Amazon EKS MCP Server
AWS Labs server for Amazon EKS covering cluster creation via CloudFormation, full Kubernetes resource lifecycle, log retrieval, event fetching, and troubleshooting. Read-only and write IAM policies documented separately for scoped credential setup.
“The EKS MCP server does the work of three tools at once. It can spin up a complete EKS cluster including dedicated VPC, networking, and Auto Mode node pools by translating natural-language requests into CloudFormation operations. It can deploy Kubernetes resources from existing YAML or generate manifests on the fly. And it can debug a misbehaving pod by pulling logs and Kubernetes events. AWS provides separate IAM policies for read-only and write operations in the README, which makes scoped deployment realistic. The weakness is breadth: managing a real production cluster involves Helm charts, Argo CD, KEDA, and Karpenter, all of which sit outside this server's scope. Treat it as an EKS bootstrap and triage tool; production cluster management belongs to specialised tooling.”
INSTALL THIS SERVER
{
"mcpServers": {
"awslabs.eks-mcp-server": {
"command": "uvx",
"args": [
"awslabs.eks-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "your-aws-profile",
"AWS_REGION": "us-east-1",
"FASTMCP_LOG_LEVEL": "ERROR"
}
}
}
}
{
"mcpServers": {
"awslabs.eks-mcp-server": {
"command": "uvx",
"args": [
"awslabs.eks-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "your-aws-profile",
"AWS_REGION": "us-east-1",
"FASTMCP_LOG_LEVEL": "ERROR"
}
}
}
}
{
"mcpServers": {
"awslabs.eks-mcp-server": {
"command": "uvx",
"args": [
"awslabs.eks-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "your-aws-profile",
"AWS_REGION": "us-east-1",
"FASTMCP_LOG_LEVEL": "ERROR"
}
}
}
}
{
"mcpServers": {
"awslabs.eks-mcp-server": {
"command": "uvx",
"args": [
"awslabs.eks-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "your-aws-profile",
"AWS_REGION": "us-east-1",
"FASTMCP_LOG_LEVEL": "ERROR"
}
}
}
}
{
"mcpServers": {
"awslabs.eks-mcp-server": {
"command": "uvx",
"args": [
"awslabs.eks-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "your-aws-profile",
"AWS_REGION": "us-east-1",
"FASTMCP_LOG_LEVEL": "ERROR"
}
}
}
}
7 TOOLS AVAILABLE
OUR ASSESSMENT
- Full cluster bootstrap including VPC, subnets, route tables, and EKS Auto Mode node pools via CloudFormation.
- Generates Kubernetes manifests from parameters; applies existing YAML files unchanged.
- Separate IAM policies provided for read-only and write modes; production deployment uses the read-only policy as a baseline.
- Supports both IAM authentication and kubeconfig modes for cluster access.
- Coverage is EKS and core Kubernetes resources only; Helm, Argo CD, KEDA, and Karpenter sit outside scope.
- CloudFormation-based cluster creation locks the shape of the cluster to AWS Labs templates.
- Write operations require broad IAM permissions including IAMFullAccess; teams with stricter IAM boundaries will need custom policy work.
Authentication operates in two modes: IAM (uses the local AWS CLI credential chain) or kubeconfig (uses the local Kubernetes config file). Read operations require a tightly scoped policy covering describe and list verbs across EKS, EC2, CloudWatch, and CloudFormation. Write operations need IAMFullAccess, AmazonVPCFullAccess, AWSCloudFormationFullAccess, and EKS full access; deploy these to a dedicated IAM role and keep developer personal access keys separate.
Teams bootstrapping new EKS clusters or triaging existing ones via natural language. Pairs well with kubectl for deeper operations.
TECHNICAL DETAILS
ADOPTION METRICS
// Reading thisThe 8.9k star count is shared across the awslabs/mcp monorepo. The EKS server is one of the most active subdirectories in the repo.
// Reading thisIn the top 10 cloud MCPs by capability for Kubernetes-on-AWS workflows. Coverage spans cluster bootstrap to pod-level troubleshooting.
SOURCES & VERIFICATION
We don't take any single directory's word for it. Before scoring, we cross-reference 4 public MCP sources, install the server ourselves against the clients we cover, and record when we last re-verified.
The same server, 4 different lenses. We reconcile these signals into our editorial score, which is why our number sometimes diverges from a directory-aggregate star count.
| Source | Their rating | Their star count | Their downloads | Last synced |
|---|---|---|---|---|
| AutomationSwitch This page | 4editorial | 8,894 | — | APR 28, 2026 |
| PulseMCP | — unrated | unavailable | unavailable | APR 28, 2026 |
| Official MCP Registry | — unrated | unavailable | unavailable | APR 28, 2026 |
| Awesome MCP Servers | — unrated | unavailable | unavailable | APR 28, 2026 |
| Smithery | — unrated | unavailable | unavailable | APR 28, 2026 |
// Counts are directory-reported; we don't adjust them. Discrepancies usually come from different snapshot times or star-caching.
OTHER CLOUD MCP SERVERS
AWS API MCP Server
The official AWS Labs catch-all server. Bridges any AWS CLI command to MCP, giving agents universal access to the AWS API surface. Helps the agent select the right CLI command for a task; respects the local AWS credential chain.
Cloudflare MCP
Cloudflare's MCP offering: 14 hosted remote MCP servers segmented by product surface (Workers Bindings, Observability, Radar, Browser Rendering, Logpush, AI Gateway, Audit Logs, DNS Analytics, DEX, CASB, GraphQL, Docs, Container, Builds) plus a Code Mode server for broader API access. All authenticate via OAuth.
Amazon ECS MCP Server
Vendor-built ECS MCP server covering the full container deployment lifecycle: containerize, push to ECR, deploy via ECS Express Mode with ALB, troubleshoot. Notable for ALLOW_WRITE and ALLOW_SENSITIVE_DATA environment flags that make read-only mode a configuration default.
Vercel
Deployment layer for managing Vercel projects, deployments, environment variables, and domains. Deploy, promote, rollback, and inspect from your agent context.
DISCUSS YOUR
MCP REQUIREMENTS.
Evaluating a server, scoping an internal deployment, or working out whether MCP is the right fit at all. Start the conversation and we will point you at the right piece of the ecosystem.