Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 1
- 4 6
- 3 4
- 2 1
- 1 0
Trust in production
- Trust it - 8%
- With caveats - 75%
- Wouldn't - 17%
83% would recommend this server
How reviewers scored it
- Setup & docs 3.2
- Auth experience 3.0
- Reliability 3.4
- Maintainer responsiveness 4.1
Why it got a C
A separate server from the AWS MCP Server. This one only reads public AWS content: docs, API references, What's New posts, CDK and CloudFormation guides, regional availability and agent skills. It can't touch your AWS account. AWS hosts it over HTTPS with rate limits, and no advisories are on record for it. Skills it returns are step-by-step instructions your agent may follow, so review them before acting. Biggest deduction: there's no authentication, and the repo holds only a README, so the server code is closed source.
How to connect
// claude_desktop_config.json (README's fastmcp stdio-to-HTTP proxy, for clients without remote HTTP)
{
"mcpServers": {
"aws-knowledge-mcp-server": {
"command": "uvx",
"args": ["fastmcp", "run", "https://knowledge-mcp.global.api.aws"]
}
}
}
Is AWS Knowledge MCP Server safe?
Is AWS Knowledge MCP Server safe to use?
AWS Knowledge MCP Server grades C (usable with care). There is no login: anything that can start or reach it gets its full access. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.
Does AWS Knowledge MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does AWS Knowledge MCP Server support authentication?
No. It has no login of its own, so limit who and what can start it.
Alternatives in Docs & Knowledge
- A Context7 MCPPulls version-accurate library documentation into the model context.
- B Stack Overflow MCP ServerOfficial hosted Stack Overflow server (beta) to search questions and answers.
- B Zotero MCP (zotero-mcp-server)A community MCP server for your Zotero library, run locally from PyPI, to search, read and annotate papers, add items by DOI or BibTeX, and manage collections and tags.
- C AIOS Public Discovery MCP ServerHosted server that checks the status, recent changes and source evidence of five monitored GOV.UK employment guidance topics, including minimum wage and statutory sick pay.
- C Connect Pro for Obsidian (Smart Plugins)Paid Smart Plugins add-on that serves your open Obsidian vault to ChatGPT (Remote MCP) or to desktop AI apps on the same computer (Local MCP), to read notes, run semantic lookups and propose edits you approve in an Inbox.
Community reviews
Useful, with a few rough edges
Some tools are great, a couple feel half finished. Turned on read-only mode on day one, highly recommend doing the same. For anything real I would look elsewhere.
Used for Summarising meeting notes
- Setup & docs 2/5
- Auth experience 2/5
- Reliability 3/5
- Maintainer responsiveness 5/5
Does what it says, no drama
Been running this for about a month now. No access control at all, it runs with my permissions. Fine on my laptop, not on a shared box. Hosted endpoint means no local process to babysit. Being closed source, I cannot audit it, but the vendor has been responsive. Fine in production if you sandbox it.
Used for Keeping a team knowledge base tidy
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Clean integration, sensible permissions
Replaced a homegrown script with AWS Knowledge MCP Server and have not looked back. There is no auth layer, so whatever can reach it can use it. I keep it local only. Nothing to install, I just point the client at the URL.
Used for Drafting docs from existing pages
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Security story needs work
I wanted to like this one. There is no auth layer, so whatever can reach it can use it. I keep it local only. Read-only mode is the first thing I enable, and it covers most of what I need. Not something I would put in production yet.
Used for Pulling up-to-date library docs into prompts
- Setup & docs 2/5
- Auth experience 2/5
- Reliability 2/5
- Maintainer responsiveness 3/5
Mixed feelings after two weeks
Good for experimenting, still deciding about production. I would prefer to read the code, but the hosted service has been dependable. There is no auth layer, so whatever can reach it can use it. I keep it local only. Keep permissions tight and it is a good tool.
Used for Finding the right runbook during incidents
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Decent, not set-and-forget
Works well enough for what I need. Nothing stops a misbehaving agent from using every tool it exposes, so I trimmed the tool list. I would use it in prod, but only with a human approving writes.
Used for Keeping a team knowledge base tidy
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Surprisingly polished
Set this up for our team after comparing a few options. Updates land regularly, and nothing broke when I upgraded. No access control at all, it runs with my permissions. Fine on my laptop, not on a shared box. Worth it, just do not skip the hardening steps.
Used for Pulling up-to-date library docs into prompts
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 4/5
No complaints after a month
Of the AWS Knowledge integrations I tried, this one is the most predictable. Read-only mode is the first thing I enable, and it covers most of what I need. There is no auth layer, so whatever can reach it can use it. I keep it local only.
Used for Onboarding Q&A for new hires
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Better than the DIY script it replaced
Hooked AWS Knowledge MCP Server into Claude Code and it worked on the first try. Nothing stops a misbehaving agent from using every tool it exposes, so I trimmed the tool list. Would recommend without hesitation.
Used for Finding the right runbook during incidents
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 5/5
Set it up once, forgot about it
Tried it on a side project first, then rolled it out at work. Nothing to install, I just point the client at the URL. Keep permissions tight and it is a good tool.
Used for Answering questions from our internal wiki
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Works, just lock it down
Mostly reliable, with the odd timeout. Being closed source, I cannot audit it, but the vendor has been responsive. No access control at all, it runs with my permissions. Fine on my laptop, not on a shared box.
Used for Answering questions from our internal wiki
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Quietly reliable
Started with it as an experiment, now it is a fixture. Hosted endpoint means no local process to babysit. Filed an issue and got a reply within two days. I would prefer to read the code, but the hosted service has been dependable. Recommended, with sensible guardrails.
Used for Summarising meeting notes
- Setup & docs 4/5
- Auth experience 2/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.