The tool surface is wide enough for real work — buckets and objects, tables and items, batch operations and TTL — and the audit resource means the actions an agent took can be read back afterwards rather than reconstructed from the console.
An MCP server for AWS operations covering S3 and DynamoDB. Every operation it performs is logged, and the log is readable back through the audit://aws-operations resource.
- S3 buckets created, listed and deleted
- Objects uploaded, read, listed and deleted
- DynamoDB tables created, described, updated and deleted
- Items put, retrieved, updated, deleted, queried and scanned
- Batch reads, batch writes and batch statement execution
- Table TTL described and updated
- An audit record of every operation, at audit://aws-operations
AWS credentials for an IAM user with read-write permissions on S3 and DynamoDB — either an access key, a secret and a region in the environment, or the default AWS credential chain. uv runs it.
One command plus a key — npx -y @smithery/cli install mcp-server-aws --client claude, then supply credentials
