VendorAWS
Connects overhttp

Our grade: 4 checks

Login No authentication
Upkeep Active · 2026-09
Known bugs 0 open
Connection http

Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.

Community rating

3.6 12 reviews
8% would trust it in production
  • 5 1
  • 4 6
  • 3 4
  • 2 1
  • 1 0

Trust in production

  • Trust it - 8%
  • With caveats - 75%
  • Wouldn't - 17%

83% would recommend this server

How reviewers scored it

  • Setup & docs 3.2
  • Auth experience 3.0
  • Reliability 3.4
  • Maintainer responsiveness 4.1

Why it got a C

A separate server from the AWS MCP Server. This one only reads public AWS content: docs, API references, What's New posts, CDK and CloudFormation guides, regional availability and agent skills. It can't touch your AWS account. AWS hosts it over HTTPS with rate limits, and no advisories are on record for it. Skills it returns are step-by-step instructions your agent may follow, so review them before acting. Biggest deduction: there's no authentication, and the repo holds only a README, so the server code is closed source.

How to connect

// claude_desktop_config.json (README's fastmcp stdio-to-HTTP proxy, for clients without remote HTTP)
{
  "mcpServers": {
    "aws-knowledge-mcp-server": {
      "command": "uvx",
      "args": ["fastmcp", "run", "https://knowledge-mcp.global.api.aws"]
    }
  }
}

Is AWS Knowledge MCP Server safe?

Is AWS Knowledge MCP Server safe to use?

AWS Knowledge MCP Server grades C (usable with care). There is no login: anything that can start or reach it gets its full access. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.

Does AWS Knowledge MCP Server have known vulnerabilities?

Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.

Does AWS Knowledge MCP Server support authentication?

No. It has no login of its own, so limit who and what can start it.

Embed this badge

Maintain this server? Add the grade to your README.

TrustedMCP grade C

Markdown

[![TrustedMCP grade C](https://trustedmcp.io/badge/aws-knowledge-mcp.svg)](https://trustedmcp.io/servers/aws-knowledge-mcp)

HTML

<a href="https://trustedmcp.io/servers/aws-knowledge-mcp"><img src="https://trustedmcp.io/badge/aws-knowledge-mcp.svg" alt="TrustedMCP grade C" height="80"></a>

Community reviews

Mei Lin Developer advocate
Would not trust in production

Useful, with a few rough edges

Some tools are great, a couple feel half finished. Turned on read-only mode on day one, highly recommend doing the same. For anything real I would look elsewhere.

Used for Summarising meeting notes

  • Setup & docs 2/5
  • Auth experience 2/5
  • Reliability 3/5
  • Maintainer responsiveness 5/5
Noah Fischer Software engineer, agency
Trusts with caveats Recommends

Does what it says, no drama

Been running this for about a month now. No access control at all, it runs with my permissions. Fine on my laptop, not on a shared box. Hosted endpoint means no local process to babysit. Being closed source, I cannot audit it, but the vendor has been responsive. Fine in production if you sandbox it.

Used for Keeping a team knowledge base tidy

  • Setup & docs 3/5
  • Auth experience 3/5
  • Reliability 4/5
  • Maintainer responsiveness 4/5
Aditi Rao Staff engineer
Trusts with caveats Recommends

Clean integration, sensible permissions

Replaced a homegrown script with AWS Knowledge MCP Server and have not looked back. There is no auth layer, so whatever can reach it can use it. I keep it local only. Nothing to install, I just point the client at the URL.

Used for Drafting docs from existing pages

  • Setup & docs 3/5
  • Auth experience 3/5
  • Reliability 4/5
  • Maintainer responsiveness 4/5
Raj Malhotra Platform engineer
Would not trust in production

Security story needs work

I wanted to like this one. There is no auth layer, so whatever can reach it can use it. I keep it local only. Read-only mode is the first thing I enable, and it covers most of what I need. Not something I would put in production yet.

Used for Pulling up-to-date library docs into prompts

  • Setup & docs 2/5
  • Auth experience 2/5
  • Reliability 2/5
  • Maintainer responsiveness 3/5
Anna Virtanen CTO, early-stage startup
Trusts with caveats Recommends

Mixed feelings after two weeks

Good for experimenting, still deciding about production. I would prefer to read the code, but the hosted service has been dependable. There is no auth layer, so whatever can reach it can use it. I keep it local only. Keep permissions tight and it is a good tool.

Used for Finding the right runbook during incidents

  • Setup & docs 3/5
  • Auth experience 4/5
  • Reliability 3/5
  • Maintainer responsiveness 3/5
Amara Okeke Senior developer
Trusts with caveats Recommends

Decent, not set-and-forget

Works well enough for what I need. Nothing stops a misbehaving agent from using every tool it exposes, so I trimmed the tool list. I would use it in prod, but only with a human approving writes.

Used for Keeping a team knowledge base tidy

  • Setup & docs 3/5
  • Auth experience 3/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Fatima Zahra Solo founder
Trusts with caveats Recommends

Surprisingly polished

Set this up for our team after comparing a few options. Updates land regularly, and nothing broke when I upgraded. No access control at all, it runs with my permissions. Fine on my laptop, not on a shared box. Worth it, just do not skip the hardening steps.

Used for Pulling up-to-date library docs into prompts

  • Setup & docs 4/5
  • Auth experience 3/5
  • Reliability 5/5
  • Maintainer responsiveness 4/5
Chloe Martin ML engineer
Trusts with caveats Recommends

No complaints after a month

Of the AWS Knowledge integrations I tried, this one is the most predictable. Read-only mode is the first thing I enable, and it covers most of what I need. There is no auth layer, so whatever can reach it can use it. I keep it local only.

Used for Onboarding Q&A for new hires

  • Setup & docs 5/5
  • Auth experience 3/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Diego Fernandez Backend engineer
Trusts in production Recommends

Better than the DIY script it replaced

Hooked AWS Knowledge MCP Server into Claude Code and it worked on the first try. Nothing stops a misbehaving agent from using every tool it exposes, so I trimmed the tool list. Would recommend without hesitation.

Used for Finding the right runbook during incidents

  • Setup & docs 3/5
  • Auth experience 3/5
  • Reliability 3/5
  • Maintainer responsiveness 5/5
Hugo Lefevre Freelance developer
Trusts with caveats Recommends

Set it up once, forgot about it

Tried it on a side project first, then rolled it out at work. Nothing to install, I just point the client at the URL. Keep permissions tight and it is a good tool.

Used for Answering questions from our internal wiki

  • Setup & docs 3/5
  • Auth experience 4/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Daniel Kim Full-stack developer
Trusts with caveats Recommends

Works, just lock it down

Mostly reliable, with the odd timeout. Being closed source, I cannot audit it, but the vendor has been responsive. No access control at all, it runs with my permissions. Fine on my laptop, not on a shared box.

Used for Answering questions from our internal wiki

  • Setup & docs 3/5
  • Auth experience 4/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Ben Carter Developer, healthtech
Trusts with caveats Recommends

Quietly reliable

Started with it as an experiment, now it is a fixture. Hosted endpoint means no local process to babysit. Filed an issue and got a reply within two days. I would prefer to read the code, but the hosted service has been dependable. Recommended, with sensible guardrails.

Used for Summarising meeting notes

  • Setup & docs 4/5
  • Auth experience 2/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5

Write a review

Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.

How was it overall?

Would you trust it in production?
Would you recommend it to another team?

Score the details

Setup & docs
Auth experience
Reliability
Maintainer responsiveness

Tell other teams how it went

About you