Summary

It is the AWS CLI, so its reach is your profile's reach.

There is no allowlist between the model and your account: what your credentials can do, this can do. That is the appeal for exploration and the reason to point it at a profile scoped to what you are willing to have touched.

What it is

A TypeScript server that shells out to the AWS CLI on your machine. One call takes a service, a subcommand and options and executes it; another explains a service. A resource, aws-services://list, enumerates the services available.

What you get

Any AWS CLI command executed — the service, the subcommand, and options as key-value pairs
Details about a specific AWS service, for when you know the service but not the subcommand
The list of available AWS services, published as a resource
Whatever the CLI can do, since the call is the CLI rather than a curated subset of the API

Requirements

Node.js 20 or later and the AWS CLI installed and configured with credentials. Commands run with exactly the permissions of your configured profile, and the server does no authorisation of its own — so the account you configure is the boundary, and anyone who can reach the server can use it.