AWS IAM MCP
Official AWS Labs MCP for IAM administration: users, roles, groups, policies, inline policies, access keys, and policy simulation. Read-only mode supported via --allow-write opt-in pattern. Apache-2.0 within awslabs/mcp monorepo.
“Official AWS Labs MCP for IAM administration: users, roles, groups, policies, inline policies, access keys, and policy simulation. Read-only mode is supported via the --allow-write opt-in pattern. 5 commits on the server path in the last 30 days. Apache-2.0 with AWS Labs official-vendor signal.”
INSTALL THIS SERVER
{
"mcpServers": {
"awslabs.iam-mcp-server": {
"command": "uvx",
"args": [
"awslabs.iam-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "default",
"AWS_REGION": "us-east-1"
}
}
}
}
{
"mcpServers": {
"awslabs.iam-mcp-server": {
"command": "uvx",
"args": [
"awslabs.iam-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "default",
"AWS_REGION": "us-east-1"
}
}
}
}
{
"mcpServers": {
"awslabs.iam-mcp-server": {
"command": "uvx",
"args": [
"awslabs.iam-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "default",
"AWS_REGION": "us-east-1"
}
}
}
}
{
"mcpServers": {
"awslabs.iam-mcp-server": {
"command": "uvx",
"args": [
"awslabs.iam-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "default",
"AWS_REGION": "us-east-1"
}
}
}
}
{
"mcpServers": {
"awslabs.iam-mcp-server": {
"command": "uvx",
"args": [
"awslabs.iam-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "default",
"AWS_REGION": "us-east-1"
}
}
}
}
7 SELECTED TOOLS
OUR ASSESSMENT
The IAM MCP server covers core IAM management for users, roles, groups, and policies. Inline policies have full CRUD support. Permission management covers attach and detach for users and roles. Access keys can be created and deleted. The server includes a policy simulation surface for testing permissions before applying changes. Read-only mode is the default; --allow-write flag opens mutations. Trust policy validation runs JSON validation on role trust policies before submission.
- 5 commits on the server path in the last 30 days.
- Apache-2.0 licence.
- Official AWS Labs maintenance.
- Policy simulation surface for testing permissions before applying.
- Force-delete capability handles users with associated resources.
- Permissions Boundary support for enhanced security guardrails.
- Trust policy validation runs JSON validation before submission.
- Read-only default with explicit --allow-write opt-in.
- IAM mistakes carry blast-radius risk; broad MCP access to mutating IAM operations carries significant operational risk.
- AWS account-level scoping; multi-account IAM administration runs separate MCP instances per account.
- Policy simulation depends on accurate input policies; results reflect the simulated state, distinct from live evaluation.
- 5 commits on the path in the last 30 days, modest cadence.
IAM is the security-critical control plane of an AWS account; MCP access carries the same blast radius. Default to --allow-write off. Run the MCP under a dedicated AWS profile with IAM administration scoped to a least-privilege admin role (avoid root). Use Permissions Boundaries on any roles the MCP creates to enforce that the boundary applies to created principals. For production environments, restrict the MCP to read-only and use it for diagnostic surfaces (who has access, what does this policy grant), then apply changes through a separate, audit-logged path.
AWS shops where IAM administration is part of operator workflows and an MCP entry point would speed up routine queries (who has access to what, what does this policy grant in effect); permission auditing flows that simulate policy effects before applying them; read-only IAM diagnostic agents that surface policy attachments and effective permissions.
TECHNICAL DETAILS
RECORDED ADOPTION METRICS
Saved directory snapshots. Record last checked MAY 1, 2026. The review date above does not refresh these figures.
// Recorded note8,924 stars on the awslabs/mcp parent monorepo. 5 commits on the IAM server path in the last 30 days.
// Recorded noteFourth-ranked in security. Tier 2 cadence; Tier 1 vendor signal.
SOURCES & RECORDED CHECKS
These are the directory listings and check details held in this record. Client compatibility, directory listings and installation testing are separate signals. Recorded client names describe the scope of a check; they do not establish a security assessment or a recurring test schedule.
The same server, 4 different lenses. We reconcile these signals into our editorial score, which is why our number sometimes diverges from a directory-aggregate star count.
| Source | Their rating | Their star count | Their downloads | Last synced |
|---|---|---|---|---|
| AutomationSwitch This page | 4.1editorial | 8,924 | — | MAY 1, 2026 |
| PulseMCP | — unrated | unavailable | unavailable | MAY 1, 2026 |
| MCP.so | — unrated | unavailable | unavailable | MAY 1, 2026 |
| Glama | — unrated | unavailable | unavailable | MAY 1, 2026 |
| Official MCP Registry | — unrated | unavailable | unavailable | MAY 1, 2026 |
// Counts are directory-reported; we don't adjust them. Discrepancies usually come from different snapshot times or star-caching.
OTHER SECURITY MCP SERVERS
Prowler MCP
Cloud Security Posture Management (CSPM) platform with 1000+ security checks across multiple cloud providers and 70+ compliance frameworks, exposed through MCP. Three deployment options: Prowler Cloud (recommended), local stdio, self-hosted HTTP. 13,717 stars, Apache-2.0.
Snyk Agent Scan
Snyk's security scanner for AI agents, MCP servers, and agent skills. Scans MCP server manifests and agent skill files for known security risks. 2,366 GitHub stars and 81 commits on main in the last 30 days.
CrowdStrike Falcon MCP
Official CrowdStrike Falcon MCP server. Connect AI agents to CrowdStrike Falcon for automated security analysis and threat hunting. 148 stars and 8 commits on main in the last 30 days.
HexStrike AI
Advanced MCP server that lets AI agents perform offensive security tasks and red-team workflows. 8,695 GitHub stars and 1 commit on main in the last 30 days.
Auth0 MCP Server
Official Auth0 MCP server connecting Claude, Cursor, Windsurf, VS Code, and Gemini to Auth0 Management APIs. Create apps, deploy Actions, debug logs, and query users with natural-language commands. Read-only mode and tool-glob filtering supported. Beta software per Auth0.
HashiCorp Vault MCP
Official HashiCorp MCP for Vault: secrets, mounts, KV, and PKI management with stdio and Streamable HTTP transports. 9 commits on main in the last 30 days. MPL-2.0 with HashiCorp official-vendor signal.
DISCUSS YOUR
MCP REQUIREMENTS.
Evaluating a server, scoping an internal deployment, or working out whether MCP is the right fit at all. Start the conversation and we will point you at the right piece of the ecosystem.