A multi-profile proxy for the AWS MCP Server: opens one SigV4-signed connection per AWS profile and adds a profile argument to every tool, so a single client connection can reach multiple AWS accounts
A multi-profile proxy for the AWS MCP Server.
The AWS MCP Server authenticates each request with SigV4, so one connection carries one AWS identity. awsmcproxy opens a connection per AWS profile, mirrors the server's tools, and adds a profile argument to each tool. When a tool is called, the proxy signs the request with that profile's credentials.
There is nothing to configure. Profiles come from ~/.aws/config and ~/.aws/credentials, and a listprofiles tool tells the agent which names it can use.
It speaks the streamable HTTP transport and signs requests itself, so mcp-proxy-for-aws and uvx are not needed.
AWS credentials reachable through the standard credential chain: aws login, aws sso login, assumed roles, credentialprocess and static keys all work.
The endpoint is a full URL, not a region, so it also reaches https://aws-mcp.eu-central-1.api.aws/mcp or a Bedrock AgentCore gateway. The SigV4 service and region are inferred from its hostname.
--sso-role replaces ssorolename for every profile, keeping each profile's own ssoaccountid and SSO session:
This is the way to stop an agent writing to AWS. Hiding write-capable tools would not be a boundary; a role that lacks the permissions is one.
The SSO access token is per session, not per role, so the role is swapped without logging in again. A role that is not assigned to you in that account fails when the credentials are first used, not at startup.
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/winebarrel--awsmcproxy.html)
MCP server that lets your AI assistant read and write Figma in real time — no API token, no rate limits. Works with Claude, Cursor, Copilot, Codex and any MCP client.
JoseJimenez-M/cortex-mcpSelf-hosted MCP server that lets Claude, ChatGPT, Meta Muse and any MCP client read and write one Markdown vault (Obsidian-compatible). Go, OAuth 2.1 with passkeys, no shell, no hard deletes.
magna-nz/tallybookPrices your Claude Code and Codex sessions from the transcripts on disk, shows what each agent cost over any period, and tells you in plain English what would have been cheaper. CLI, Browser UI and MC
Smitner-Studio/facetRender agent-written Markdown as a live local page, and send the human's click back to the agent as typed data. Human-in-the-loop approval gates for coding agents.
gburgyan/aatModel your API as a graph once. Long-chain integration tests, layer × environment matrices, CI-ready runs, and an MCP server — all from the same YAML.
Shalimov04/mcp-airlockStateless governance proxy for MCP (2026-07-28): policy, dry-run, human confirmation, audit, tracing
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.