Labsco
MCP SERVER

AWS Cognito MCP Server

by gitCarrot

Drive an Amazon Cognito user pool from a conversation: sign-up, confirmation codes, sign-in, password resets and MFA verification.

Identity, Access, Secrets & Encryption
Summary
The Cognito user flow, end to end.

Everything a sign-up screen would do is available as a call, which makes it a fast way to exercise a pool you are still building — register a user, confirm them, reset the password, check MFA — before any client exists.

What it is

An authentication front end onto an Amazon Cognito user pool. It carries the whole user flow — register, confirm by emailed code, sign in, refresh, change or reset a password, update attributes, verify a TOTP code, delete the account.

What you get
  • A new user registered, then confirmed with the code that arrives by email, with a resend if it does not
  • Sign-in, sign-out, and a read of who is currently signed in
  • A forgotten password reset in two steps: code first, new password second
  • A password changed for the signed-in user, and their session tokens refreshed
  • Profile attributes updated, a TOTP code verified for MFA, and the account deleted
Requirements

Node.js 18 or higher, an AWS account with a Cognito user pool already configured, and that pool's id and its app client id in the environment.