AWS CLI MCP Server

Gives Claude direct access to the AWS CLI through four tools: execute arbitrary AWS commands with shell-safe parsing, suggest commands from natural language, list regions, and check caller identity. Built with subprocess isolation instead of shell expansion, so it won't run piped commands or redirects. The call_aws tool can modify resources using whatever credentials your AWS profile provides, so you'll want to scope it to a limited IAM role and keep it on manual approval. Good fit when you need Claude to inspect infrastructure, fetch logs, or run read-heavy AWS operations without switching to the console. Logs go to stderr and a local file to keep stdout clean for MCP protocol messages.