Skip to content

MCP server

AWS S3 MCP server

Amazon S3 is handled through the managed AWS MCP Server, which lets AI run scripted AWS actions, create presigned links and search AWS docs.

At a glance

Maintained by
Amazon Web Services
Tools exposed
8 listed below
Reviewed
September 24, 2026

Why it matters

What it does and why it matters

Amazon S3 stores files for a huge number of applications: uploads, backups, exports and data files. AWS does not offer a dedicated S3 MCP server. Instead, the managed AWS MCP Server, generally available since May 2026, covers S3 along with other services. An assistant can run scripted AWS actions, create presigned links for files, search and read AWS documentation and check regional availability.

For operations teams, that means questions such as "how many files were uploaded to this bucket today" or "give me a temporary link to this export" can be handled in plain English.

Access follows the AWS credentials and IAM role you connect. The script tool is powerful, since it can do anything the role allows, so we use a role limited to specific buckets and read actions, and we keep write and delete permissions for separate, reviewed workflows. The older AWS API MCP server is being replaced by this managed server.

Use cases

Best business use cases

Temporary links

Create presigned links to share a file for a limited time.

Bucket checks

List recent uploads or exports.

AWS docs

Search AWS documentation for S3 settings.

Policy reviews

Read bucket settings to spot risky configurations.

Usage questions

Summarize storage by bucket or prefix.

Tools

Available tools

Tool names as published by the maintainer at review time. Versions change, so check the repository for the current list.

Read and write: Read and write across S3 and other AWS services as allowed by IAM; read-only mode is available with SigV4.

  • aws___get_presigned_url

    Create pre-signed S3 URLs to upload or download files.

  • aws___run_script

    Run Python in a sandbox with AWS API access, for example to list buckets and objects.

  • aws___get_tasks

    Check the status of long-running script tasks.

  • aws___search_documentation

    Search all AWS documentation and skills.

  • aws___read_documentation

    Fetch an AWS docs page as Markdown.

  • aws___retrieve_skill

    Load step-by-step AWS workflows and best practices.

  • aws___list_regions

    List all AWS Regions.

  • aws___get_regional_availability

    Check which services and features exist in a Region.

Workflows

Example workflows

Share an export safely

  1. 1

    Ask for the latest export file.

  2. 2

    The assistant lists matching objects.

  3. 3

    You confirm the file.

  4. 4

    It creates a presigned link that expires.

  5. 5

    You send the link to the recipient.

Check a bucket's settings

  1. 1

    Name the bucket.

  2. 2

    The assistant reads its public access and encryption settings.

  3. 3

    It compares them with AWS guidance.

  4. 4

    It lists anything to fix.

  5. 5

    An engineer reviews and applies changes.

Prompts

Example prompts

  • “List files uploaded to the exports bucket today.”

  • “Create a link to this file that expires in 24 hours.”

  • “Check whether the uploads bucket blocks public access.”

Setup

Installation and configuration

Examples for Claude Desktop and Claude Code. Replace the placeholder values with your own keys, and store secrets outside version control.

Claude Desktop: claude_desktop_config.json

{
    "mcpServers": {
        "aws-mcp": {
            "command": "uvx",
            "args": [
                "mcp-proxy-for-aws-cli@latest",
                "https://aws-mcp.us-east-1.api.aws/mcp",
                "--metadata",
                "AWS_REGION=us-west-2"
            ]
        }
    }
}

Claude Code: terminal

claude mcp add aws-mcp https://aws-mcp.us-east-1.api.aws/mcp --transport http
  • Hosted server: https://aws-mcp.us-east-1.api.aws/mcp (also https://aws-mcp.eu-central-1.api.aws/mcp).
  • Local server: uvx mcp-proxy-for-aws-cli@latest (SigV4 signing proxy, optional).
  • Needs: Option A: OAuth through AWS Sign-in (attach AWSMCPSignInOAuthAccessPolicy to the IAM role or user). Option B: SigV4 with AWS CLI credentials (aws login) and uv installed. Actions are limited by IAM permissions..

Security

Security considerations

  • Scoped IAM role

    Limit the role to specific buckets and actions.

  • Script tool

    The script tool can do anything the role allows. Keep the role narrow.

  • Short links

    Keep presigned links short-lived.

  • CloudTrail

    Use AWS CloudTrail to review actions.

Related servers

Servers that pair well with it

AWS

The AWS API MCP server from AWS Labs lets AI run AWS CLI commands, suggest commands and plan changes, with read-only and consent modes.

Google Drive

Google's own Drive MCP server lets AI search, read and create files in Google Drive, with your Google Workspace sign-in.

Cloudflare

Cloudflare's Code Mode MCP server lets AI search Cloudflare docs and the API and execute API calls, within the scopes you grant.

Keep exploring

FAQ

Questions people ask us

Have a question that is not here? Ask us directly.

Start a project

Want this connected to your own systems? We build AI workflows with MCP.

Send a short brief. We reply with questions, a suggested plan and an estimate you can compare with other offers.

Your privacy choices

We use necessary storage to run this site. With your permission we also use Google Analytics to see which pages help people, and load maps from Google. You can change this at any time. Read the cookie policy.