aws/agent-toolkit-for-aws

Official, AWS-supported MCP servers, skills, and plugins to help AI agents build on AWS

About the project

Agent Toolkit for AWS is a collection of AWS-supported MCP servers, skills, plugins, commands, and hooks that help AI coding agents build, deploy, and manage applications on AWS. It is used by developers working with AWS services through agents such as Claude Code, Codex, Cursor, and Kiro. The catalogue entries are the toolkit's own agent extensions for AWS development and operations.

2.9kStars on the repository
173Mods indexed here, across every type
yesterdayLast push, which is what freshness is scored on
Apache-2.0Licence, which decides whether bodies are shown

aws-cleanrooms

01

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Troubleshoots and debugs AWS Clean Rooms collaboration issues related to IAM roles, S3 bucket policies, KMS keys, Lake Formation permissions, and CloudWatch logging for custom ML model training and inference jobs. Use when a customer reports permission failures, access errors, or log publishing issues in Clean Rooms.

not rated 2.9k +58 yesterday A Socket: passSnyk: passSkillSpector: pass 66 tokens original Apache-2.0

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Operates Amazon Kinesis Data Streams (KDS). Covers streaming tables and Amazon S3 delivery - serverless, fully managed delivery from a KDS stream to Apache Iceberg tables on S3 Tables or to general-purpose S3 buckets. Includes channel setup, IAM, schemas, output key templates, CloudWatch metrics and alarms, DLQ…

not rated 2.9k +58 yesterday A Socket: passSnyk: passSkillSpector: pass 210 tokens original Apache-2.0

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Guides an end-to-end data-warehouse migration to Amazon Redshift — discovery, schema/SQL/stored-procedure/macro/script conversion, data migration, validation, performance comparison, and reporting. Source-routed via references/ /; Teradata (Vantage) is the supported source; additional sources are added as their own…

not rated 2.9k +58 yesterday A Socket: passSnyk: passSkillSpector: warn 212 tokens original Apache-2.0

amazon-aurora-mysql

04

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Amazon Aurora MySQL — creates, modifies, and advises on Aurora MySQL clusters specifically (MySQL-compatible engine, Aurora serverless, parallel query). Trigger for Aurora MySQL cluster operations, ACU sizing, I/O-Optimized storage, commitment pricing, or MySQL upgrade planning. Aurora MySQL uses full (VPC-based)…

not rated 2.9k +58 yesterday A Socket: passSnyk: warnSkillSpector: warn 109 tokens original Apache-2.0

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Amazon Aurora PostgreSQL — creates, modifies, and advises on Aurora PostgreSQL clusters specifically (PostgreSQL-compatible engine, Aurora serverless, express configuration, pgvector, Babelfish). Trigger for Aurora PostgreSQL cluster operations, express-configuration quick-start, ACU sizing, I/O-Optimized storage…

not rated 2.9k +58 yesterday A Socket: passSnyk: pass 109 tokens copy · 86% Apache-2.0

amazon-documentdb

06

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Manages Amazon DocumentDB end-to-end — serverless-on-8.0 cluster setup, TLS/VPC/driver config, flexible-schema and vector-search data modeling, MongoDB compatibility assessment, DMS-based migration, slow-query diagnosis, major version upgrades (4.0->5.0->8.0), Well-Architected reviews (41-check wareview.py), cost…

not rated 2.9k +58 yesterday A Socket: passSnyk: warnSkillSpector: warn 210 tokens original Apache-2.0

amazon-dynamodb

07

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Designs, reviews, and debugs DynamoDB data layers from design axioms — enumerates access patterns, chooses partition/sort keys and GSIs, decides single-table vs. multi-table, configures Streams, Global Tables, TTL, vector indexes for similarity search, and zero-ETL integrations to OpenSearch/Redshift/SageMaker…

not rated 2.9k +58 yesterday B Socket: passSnyk: passSkillSpector: warn 204 tokens original Apache-2.0

amazon-elasticache

08

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Activate when developers have latent caching needs: slow API responses, database read bottlenecks, DynamoDB throttling or cost, RDS/Aurora scaling pressure, Bedrock latency or cost, or adding a cache; activate when working with Redis, Valkey, Memcached, or any in-memory data store, cache-aside patterns, session…

not rated 2.9k +58 yesterday A Socket: passSnyk: passSkillSpector: warn 222 tokens original Apache-2.0

amazon-keyspaces

09

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Provides authoritative compatibility checks, pricing estimates, connection troubleshooting, pre-warming guidance, and infrastructure mutations for Amazon Keyspaces (for Apache Cassandra). Covers LWT/batch operations, secondary indexes, materialized views, capacity modes, TTL, PITR, CDC, auto-scaling, multi-region…

not rated 2.9k +58 yesterday A Socket: passSnyk: passSkillSpector: warn 106 tokens original Apache-2.0

aurora-dsql

10

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Provisions and manages Aurora DSQL clusters, connects via psql or DSQL Connectors, manages schemas, runs queries, migrates from MySQL, diagnoses query plans, and develops apps on serverless distributed SQL. Covers IAM auth, multi-tenant patterns, MySQL-to-DSQL migration, DDL, query plans, and SAFE SQL CONSTRUCTION …

not rated 2.9k +58 yesterday A Socket: passSnyk: warnSkillSpector: pass 192 tokens original Apache-2.0

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Creates a complete Amazon Aurora database cluster with instances, handling cluster creation, instance provisioning, and Secrets Manager password management in the proper sequence. Use when setting up new Aurora MySQL or PostgreSQL clusters with production-ready configuration.

not rated 2.9k +58 yesterday A Socket: passSnyk: passSkillSpector: pass 57 tokens original Apache-2.0

exporting-rds-to-s3

12

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Exports Amazon RDS or Aurora database snapshots to Amazon S3 in Apache Parquet format for analytics, backup, or data migration. Handles snapshot selection or creation, IAM role setup, KMS encryption, S3 bucket preparation, export task execution, progress monitoring, and data verification. Use when exporting RDS/Aurora…

not rated 2.9k +58 yesterday A Socket: passSnyk: passSkillSpector: pass 87 tokens original Apache-2.0

rds-db2

13

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Provisions, connects, migrates, and operates Amazon RDS for Db2. Applies when provisioning with IBM customer and site IDs (License Manager, BYOL, GovCloud), connecting over TLS, fixing SQL30082N after Secrets Manager rotation, migration from Db2 LUW (Linux, AIX, Windows, AS400) or z/OS mainframe (ADB2GEN, Q…

not rated 2.9k +58 yesterday B Socket: passSnyk: warnSkillSpector: warn 149 tokens original Apache-2.0

rds-oracle

14

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Diagnoses and resolves Amazon RDS for Oracle connectivity, authentication, networking, and driver troubleshooting. Applicable to any RDS-for-Oracle question including connecting a Python Lambda to RDS Oracle in a VPC with pooling and cold-start optimization, EKS pods to RDS Oracle via the Secrets Manager CSI driver…

not rated 2.9k +58 yesterday A Socket: passSnyk: warnSkillSpector: pass 211 tokens original Apache-2.0

rds-oss

15

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Advises on Amazon RDS open-source engines (MySQL, MariaDB, PostgreSQL) for instance creation, upgrade planning, commitment pricing, proxy evaluation, and Blue/Green deployments. Handles any RDS MySQL, MariaDB, or PostgreSQL question, including create a production-ready RDS MySQL instance, provision an RDS PostgreSQL…

not rated 2.9k +58 yesterday A Socket: passSnyk: passSkillSpector: warn 229 tokens original Apache-2.0

rds-sqlserver

16

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Provides connectivity, authentication, and troubleshooting guidance for Amazon RDS for SQL Server. Applicable when users ask about SSMS times out connecting from EC2, Cannot generate SSPI context with Windows auth, connect RDS SQL Server from Lambda with pymssql, authscheme shows NTLM instead of KERBEROS on ECS…

not rated 2.9k +58 yesterday A Socket: passSnyk: passSkillSpector: pass 205 tokens original Apache-2.0

timestream-influxdb

17

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Retrieves authoritative guidance on Amazon Timestream for InfluxDB across its supported engine variants. Applicable to any InfluxDB-on-AWS request including engine variant and licensing selection, provisioning and IAM, encryption at rest (AWS-owned and customer-managed KMS keys, key policies, and key lifecycle)…

not rated 2.9k +58 changed 17d ago A Socket: passSnyk: warnSkillSpector: warn 109 tokens original Apache-2.0

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Creates and automates custom image builds with EC2 Image Builder - Linux, Windows, and macOS AMIs, and container images to ECR. Covers the build IAM role, Amazon-managed and custom components, image recipes, infrastructure and distribution configuration (launch templates, SSM parameters, other Regions), one-off…

not rated 2.9k +58 yesterday A Socket: passSnyk: passSkillSpector: pass 142 tokens original Apache-2.0

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Launches an EC2 instance with secure, cost-efficient defaults including AMI selection, burstable instance sizing, least-privilege IAM roles, hardened security groups, encrypted EBS volumes, and comprehensive tagging. Use when deploying new EC2 instances following AWS best practices for security and cost optimization.

not rated 2.9k +58 yesterday A Socket: passSnyk: passSkillSpector: pass 71 tokens original Apache-2.0

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Configures EC2 instances to securely call AWS services by creating and attaching IAM roles via instance profiles, eliminating hardcoded credentials. Use when an EC2 instance needs permissions to access AWS services like S3, DynamoDB, SQS, or CloudWatch through temporary credentials.

not rated 2.9k +58 yesterday C Socket: passSnyk: passSkillSpector: warn 63 tokens original Apache-2.0

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Connects AI agents to remote Windows desktop applications on Amazon WorkSpaces Applications (AppStream 2.0) through the managed Agent Access MCP server, and guides reliable desktop automation. Covers connecting an agent to the MCP endpoint (SigV4, streaming URL, and Active Directory SAML/Domain Join), BLOCKING vs…

not rated 2.9k +58 yesterday A Socket: passSnyk: passSkillSpector: pass 197 tokens original Apache-2.0

amazon-ses

22

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Guides Amazon SES onboarding for domain-based email sending. Covers identity configuration, production access, an optional first test send, and troubleshooting setup, authentication, or sending failures. Use when setting up SES, resuming incomplete onboarding, or leaving the sandbox. Does not cover inbound email or…

not rated 2.9k +58 changed 1mo ago A Socket: passSnyk: passSkillSpector: pass 79 tokens original Apache-2.0

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Manages WhatsApp messaging through AWS End User Messaging Social. Covers managing templates (create, update, delete, library), sending messages (utility/marketing/auth templates and freeform), uploading and managing media, configuring event destinations for delivery tracking, and troubleshooting delivery failures.…

not rated 2.9k +58 yesterday A Socket: passSnyk: passSkillSpector: warn 86 tokens original Apache-2.0

aws/agent-toolkit-for-aws

Skill Claude CodeCodex

Handles the full DMS Schema Conversion lifecycle including creating migration projects, converting database schemas to a target engine, running compatibility assessments, navigating metadata trees, exporting converted DDL to S3, applying schema changes to a target database, and converting SQL statements between…

not rated 2.9k +58 yesterday A Socket: passSnyk: warnSkillSpector: warn 74 tokens original Apache-2.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: