Back to Home
hatanoyoshihiko icon

aws_knowledge_mcp_server

Verified Safe

by hatanoyoshihiko

Overview

Provides a serverless web UI and proxy for interacting with the AWS Knowledge MCP Server to access documentation, recommendations, and regional availability information.

Installation

Run Command
sam deploy --stack-name aws-knowledge-mcp-server-tool --region ap-northeast-1 --s3-bucket aws-sam-cli-managed-default-YOUR_AWS_ACCOUNT --capabilities CAPABILITY_IAM --profile YOUR_AWS_PROFILE --parameter-overrides OriginVerifySecret="YOUR_SECRET_VALUE"

Environment Variables

  • MCP_ENDPOINT
  • PROTOCOL_VERSION
  • ORIGIN_VERIFY_SECRET

Security Notes

The server employs a shared secret (`OriginVerifySecret`) for CloudFront-to-API Gateway communication, which helps prevent direct API access. Robust input validation is implemented for all API endpoints, explicitly rejecting potentially dangerous nested object structures for some inputs (e.g., `get_regional_availability`). The upstream MCP endpoint is hardcoded and not user-controlled, mitigating SSRF risks. CORS is permissively set to `*` for the API Gateway. No 'eval' or similar dangerous patterns were found in the provided Python code. Error handling is structured to catch exceptions and truncate error messages, preventing excessive information leakage.

Similar Servers

Stats

Interest Score0
Security Score9
Cost ClassLow
Avg Tokens100
Stars0
Forks0
Last Update2025-12-17

Tags

AWSServerlessAPI ProxyDocumentationUI