95 tools that work with AWS: 32 MCP servers, 52 Agent Skills and 11 Claude Code plugins. 5 of the remote servers answered our live check, 2 worked without an API key, and 22 come from an official or verified publisher. Ranked by GitHub stars plus official, live and free-to-try signals.
Most common uses: Cloud providers & infrastructure as code (51), Code & dependency scanning (13), Monitoring, logs & incidents (5), Hosting & deployment (4).
| Tool | Stars | Last update | License | |
|---|---|---|---|---|
| aws-agents Build, deploy, and operate AI agents on AWS. Skills for scaffolding agents with Amazon Bedrock AgentCore, connecting tools, memory, policies, evaluati PluginAnthropic marketplace | 3,480 | Apache-2.0 | ||
| aws-agents-for-devsecops Investigate incidents, review code and execute UAT for release readiness, scan code for vulnerabilities, and run penetration tests with AWS DevOps Age PluginAnthropic marketplace | 3,480 | Apache-2.0 | ||
| aws-core Build, deploy, and operate applications on AWS. Skills to author infrastructure-as-code, use core services, and complete common tasks. PluginAnthropic marketplace | 3,480 | Apache-2.0 | ||
| aws-data-analytics Data lake, analytics, and ETL workflows with S3 Tables, AWS Glue, and Athena. PluginAnthropic marketplace | 3,480 | Apache-2.0 | ||
| aws-startup-advisor Personalized AWS guidance built on patterns from 350,000+ startups. Get architecture, cost, and security recommendations matched to your stage, from d PluginAnthropic marketplace | 3,480 | Apache-2.0 | ||
| aws-serverless Specialized skill for building production-ready serverless applications on AWS. Covers Lambda functions, API Gateway, DynamoDB, SQS/SNS event-driven p SkillInstall · skills CLI | 49,672 | MIT | ||
| aws-cdk-python-setup Setup and initialization guide for developing AWS CDK (Cloud Development Kit) applications in Python. This skill enables users to configure environmen SkillInstall · skills CLI | 41,140 | MIT | ||
| aws-cloudwatch-investigation Reusable investigation patterns for AWS CloudWatch: Logs Insights query templates, alarm-to-deployment correlation, blast-radius narrowing decision tr SkillInstall · skills CLI | 41,140 | MIT | ||
| aws-cost-optimize Analyze AWS resources used in the app (IaC files and/or resources in a target account/region) and optimize costs - creating GitHub issues for identifi SkillInstall · skills CLI | 41,140 | MIT | ||
| aws-resource-health-diagnose Analyze AWS resource health, diagnose issues from CloudWatch logs and metrics, and create a remediation plan for identified problems. SkillInstall · skills CLI | 41,140 | MIT | ||
| aws-resource-query Query AWS resources using natural language. Covers EC2, S3, RDS, Lambda, ECS, EKS, Secrets Manager, IAM, VPC, networking, messaging, and more. Strictl SkillInstall · skills CLI | 41,140 | MIT | ||
| aws-well-architected-review Perform an AWS Well-Architected Framework review of the current workload IaC and architecture, generating findings and GitHub issues for improvements. SkillInstall · skills CLI | 41,140 | MIT | ||
| auditing-aws-s3-bucket-permissions Systematically audit AWS S3 bucket permissions to identify publicly accessible buckets, overly permissive ACLs, misconfigured bucket policies, and mis SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| auditing-cloud-with-cis-benchmarks Audit AWS, Azure, and GCP environments against the CIS Foundations Benchmarks by running automated scans with tools like Prowler and ScoutSuite, inter SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| conducting-cloud-incident-response Respond to security incidents in AWS, Azure, and GCP via identity-based containment, cloud-native log analysis (CloudTrail, Azure Activity Logs, GCP A SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| conducting-cloud-penetration-testing This skill outlines methodologies for performing authorized penetration testing against AWS, Azure, and GCP cloud environments. It covers understandin SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| detecting-aws-cloudtrail-anomalies Detect unusual API call patterns in AWS CloudTrail logs using boto3, statistical baselining, and behavioral analysis to identify credential compromise SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| detecting-aws-credential-exposure-with-trufflehog Scan source code repositories, CI/CD pipelines, and configuration files for exposed AWS credentials using TruffleHog, git-secrets, and AWS-native dete SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| detecting-aws-guardduty-findings-automation Build automated AWS GuardDuty finding response pipelines using EventBridge and Lambda to trigger real-time incident response, automatically quarantine SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| detecting-aws-iam-privilege-escalation Detect AWS IAM privilege escalation paths using boto3 and Cloudsplaining policy analysis to identify overly permissive policies, dangerous permission SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| detecting-cloud-threats-with-guardduty Deploy and operationalize Amazon GuardDuty, covering protection plans for S3, EKS, EC2 runtime monitoring, and Lambda, interpreting finding severity, SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| detecting-compromised-cloud-credentials Detect compromised cloud credentials across AWS, Azure, and GCP by analyzing anomalous API activity, impossible-travel patterns, and credential-stuffi SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| detecting-s3-data-exfiltration-attempts Detecting data exfiltration attempts from AWS S3 buckets by analyzing CloudTrail S3 data events, VPC Flow Logs, GuardDuty findings, Amazon Macie alert SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| detecting-serverless-function-injection Detects and prevents code injection attacks targeting serverless functions (AWS Lambda, Azure Functions, Google Cloud Functions) through event source SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| detecting-sql-injection-via-waf-logs Analyze WAF (ModSecurity/AWS WAF/Cloudflare) logs to detect SQL injection attack campaigns. Parses ModSecurity audit logs and JSON WAF event logs to i SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| emulating-cloud-attacks-with-stratus-red-team Install and run Stratus Red Team to detonate granular, MITRE ATT&CK-mapped AWS, Azure, GCP, and Kubernetes attack techniques through their warmup-deto SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| aws-amplify Build full-stack apps with AWS Amplify Gen 2 using guided workflows for authentication, data models, storage, GraphQL APIs, and Lambda functions. PluginAnthropic marketplace | 941 | Apache-2.0 | ||
| aws-serverless Design, build, deploy, test, and debug serverless applications with AWS Serverless services. PluginAnthropic marketplace | 941 | Apache-2.0 | ||
| aws-transform Migrate, modernize, and upgrade codebases to AWS. Transforms .NET Framework to .NET 8/10, mainframe COBOL to Java, VMware VMs to EC2, SQL Server to Au PluginAnthropic marketplace | 941 | Apache-2.0 | ||
| databases-on-aws Expert database guidance for the AWS database portfolio. Design schemas, execute queries, handle migrations, and choose the right database for your wo PluginAnthropic marketplace | 941 | Apache-2.0 | ||
| deploy-on-aws Deploy applications to AWS with architecture recommendations, cost estimates, and IaC deployment. PluginAnthropic marketplace | 941 | Apache-2.0 | ||
| aws-solution-architect Use when designing or costing an AWS architecture (serverless, Lambda, API Gateway, DynamoDB, ECS, Aurora, CloudFormation, migration to AWS). Designs SkillInstall · skills CLI | 29,773 | MIT | ||
| hf-cloud-aws-context-discovery Discover the user's local AWS context (active profile, region, account ID, caller identity) at the start of any AWS task. Use this skill before any ot SkillInstall · skills CLI | 11,341 | Apache-2.0 | ||
| hf-cloud-python-env-setup Set up an isolated Python environment for SageMaker / AWS work, with the right Python version and current boto3. Use this skill whenever Python code w SkillInstall · skills CLI | 11,341 | Apache-2.0 | ||
| hf-cloud-sagemaker-iam-preflight Ensure a usable SageMaker execution role exists before deploying or training. Use this skill whenever about to create a SageMaker endpoint, model, tra SkillInstall · skills CLI | 11,341 | Apache-2.0 | ||
| aws-advisor Expert AWS Cloud Advisor for architecture design, security review, and implementation guidance. Leverages AWS MCP tools for accurate, documentation-ba SkillInstall · skills CLI | 7,167 | — | ||
| aws-cloud-patterns AWS cloud patterns for Lambda, ECS, S3, DynamoDB, and Infrastructure as Code with CDK/Terraform SkillInstall · skills CLI | 2,838 | Apache-2.0 | ||
| database-admin Expert database administrator specializing in modern cloud databases, automation, and reliability engineering. Masters AWS/Azure/GCP database services SkillInstall · skills CLI | 2,009 | MIT | ||
| database-cloud-optimization-cost-optimize Reduce cloud infrastructure costs on AWS, Azure, and GCP while maintaining performance and reliability, by analyzing spending, identifying savings opp SkillInstall · skills CLI | 2,009 | MIT | ||
| ec2 AWS EC2 virtual machine management — instances, security groups, key pairs, AMIs, EBS volumes, Auto Scaling Groups, Spot Instances, Session Manager, p SkillInstall · skills CLI | 1,175 | MIT | ||
| ecs AWS ECS container orchestration for running Docker containers. Use when deploying containerized applications, configuring task definitions, setting up SkillInstall · skills CLI | 1,175 | MIT | ||
| eks AWS EKS Kubernetes management for clusters, node groups, and workloads. Use when creating clusters, configuring IRSA, managing node groups, deploying SkillInstall · skills CLI | 1,175 | MIT | ||
| eventbridge AWS EventBridge serverless event bus for event-driven architectures. Use when creating rules, configuring event patterns, setting up scheduled events, SkillInstall · skills CLI | 1,175 | MIT | ||
| iam AWS Identity and Access Management for users, roles, policies, and permissions. Use when creating IAM policies, configuring cross-account access, sett SkillInstall · skills CLI | 1,175 | MIT | ||
| lambda AWS Lambda serverless functions for event-driven compute. Use when creating functions, configuring triggers, debugging invocations, optimizing cold st SkillInstall · skills CLI | 1,175 | MIT | ||
| rds AWS RDS relational database service for managed databases. Use when provisioning databases, configuring backups, managing replicas, troubleshooting co SkillInstall · skills CLI | 1,175 | MIT | ||
| s3 AWS S3 object storage for bucket management, object operations, and access control. Use when creating buckets, uploading files, configuring lifecycle SkillInstall · skills CLI | 1,175 | MIT | ||
| secrets-manager AWS Secrets Manager for secure secret storage and rotation. Use when storing credentials, configuring automatic rotation, managing secret versions, re SkillInstall · skills CLI | 1,175 | MIT | ||
| sns AWS SNS notification service for pub/sub messaging. Use when creating topics, managing subscriptions, configuring message filtering, sending notificat SkillInstall · skills CLI | 1,175 | MIT | ||
| sqs AWS SQS message queue service for decoupled architectures. Use when creating queues, configuring dead-letter queues, managing visibility timeouts, imp SkillInstall · skills CLI | 1,175 | MIT | ||
| step-functions AWS Step Functions workflow orchestration with state machines. Use when designing workflows, implementing error handling, configuring parallel executi SkillInstall · skills CLI | 1,175 | MIT | ||
| Servonaut Manage AWS, Hetzner, OVH and SSH servers: status, logs, CloudWatch, IP bans, safe command exec. MCP serverVerified domain · servonaut.devLocal · PyPI | 32 | MIT | ||
| aws-ami-builder Build Amazon Machine Images (AMIs) with Packer using the amazon-ebs builder. Use when creating custom AMIs for EC2 instances. SkillInstall · skills CLI | 928 | MPL-2.0 | ||
| aws-solution-architect Expert AWS solution architecture for startups focusing on serverless, scalable, and cost-effective cloud infrastructure with modern DevOps practices a SkillInstall · skills CLI | 900 | MIT | ||
| migration-to-aws Plan a migration from Google Cloud Platform (and OpenAI/Gemini AI workloads) to AWS. Analyzes your Infrastructure-as-Code files, app code, and GCP bil PluginAnthropic marketplace | 26 | Apache-2.0 | ||
| Stigmer Execution graph of AWS: verified contracts, least-privilege IAM policies, pre-flight authorization. MCP serverVerified domain · stigmer.networkRemote● LiveFree to try | 0 | — | ||
| Control Plane Control Plane (controlplane.com): deploy and operate workloads across AWS, GCP, Azure, and more. MCP serverVerified domain · controlplane.comRemoteSign-in needed | 11 | MIT | ||
| aws-cost-operations AWS cost optimization, monitoring, and operational excellence expert. Use when analyzing AWS bills, estimating costs, setting up CloudWatch alarms, qu SkillInstall · skills CLI | 378 | MIT | ||
| aws-serverless-eda AWS serverless and event-driven architecture expert based on Well-Architected Framework. Use when building serverless APIs, Lambda functions, REST API SkillInstall · skills CLI | 378 | MIT | ||
| portal-relay-aws Create an AWS host for a Portal relay - an EC2 instance with a security group and an Elastic IP, or a Lightsail instance with its public ports and a s SkillInstall · skills CLI | 303 | MIT | ||
| aws-well-architected-framework-review Perform a full AWS Well-Architected Framework review evaluating all 57 questions across 6 pillars by analyzing code, IaC, and configurations to produc SkillInstall · skills CLI | 280 | MIT-0 | ||
| migration-readiness Assess a workload's readiness to migrate to AWS by analyzing existing code, dependencies, configurations, and infrastructure to produce evidence-backe SkillInstall · skills CLI | 280 | MIT-0 | ||
| wa-builder Learn then Build" — help developers understand AWS Well-Architected best practices for their specific workload, then produce actionable visual artifac SkillInstall · skills CLI | 280 | MIT-0 | ||
| wa-guardrails Generate preventive Well-Architected guardrails — AWS Config rules, Service Control Policies, permission boundaries, CloudWatch alarms, and IaC policy SkillInstall · skills CLI | 280 | MIT-0 | ||
| wafr-facilitator Help a facilitator run a conversational Well-Architected Framework Review (WAFR) with a customer — generates tailored facilitator questions, probing f SkillInstall · skills CLI | 280 | MIT-0 | ||
| aws-cost-optimization AWS cost optimization and FinOps workflows. Use this skill whenever the user mentions AWS costs, cloud spending, FinOps, Reserved Instances, Savings P SkillInstall · skills CLI | 206 | — | ||
| AWS Cloud Service Updates & Announcements — buy per-query (awswhatsnew) AWS cloud service announcements & updates. $0.01/query. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote● LiveAPI key needed | — | — | ||
| Billtrim: AWS bill savings Ranked AWS bill savings from a Cost Explorer or CUR export, with dollar impact and CLI steps. MCP serverVerified domain · billtrim.grain64.comRemote● Live | — | — | ||
| Amazon Web Services MCP Get a non-expert from zero to a Slack-delivered, plain-English, waste-flagged AWS bill breakdown MCP serverGitHub-verified authorLocal · MCPB | 79 | — | ||
| cloud-audit AWS security scanner with attack chain detection, IAM privilege escalation, and fixes MCP serverGitHub-verified authorLocal · PyPI | 75 | MIT | ||
| Cloud FinOps Skill & MCP Cloud cost + FinOps knowledge for AI agents: AWS/Azure/GCP optimisation, AI spend, waste playbooks. MCP serverGitHub-verified authorLocal · PyPI | 72 | CC-BY-SA-4.0 | ||
| CloudFix Read-only access to your CloudFix AWS cost-saving recommendations, reports and EC2 pricing. MCP serverVerified domain · cloudfix.comRemoteSign-in needed | — | — | ||
| com.synqtune/mcp Fine-tune a small model on your data and benchmark it against your LLM API, in your AWS account. MCP serverVerified domain · synqtune.comLocal · PyPI | — | — | ||
| CostPilot Hosted MCP server for AWS cloud spend: service breakdowns, anomalies, savings and forecasts. MCP serverVerified domain · mcpgatepro.comRemoteSign-in needed | — | — | ||
| delega.ai for AWS Pricing Calculator Create AWS cost estimates and shareable AWS Pricing Calculator URLs. MCP serverVerified domain · delega.aiRemoteSign-in needed | — | — | ||
| Jungle Cleaner Lowers your AWS bill by helping you clean up and optimize your setup MCP serverVerified domain · junglecleaner.comRemoteSign-in needed | — | — | ||
| Provision Stack Outcome-based infrastructure for agents — verified AWS deployments, metered billing MCP serverVerified domain · provision-stack.comRemoteDown | — | — | ||
| io.github.HatmanStack/ragstack Search, chat, upload, and scrape a serverless RAGStack knowledge base on AWS. MCP serverGitHub-verified authorLocal · PyPI | 26 | Apache-2.0 | ||
| Infrawise Live AWS, database & Kafka infrastructure context for AI coding assistants via MCP. MCP serverGitHub-verified authorLocal · npm | 22 | MIT | ||
| Kloudle Cloud Security Scanner AWS cloud security scanners for AI agents — S3, IAM, EC2, EKS, RDS, CloudTrail, CloudWatch Logs MCP serverGitHub-verified authorRemote● LiveFree to try | — | — | ||
| Emfirge Git branch for your cloud. Understand AWS risk, prove fixes, and ship safer changes. MCP serverGitHub-verified authorLocal · npm | 5 | — | ||
| Yaw Labs AWS MCP AWS MCP server — call any AWS API from AI assistants, with first-class SSO re-login MCP serverGitHub-verified authorLocal · npm | 5 | MIT | ||
| Mitigant Run real, auto-recovered cloud attacks on AWS, Azure and GCP to test your defenses. MCP serverGitHub-verified authorRemote● Live | — | — | ||
| Cyntrisec CLI (Historical) Historical AWS analysis CLI; not a current Cyntrisec product. MCP serverGitHub-verified authorLocal · PyPI | 4 | Apache-2.0 | ||
| Cloudprice Multi-cloud + LLM pricing for AI agents: AWS/Azure/GCP/OCI, RI break-even, TCO, price history. MCP serverGitHub-verified authorLocal · PyPI | 2 | MIT | ||
| cloudcostwise Find AWS waste with your own read-only credentials. Runs locally. Nothing is sent unless you opt in. MCP serverGitHub-verified authorLocal · PyPI | 1 | Apache-2.0 | ||
| AWS MCP Server A managed MCP server enabling AI agents to access AWS using docs, API calls, and SOP workflows. MCP serverGitHub-verified authorLocal · PyPI | — | — | ||
| AWS MCP Server AWS MCP Server lets AI securely access AWS using docs, API calls, and SOP workflows. MCP serverGitHub-verified authorLocal · PyPI | — | — | ||
| Connections AWS, GitHub and connected services from your agent, no keys to paste, plus local shell and browser. MCP serverGitHub-verified authorLocal · npm | — | — | ||
| EU Cloud Move off AWS, GCP, Azure: EU-owned alternatives, EU cloud prices, exit fees, Terraform lock-in scan. MCP serverGitHub-verified authorLocal · npm | 0 | Apache-2.0 | ||
| GreenOps Scan Find wasted cloud spend and carbon emissions across your AWS or GCP account. MCP serverGitHub-verified authorLocal · npm | 0 | MIT | ||
| io.github.bmoldo/terraback Scan AWS/Azure/GCP and generate Terraform HCL with import blocks, deterministically, for AI agents. MCP serverGitHub-verified authorLocal · PyPI | — | — | ||
| io.github.danielcregg/rosettahub-mcp-server Manage RosettaHUB user AWS accounts — budgets, AWS CLI, access control. MCP serverGitHub-verified authorLocal · PyPI | — | — | ||
| io.github.FerhatDundar/aws-mcp-connector MCP server for the AWS CLI. Read-only by default; single Go binary. MCP serverGitHub-verified authorLocal · MCPB | 0 | MIT | ||
| io.github.S2TConsulting/accelerators 36 tools for AWS infrastructure, security compliance, AI workflows, and ACI governance. MCP serverGitHub-verified authorLocal · npm | 0 | MIT |