sign_upLABSCO SUMMARY
The Cognito user flow, end to end.
Everything a sign-up screen would do is available as a call, which makes it a fast way to exercise a pool you are still building — register a user, confirm them, reset the password, check MFA — before any client exists.
What it is
An authentication front end onto an Amazon Cognito user pool. It carries the whole user flow — register, confirm by emailed code, sign in, refresh, change or reset a password, update attributes, verify a TOTP code, delete the account.
What you get
- A new user registered, then confirmed with the code that arrives by email, with a resend if it does not
- Sign-in, sign-out, and a read of who is currently signed in
- A forgotten password reset in two steps: code first, new password second
- A password changed for the signed-in user, and their session tokens refreshed
- Profile attributes updated, a TOTP code verified for MFA, and the account deleted
Requirements
Node.js 18 or higher, an AWS account with a Cognito user pool already configured, and that pool's id and its app client id in the environment.
Setup effort
Build from source — git clone https://github.com/gitCarrot/mcp-server-aws-cognito.git
USE CASES
01
Testing a new user pool end to end
Register a user, confirm them with the emailed code, and sign in as them — the whole path a real user would take, without a front end.
02
Getting a locked-out user back in
Send the reset code, verify it with the new password, and confirm the account works again in the same pass.
03
Checking MFA is wired up
Sign in and verify a TOTP code against the pool, so a broken MFA setup surfaces before users meet it.
04
Keeping a session alive while you work
Read who is currently signed in and refresh the tokens rather than signing in again each time they expire.
05
Changing a user's details
Update the profile attributes on the signed-in account, or change the password without going through the reset path.
06
Cleaning up after a test run
Delete the account you created and sign out, so a pool used for testing does not fill with half-confirmed users.
13 tools
Listed in project docs. Your client may show a different list.
sign_up_confirm_code_from_emailsign_insign_outgetCurrentUserreset_password_send_codereset_password_veryify_codechange_passwordrefresh_sessionupdate_user_attributesdelete_userresend_confirmation_codeverify_software_tokenBEFORE YOU INSTALL
What to know first
Tools you get
13 tools named in the project's documentation.
Requires
- Node.js 18 or later
- AWS_COGNITO_USER_POOL_ID in your environment
- AWS_COGNITO_USER_POOL_CLIENT_ID in your environment
INSTALLATION
Connect your client
You clone and build this one yourself.
Server setup
TERMINAL
# Clone the repository
git clone https://github.com/gitCarrot/mcp-server-aws-cognito.git
# Install dependencies
cd mcp-server-aws-cognito
npm install
# Build the server
npm run buildMCP Clients
Claude Desktop
CLAUDE DESKTOP · JSON
{
"mcpServers": {
"aws-cognito-mcp-server": {
"command": "<YOUR_PATH_TO_MCP_SERVER_AWS_COGNITO>/build/index.js",
"env": {
"AWS_COGNITO_USER_POOL_ID": "<YOUR_AWS_COGNITO_USER_POOL_ID>",
"AWS_COGNITO_USER_POOL_CLIENT_ID": "<YOUR_AWS_COGNITO_USER_POOL_CLIENT>"
}
}
}
}Claude Code
CLAUDE CODE · TERMINAL
claude mcp add "aws-cognito-mcp" npx tsx index.ts
