{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_ygm6f8typ6me","handle":"aws-safe-mcp","url":"https://wellknown.network/agents/aws-safe-mcp","links":{"self":"https://wellknown.network/agents/aws-safe-mcp/record.json","html":"https://wellknown.network/agents/aws-safe-mcp","markdown":"https://wellknown.network/agents/aws-safe-mcp/record.md","api":"https://wellknown.network/api/v1/agents/aws-safe-mcp","status":"https://wellknown.network/api/v1/agents/aws-safe-mcp/status","claim":"https://wellknown.network/agents/aws-safe-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/aws-safe-mcp/claim.json","badge":"https://wellknown.network/agents/aws-safe-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air::server:aws-safe-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"aws-safe-mcp","summary":"Read-only, opinionated MCP server for safely investigating AWS resources.","description":"# aws-safe-mcp\n\n[![CI](https://github.com/harryhazza77/aws-safe-mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/harryhazza77/aws-safe-mcp/actions/workflows/ci.yml)\n[![PyPI](https://img.shields.io/pypi/v/aws-safe-mcp.svg)](https://pypi.org/project/aws-safe-mcp/)\n[![Python](https://img.shields.io/pypi/pyversions/aws-safe-mcp.svg)](https://pypi.org/project/aws-safe-mcp/)\n\n[Changelog](CHANGELOG.md) · [Quickstart](docs/quickstart.md) · [Troubleshooting](docs/troubleshooting.md)\n\nSafe, read-only AWS investigation tools for AI coding agents.\n\n`aws-safe-mcp` is a local, read-only MCP server for investigating AWS resources\nwithout exposing a raw AWS SDK escape hatch. It gives AI clients structured,\nbounded tools for debugging serverless workloads while preserving IAM as the\nauthorization boundary.\n\n**Status:** alpha. The server is intentionally read-only in v1, and tool outputs\nare designed for investigation rather than complete AWS inventory export.\n\nUse it to:\n\n- Trace serverless dependencies across Lambda, EventBridge, Step Functions, and\n  API Gateway.\n- Trace Lambda VPC egress paths to understand inferred internet and private\n  network reachability.\n- Inspect recent failure signals without exposing secrets or raw payloads.\n- Check permission paths with IAM simulation when available.\n- Give AI clients useful AWS context without handing them a raw SDK shell.\n\n## Install In An AI Client\n\nUse the published package with any MCP client that supports stdio:\n\nCreate `~/.config/aws-safe-mcp/config.yaml` first (see [Quickstart](docs/quickstart.md)) — `uvx` will fail without it.\n\n```bash\nuvx aws-safe-mcp \\\n  --profile dev \\\n  --region eu-west-2 \\\n  --readonly \\\n  --config ~/.config/aws-safe-mcp/config.yaml\n```\n\nClient-specific setup:\n\n- [Claude Code](docs/claude-code.md)\n- [Claude Desktop](docs/claude-desktop.md)\n- [Cursor](docs/cursor.md)\n- [Provider-neutral notes](docs/ai-clients.md)\n\n```mermaid\nflowchart LR\n    Client[\"AI client\"] --> MCP[\"aws-safe-mcp\"]\n    MCP --…","publisher":{"name":"Haresh Patel","url":null},"homepage":"https://github.com/harryhazza77/aws-safe-mcp","repository":"https://github.com/harryhazza77/aws-safe-mcp/blob/main/CHANGELOG.md","version":"0.3.0","license":"MIT","protocols":["mcp"],"tags":["aws","lambda","mcp","model-context-protocol","serverless"],"pricing":null,"endpoints":[{"url":"pypi:aws-safe-mcp","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi","publisherName":"pypi"}},"derived":{"capabilities":[{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":1,"provenance":"derived"},{"slug":"infra.cloud","name":"Cloud Platforms","confidence":1,"provenance":"declared"},{"slug":"security.identity","name":"Identity & Access","confidence":0.814,"provenance":"derived"},{"slug":"dev.terminal","name":"Terminal & Shell","confidence":0.745,"provenance":"derived"}],"categories":["dev","infra","security"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"aws-safe-mcp","registry":"pypi","observedAt":"2026-09-09T10:28:52.120Z","publishedAt":"2026-05-20T07:07:43.206970Z","latestVersion":"0.3.0"}},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"aws-safe-mcp","url":"https://pypi.org/project/aws-safe-mcp/","firstSeenAt":"2026-09-09T10:26:14.507Z","fetchedAt":"2026-09-09T10:26:14.507Z","normalizedAt":"2026-09-09T10:26:14.507Z"}]},"firstSeenAt":"2026-09-09T10:26:14.507Z","updatedAt":"2026-09-09T10:28:52.120Z"}