mcpField
A
Aws Service Authorization Reference

Aws Service Authorization Reference

Local
github.com/psantusCloud & Infra6Updated 78w ago
Repository

About Aws Service Authorization Reference

An MCP server providing AWS Service Authorization Reference data for models and developers who need to inspect IAM authorization details. It can look up actions, resources, condition keys, and per-entry authorization information by service.

Key features

  1. 01List documented service codes
  2. 02Count actions, resources, and condition keys
  3. 03Look up a service's IAM actions
  4. 04Look up resources and condition keys
  5. 05Retrieve individual authorization details

Use cases

  1. 01Check IAM actions for an AWS service
  2. 02Find resources and condition keys required by an action

MCP support

Exposes tools for querying AWS Service Authorization Reference data to MCP clients, including service codes, IAM actions, resources, condition keys, and individual authorization details.

#aws#service-authorization#mcp-server

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "aws-service-authorization-reference": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "psantus86/aws-service-authorization-reference-mcp-server:latest"
      ]
    }
  }
}
Run commanddocker run -i --rm psantus86/aws-service-authorization-reference-mcp-server:latest

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
ocipsantus86/aws-service-authorization-reference-mcp-server:latest

Tools

No tool list yet

Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.

Details

From the project README

AWS Service Reference Information MCP Server

A Model Context Protocol server providing access to AWS Service Reference Information. This server enables LLMs to retrieve IAM actions, resources and conditions keys.

Blog posts!

Here is a series of blog posts introducing this tool:

What is AWS Service Authorization Reference?

AWS Service Authorization Reference is a piece of documentation available here where AWS gives exhaustive reference data on all IAM Actions, Resources and Condition Keys, grouping information that was otherwise scattered across multiple service documentations.

In 2024, AWS added programmatic support to access this data.

Since March 13, 2025, Service Reference Information includes Resources and Condition Keys.

Available Tools
  • service_codes - Lists all service codes for which we have documentation available
  • service_stats - Tells how many Actions, Resources and Condition Keys are documented.
    • service (string, required): the code of the service
  • service_actions - A comma-separeted list of all actions for a service
    • service (string, required): the code of the service
  • service_resources - A comma-separeted list of all resources for a service
    • service (string, required): the code of the service
  • service_condition_keys - A comma-separeted list of all conditions keys for a service
    • service (string, required): the code of the service
  • service_action_information - Retrieve the authorization reference data (resources and condition keys) for a single AWS service action
    • service (string, required): the code of the service
    • action (string, required): the code of the action
  • service_resource_information - Retrieve the authorization reference data (resources and condition keys) for a single AWS service action
    • service (string, required): the code of the service
    • resource (string, required): the code of the action
  • service_condition_key_information - Retrieve the authorization reference data (resources and condition keys) for a single AWS service action
    • service (string, required): the code of the service
    • condition_key (string, required): the code of the action

Installation

Using uv

With uv no specific installation is needed. Run uv build then uv run main.py.

Configuration

Configure for Claude.app

Add to your Claude settings:

Using uv 
"mcpServers": {
  "aws-service-authorization-reference": {
    "command": "uv",
    "args": [
      "--directory",
      "/root/to/folder/aws-service-authorization-reference",
      "run",
      "main.py"
    ]
  }
}
Using docker 
"mcpServers": {
  "aws-service-authorization-reference": {
    "command": "docker",
    "args": ["run", "-i", "--rm", "psantus86/aws-service-authorization-reference-mcp-server:latest"]
  }
}

Debugging

You can use the MCP inspector to debug the server. For uv installations:

npx @modelcontextprotocol/inspector \                            
  uv \
  --directory /Root/to/folder/aws-service-authorization-reference \
  run \
  main.py

License

aws-service-authorization-reference MCP Server is licensed under the MIT License. This means you are free to use, modify, and distribute the software, subject to the terms and conditions of the MIT License. For more details, please see the LICENSE file in the project repository.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.