{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_9wgxdpjbcn9n","handle":"aws-sso-mcp","url":"https://wellknown.network/agents/aws-sso-mcp","links":{"self":"https://wellknown.network/agents/aws-sso-mcp/record.json","html":"https://wellknown.network/agents/aws-sso-mcp","markdown":"https://wellknown.network/agents/aws-sso-mcp/record.md","api":"https://wellknown.network/api/v1/agents/aws-sso-mcp","status":"https://wellknown.network/api/v1/agents/aws-sso-mcp/status","claim":"https://wellknown.network/agents/aws-sso-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/aws-sso-mcp/claim.json","badge":"https://wellknown.network/agents/aws-sso-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/aws-sso-mcp/history","tools":"https://wellknown.network/api/v1/agents/aws-sso-mcp/tools"},"ard":{"identifier":"urn:air::server:aws-sso-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"aws-sso-mcp","summary":"Query multiple AWS accounts across orgs at once from your AI chat client, via IAM Identity Center SSO. Rule-based role selection, no long-lived keys.","description":"# aws-sso-mcp\n\n**Got more than one AWS account or org? Sign in once, ask in plain English, and get one merged answer from all of them, using the IAM roles your rules choose, never the AI's.**\n\n`aws-sso-mcp` is an [MCP (Model Context Protocol)](https://modelcontextprotocol.io) server. It plugs\ninto a chat assistant such as GitHub Copilot Chat in VS Code or Claude Desktop, and lets that\nassistant query and manage AWS through your **AWS IAM Identity Center (SSO)** login.\n\n> *\"List all stopped EC2 instances across every prod account in org1.\"*\n>\n> One sentence in. One combined answer out, from every matching account.\n\n## Contents\n\n- [Is this for you?](#is-this-for-you)\n- [Why this exists](#why-this-exists)\n- [What you can do with it](#what-you-can-do-with-it)\n- [How it works in 30 seconds](#how-it-works-in-30-seconds)\n- [Quick start](#quick-start)\n- [Safety model](#safety-model)\n- [Documentation map](#documentation-map)\n- [Project layout](#project-layout)\n- [Requirements and status](#requirements-and-status)\n- [Security](#security)\n- [Contributing](#contributing)\n- [License](#license)\n\n## Is this for you?\n\n**If you work in more than one AWS account, yes.** The more accounts and orgs you have, the more it saves you.\n\n- **Several orgs.** Keep every org in one config file. Switch between them in chat, or query\n  several in a single request. Each org needs its own login, and you never mix them up by accident.\n- **Dozens or hundreds of accounts.** Find accounts by name, id or environment, then ask one\n  question of all of them. No account-by-account console hopping, no profile juggling.\n- **A different role per account.** Prod gets `ReadOnlyAccess`, sandboxes get `PowerUserAccess`.\n  You write that once, and it is applied everywhere.\n- **Questions that cross accounts.** \"Where is this running?\", \"Which accounts have public\n  buckets?\", \"What is stopped in prod?\" Each is one sentence instead of an afternoon of clicking.\n\nIf you only ever use a single account, it still works,…","publisher":{"name":"Arnab Das","url":null},"homepage":"https://github.com/arnabdas24/aws-sso-mcp","repository":"https://github.com/arnabdas24/aws-sso-mcp/blob/main/CHANGELOG.md","version":"0.4.0","license":null,"protocols":["mcp"],"tags":["aws","sso","iam-identity-center","mcp","model-context-protocol","multi-account"],"pricing":null,"endpoints":[{"url":"pypi:aws-sso-mcp","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi","publisherName":"pypi"}},"derived":{"capabilities":[{"slug":"infra.cloud","name":"Cloud Platforms","confidence":1,"provenance":"declared"},{"slug":"security.identity","name":"Identity & Access","confidence":1,"provenance":"declared"}],"categories":["infra","security"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"aws-sso-mcp","registry":"pypi","observedAt":"2026-11-05T21:26:30.450Z","publishedAt":"2026-11-04T13:07:35.234249Z","latestVersion":"0.4.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"aws-sso-mcp","url":"https://pypi.org/project/aws-sso-mcp/","firstSeenAt":"2026-11-05T21:24:35.776Z","fetchedAt":"2026-11-05T21:24:35.776Z","normalizedAt":"2026-11-05T21:24:35.776Z"}]},"firstSeenAt":"2026-11-05T21:24:35.776Z","updatedAt":"2026-11-05T21:26:30.450Z"}