A multi-profile proxy for the AWS MCP Server: opens one SigV4-signed connection per AWS profile and adds a profile argument to every tool, so a single client connection can reach multiple AWS accounts
A multi-profile proxy for the AWS MCP Server.
The AWS MCP Server authenticates each request with SigV4, so one connection carries one AWS identity. awsmcproxy opens a connection per AWS profile, mirrors the server's tools, and adds a profile argument to each tool. When a tool is called, the proxy signs the request with that profile's credentials.
There is nothing to configure. Profiles come from ~/.aws/config and ~/.aws/credentials, and a listprofiles tool tells the agent which names it can use.
It speaks the streamable HTTP transport and signs requests itself, so mcp-proxy-for-aws and uvx are not needed.
AWS credentials reachable through the standard credential chain: aws login, aws sso login, assumed roles, credentialprocess and static keys all work.
The endpoint is a full URL, not a region, so it also reaches https://aws-mcp.eu-central-1.api.aws/mcp or a Bedrock AgentCore gateway. The SigV4 service and region are inferred from its hostname.
--sso-role replaces ssorolename for every profile, keeping each profile's own ssoaccountid and SSO session:
This is the way to stop an agent writing to AWS. Hiding write-capable tools would not be a boundary; a role that lacks the permissions is one.
The SSO access token is per session, not per role, so the role is swapped without logging in again. A role that is not assigned to you in that account fails when the credentials are first used, not at startup.
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/winebarrel--awsmcproxy.html)
MCP server that lets your AI assistant read and write Figma in real time — no API token, no rate limits. Works with Claude, Cursor, Copilot, Codex and any MCP client.
Smitner-Studio/facetRender agent-written Markdown as a live local page, and send the human's click back to the agent as typed data. Human-in-the-loop approval gates for coding agents.
farshadmomo/lan-directSkill + browser MCP for Claude Code and Codex: your app and browser reach domestic services over the real ISP while the agent stays on the VPN. Per-socket binding, per-host routing, no admin, nothing
vshulcz/deja-vuYour agents already solved this. deja finds it — retroactive search and MCP recall over the session logs your coding agents already wrote. Cross-agent, SSH-portable, one zero-dep binary, fully local.
Role1776/mcp-retrievalFast, idiomatic Go MCP server for web search, image search, and page scraping to Markdown. Runs locally, no API keys, free.
Naveen-chava/metabase-mcpMetabase MCP server for AI Agents. Authenticate with a browser session cookie, no API key required.
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.