aws/agent-toolkit-for-aws
Official, AWS-supported MCP servers, skills, and plugins to help AI agents build on AWS
ARCHETYPE
Skill Collector
Ten-plus skills loaded on demand. A procedural-knowledge library.
Copy this rig
# review before running: this installs third-party code $ claude mcp add --transport http awsknowledge https://knowledge-mcp.global.api.aws $ claude mcp add aws-mcp -- uvx mcp-proxy-for-aws-cli==1.7.0 https://aws-mcp.us-east-1.api.aws/mcp --skip-auth --metadata INSTALL_SOURCE=agent-toolkit-core
MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
$ claude mcp add --transport http awsknowledge https://knowledge-mcp.global.api.aws $ claude mcp add aws-mcp -- uvx mcp-proxy-for-aws-cli==1.7.0 https://aws-mcp.us-east-1.api.aws/mcp --skip-auth --metadata INSTALL_SOURCE=agent-toolkit-core
$ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/analyzing-release-readiness .claude/skills/analyzing-release-readiness $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/chatting-with-aws-devops-agent .claude/skills/chatting-with-aws-devops-agent $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/coordinating-multi-space-devops-agent .claude/skills/coordinating-multi-space-devops-agent $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/diff-scanning-with-aws-security-agent .claude/skills/diff-scanning-with-aws-security-agent $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/investigating-incidents-with-aws-devops-agent .claude/skills/investigating-incidents-with-aws-devops-agent $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/pentesting-with-aws-security-agent .claude/skills/pentesting-with-aws-security-agent $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/remediating-with-aws-security-agent .claude/skills/remediating-with-aws-security-agent $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/running-release-tests .claude/skills/running-release-tests $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/scanning-with-aws-security-agent .claude/skills/scanning-with-aws-security-agent $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/setup-devops-agent .claude/skills/setup-devops-agent $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/setup-security-agent .claude/skills/setup-security-agent $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/setup .claude/skills/setup $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/threat-modeling-with-aws-security-agent .claude/skills/threat-modeling-with-aws-security-agent $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents/skills/agents-build .claude/skills/agents-build $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents/skills/agents-connect .claude/skills/agents-connect $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents/skills/agents-debug .claude/skills/agents-debug $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents/skills/agents-deploy .claude/skills/agents-deploy $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents/skills/agents-get-started .claude/skills/agents-get-started $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents/skills/agents-harden .claude/skills/agents-harden $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents/skills/agents-optimize .claude/skills/agents-optimize $ npx degit aws/agent-toolkit-for-aws/plugins/aws-agents/skills/agents-pay .claude/skills/agents-pay $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/amazon-bedrock .claude/skills/amazon-bedrock $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-ai-ml .claude/skills/aws-ai-ml $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-auth .claude/skills/aws-auth $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-billing-and-cost-management .claude/skills/aws-billing-and-cost-management $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-blocks .claude/skills/aws-blocks $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-cdk .claude/skills/aws-cdk $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-cloudformation .claude/skills/aws-cloudformation $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-compute .claude/skills/aws-compute $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-containers .claude/skills/aws-containers $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-database .claude/skills/aws-database $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-deployment .claude/skills/aws-deployment $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-iam .claude/skills/aws-iam $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-messaging-and-streaming .claude/skills/aws-messaging-and-streaming $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-networking .claude/skills/aws-networking $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-observability .claude/skills/aws-observability $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-sdk-js-v3-usage .claude/skills/aws-sdk-js-v3-usage $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-sdk-python-usage .claude/skills/aws-sdk-python-usage $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-sdk-swift-usage .claude/skills/aws-sdk-swift-usage $ npx degit aws/agent-toolkit-for-aws/plugins/aws-core/skills/aws-secrets-manager .claude/skills/aws-secrets-manager
This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:
{
"permissions": {
"deny": [
"Read(./.env)",
"Read(**/.env)",
"Read(~/.ssh/**)",
"Bash(rm -rf *)",
"Read(**/*.pem)",
"Bash(rm -rf /)",
"Bash(git push --force:*)",
"Bash(sudo *)",
"Read(.env)",
"Bash(rm -rf /*)",
"Read(./.env.*)",
"Read(~/.aws/**)",
"Bash(git push --force*)",
"Bash(rm -rf:*)",
"Read(**/*.key)",
"Read(**/.env.*)",
"Bash(sudo:*)",
"Bash(git reset --hard*)",
"Bash(git reset --hard:*)",
"Read(.env.*)"
],
"ask": [
"Bash(git push:*)",
"Bash(git push *)",
"Bash(git commit:*)",
"Bash(rm *)",
"Bash(rm:*)",
"Bash(git rebase *)",
"Bash(wget *)",
"Bash(npm publish:*)",
"Bash(git commit *)",
"Bash(gh pr merge *)"
]
}
} MCP servers (3)
| server | source | est. tokens |
|---|---|---|
| aws-devops-agent | local / custom · remote | 2.5k |
| knowledge-mcp.global.api.aws · "awsknowledge" | remote · remote | 2.5k |
| mcp-proxy-for-aws-cli · "aws-mcp" | pypi | 2.5k |
Skills (71)
analyzing-release-readinesschatting-with-aws-devops-agentcoordinating-multi-space-devops-agentdiff-scanning-with-aws-security-agentinvestigating-incidents-with-aws-devops-agentpentesting-with-aws-security-agentremediating-with-aws-security-agentrunning-release-testsscanning-with-aws-security-agentsetup-devops-agentsetup-security-agentsetupthreat-modeling-with-aws-security-agentagents-buildagents-connectagents-debugagents-deployagents-get-startedagents-hardenagents-optimizeagents-payamazon-bedrockaws-ai-mlaws-authaws-billing-and-cost-managementaws-blocksaws-cdkaws-cloudformationaws-computeaws-containersaws-databaseaws-deploymentaws-iamaws-messaging-and-streamingaws-networkingaws-observabilityaws-sdk-js-v3-usageaws-sdk-python-usageaws-sdk-swift-usageaws-secrets-manageraws-securityaws-serverlessaws-storageaws-well-architected-reviewlaunch-with-awssigning-in-to-awsamazon-opensearch-serviceauthoring-mwaa-workflowconnecting-to-data-sourcecreating-data-lake-tabledebugging-mwaa-workflowexploring-data-catalogfinding-data-lake-assetsingesting-into-data-lakequerying-data-lakeredshift-guidestoring-and-querying-vectorstesting-mwaa-workflowupgrading-mwaa-environmentsagent-advisorarchitect-for-startupsazure-to-awscontextual-offers-for-startupsgcp-to-awsheroku-to-awsknowledge-base-for-startupsllm-to-bedrockoperate-on-awsprompt-library-for-startupsstart-building-for-startupstf-best-practices
Similar rigs
nizos/tdd-guard
Automated TDD enforcement for Claude Code
Minimalist 1.3k tok ·
terranc/claude-telegram-bot-bridge
A lightweight Telegram bot that bridges Claude Code to any local folder, with autostart support for remote mobile development.
Minimalist 2.1k tok ·
stefanoginella/aicontainer
Sandboxed devcontainer for running Claude Code, Codex, and OpenCode in bypass / auto-approve mode.
Pragmatist 13.0k tok ·
MrTig-afk/claude-remote
Claude Code on your PC, started from your phone, with your full setup intact.
Pragmatist 2.8k tok ·