Cognito authentication tools with Claude!