{ "data": { "a": { "slug": "aws-mcp-servers", "name": "AWS MCP Servers", "vendor": "Amazon Web Services (AWS Labs)", "vendorUrl": "https://aws.amazon.com", "kind": "mcp", "category": "infrastructure", "summary": "AWS MCP servers for documentation, infrastructure, operations and development. Includes local servers and a hosted knowledge server.", "url": "https://www.anchorterminal.com/tools/aws-mcp-servers", "markdownUrl": "https://www.anchorterminal.com/tools/aws-mcp-servers.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/aws-mcp-servers.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/aws-mcp-servers.json", "repo": "https://github.com/awslabs/mcp", "license": "Apache-2.0", "transports": [ "stdio", "streamable-http" ], "remoteUrl": "https://knowledge-mcp.global.api.aws", "packages": [ { "registry": "pypi", "name": "awslabs.aws-documentation-mcp-server" } ], "auth": "mixed", "authNotes": "Local servers use AWS profiles/IAM credentials (CloudTrail-audited). AWS Knowledge MCP Server requires no authentication but is rate-limited and subject to AWS Site Terms. Managed ECS/EKS remote servers exist at https://ecs-mcp.{region}.api.aws/mcp and https://eks-mcp.{region}.api.aws/mcp via the mcp-proxy-for-aws package.", "pricing": "free", "pricingNotes": "Servers are free. AWS API usage behind them is billed normally. Knowledge MCP is free, no account, rate-limited (https://awslabs.github.io/mcp/servers/aws-knowledge-mcp-server/).", "priceSummary": "Free · OSS", "where": "both", "x402": { "level": "no", "evidence": "No x402 support in awslabs/mcp docs (checked 2026-09-25).", "endpoints": [] }, "toolCount": 5, "popularity": { "githubStars": 9600, "npmWeekly": null, "pypiWeekly": 273545, "asOf": "2026-09-26" }, "docsUrl": "https://awslabs.github.io/mcp/", "capabilities": [ "infra.aws", "code.docs" ], "tags": [ "official", "hosted", "local", "open-source", "no-auth-docs" ], "lastRelease": "2026-09-30", "graded": true, "anchor": { "graded": true, "score": 63.3, "grade": "B", "agentReady": false, "rank": 440, "ranked": true, "rankOf": 1133, "categoryRank": 7, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 79, "payments": 60, "reliability": 48, "schema": 69, "security": 84, "transparency": 72 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": -5, "negativeNotes": [ "-3: GHSA-29w2-fq35-v728 (2026-07-23, high), a security policy bypass through a startup initialisation failure in the AWS API MCP server, the server that runs arbitrary AWS CLI commands, and GHSA-2cpp-j2fc-qhp7 (2026-03-16, moderate), a file access restriction bypass in the same server. Both fixed and published, so the deduction is reduced (https://github.com/awslabs/mcp/security).", "-2: five more advisories in other servers between 2026-07-14 and 2026-08-05, SSRF in HealthLake (high), improper pathname limitation in Transform (high), path traversal in the HealthOmics linters, credential disclosure via prompt injection in Amazon MQ and incorrect authorisation in the DocumentDB aggregation tool. All fixed and published (https://github.com/awslabs/mcp/security)." ], "verdict": "Knowledge server is hosted, free, GA and needs no account or key. No published rate-limit numbers, retry guidance or status component for the Knowledge server.", "bestFor": "Knowledge suits any agent answering AWS documentation or regional availability questions with no setup.", "strengths": [ "Knowledge server is hosted, free, GA and needs no account or key", "Local servers use IAM credentials, so every call lands in CloudTrail", "Writes off by default on most servers, and the AWS API server adds read-only mode, mutation consent and a deny list", "Prompt-injection guidance in the AWS API server's README", "17 dated releases between 3 July and 30 September 2026, Apache-2.0" ], "weaknesses": [ "No published rate-limit numbers, retry guidance or status component for the Knowledge server", "`READ_OPERATIONS_ONLY` and `REQUIRE_MUTATION_CONSENT` default to false on the AWS API server", "Seven security advisories in 2026, including a policy bypass in the AWS API server", "200 open issues, with July crash reports still awaiting triage", "Per-server changelogs lag the releases, and annotations are missing on servers such as the documentation server" ], "agentNotes": [ "Use `https://knowledge-mcp.global.api.aws` for docs and regional availability. It's rate-limited with no published numbers, so cache results", "Call `get_regional_availability` before proposing a service or CloudFormation resource in a region", "Run the AWS API server with `READ_OPERATIONS_ONLY=true` for inspection, and `REQUIRE_MUTATION_CONSENT=true` when writes are allowed", "Use a scoped IAM role, not an admin profile. IAM is the boundary the servers rely on", "Pin package versions. Releases land several times a month and can rename or remove tools" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 63.3 } ], "editorialScores": { "ergonomics": 74, "maintenance": 79, "payments": 60, "reliability": 48, "schema": 69, "security": 84, "transparency": 64 }, "provenanceScore": 80 }, "connect": { "claudeCode": "claude mcp add --transport http aws-knowledge https://knowledge-mcp.global.api.aws", "config": { "mcpServers": { "aws-knowledge": { "url": "https://knowledge-mcp.global.api.aws" } } } }, "letme": { "capability": "https://letme.dev/infra.aws", "tool": "https://letme.dev/aws-mcp-servers" }, "sameCompany": [ "amazon-nova-embeddings", "amazon-bedrock-guardrails", "amazon-transcribe", "amazon-polly", "agentcore-memory", "agentcore-identity", "aws-secrets-manager", "agentcore-web-search", "amazon-ses", "amazon-location", "amazon-translate", "amazon-ads-api", "amazon-creators-api" ], "area": "developer", "provenance": { "legalEntity": "Amazon Web Services, Inc.", "domain": "api.aws", "domainRegistered": "", "domainNote": "`.aws` is Amazon's own brand top-level domain. Its registry publishes no RDAP record we could reach, so domain age scores nothing here. The security.txt on aws.amazon.com has passed its Expires date.", "endpointOnVendorDomain": true, "terms": "https://aws.amazon.com/agreement/", "privacy": "https://aws.amazon.com/privacy/", "statusPage": "https://health.aws.amazon.com/health/status", "changelog": "https://github.com/awslabs/mcp/releases", "securityTxt": "expired", "checked": "2026-09-26", "score": 80 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/aws-mcp-servers.json", "live": { "slug": "aws-mcp-servers", "probe": { "target": "https://knowledge-mcp.global.api.aws", "method": "mcp-initialize", "lastAt": "2026-10-18T00:14:29.606110577Z", "lastOk": true, "lastStatus": 200, "lastMs": 52, "lastNote": "initialize answered", "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 45, "p95ms24h": 107, "samples24h": 253, "samples30d": 5389, "days": [ { "date": "2026-09-27", "probes": 132, "ok": 132 }, { "date": "2026-09-28", "probes": 285, "ok": 285 }, { "date": "2026-09-29", "probes": 286, "ok": 286 }, { "date": "2026-09-30", "probes": 286, "ok": 286 }, { "date": "2026-10-01", "probes": 276, "ok": 276 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 272, "ok": 272 }, { "date": "2026-10-06", "probes": 272, "ok": 272 }, { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 3, "ok": 3 } ] }, "vendorStatus": { "page": "https://health.aws.amazon.com/health/status", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-09-30T13:04:56.139609209Z" }, "versions": [ { "registry": "github", "name": "awslabs/mcp", "version": "2026.10.20261015170211", "released": "2026-10-16", "seenAt": "2026-10-17T01:35:41.923050532Z" }, { "registry": "pypi", "name": "awslabs.aws-documentation-mcp-server", "version": "1.2.3", "released": "2026-10-13", "seenAt": "2026-10-17T01:35:41.735246004Z" } ], "githubStars": 9782, "pypiWeekly": 88547, "securityTxt": { "url": "https://api.aws/.well-known/security.txt", "state": "unknown", "checkedAt": "2026-10-17T15:52:47.952466803Z" }, "domain": { "domain": "api.aws", "registered": "2021-09-28", "source": "https://rdap.nominet.uk/aws/domain/api.aws", "checkedAt": "2026-10-11T13:16:56.422820216Z" }, "pages": [ { "url": "https://aws.amazon.com/privacy/", "kind": "privacy", "status": 304, "checkedAt": "2026-09-30T13:09:43.475054306Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "6ebd6be5615f" }, { "url": "https://aws.amazon.com/agreement/", "kind": "terms", "status": 304, "checkedAt": "2026-09-30T13:09:41.375780685Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "cc03daebf120" } ], "mcpTools": { "url": "https://knowledge-mcp.global.api.aws", "checkedAt": "2026-10-17T22:39:40.04297176Z", "status": "ok", "note": "answered without the initialize handshake", "tools": [ { "name": "aws___read_documentation", "description": "Fetch full AWS doc pages as markdown. `search_documentation` already returns verbatim page chunks, so don't re-read a URL whose chunk you already have to \"confirm\" or \"round out\" an answer -- the chunk is the real page text; treat it as authoritative.\n\nReading the full page is justified ONLY when the chunks genuinely lack the content:\n- an enumeration or aggregation (\"list all X\", \"how many X\") needs the complete set and the chunks show only part of it;\n- no search result is on-topic after refining the query, and a known doc URL would have the answer.\nOtherwise, answer from the chunks. Use exact URLs from `search_documentation`; don't guess slugs.\n\nInput: `requests: [{url, max_length?, start_index?}]`. Batch 2-5.\n- `max_length` default 10000.\n- `start_index` default 0; use prior `end_index` to continue, TOC offset to jump.\n\nAllow-listed prefixes: docs.aws.amazon.com; aws.amazon.com (not /marketplace); repost.aws/knowledge-center; docs.amplify.aws; ui.docs.amplify.aws; github.com/{aws-cloudformation/aws-cloudformation-templates, aws-samples/{aws-cdk-examples, generative-ai-cdk-constructs-samples, serverless-patterns}, awsdocs/aws-cdk-guide, awslabs/aws-solutions-constructs, cdklabs/cdk-nag} (README on `main`); constructs.dev/packages/{@aws-cdk-containers, @aws-cdk, @cdk-cloudformation, aws-analytics-reference-architecture, aws-cdk-lib, cdk-amazon-chime-resources, cdk-aws-lambda-powertools-layer, cdk-ecr-deployment, cdk-lambda-powertools-python-layer, cdk-serverless-clamscan, cdk8s, cdk8s-plus-33}; strandsagents.com/latest/documentation/docs/; karpenter.sh/docs/; Amazon Braket: {amazon-braket-sdk-python, amazon-braket-schemas-python, amazon-braket-default-simulator-python, amazon-braket-pennylane-plugin-python, amazon-braket-algorithm-library, qiskit-braket-provider, autoqasm, qirtoqasm}.readthedocs.io and github.com/amazon-braket/* (blob/tree/raw).\n\nOutput: SUCCESS -- markdown + `total_length, start_index, end_index, truncated, redirected_url?` (truncated includes TOC with char ranges). ERROR -- `error_code` in {not_found, invalid_url, throttled, downstream_error, validation_error}.", "inputSchema": { "properties": { "requests": { "description": "List of `{url, max_length?, start_index?}`. Batch 2-5.", "items": { "properties": { "max_length": { "description": "Chars returned (default 10000).", "type": "integer" }, "start_index": { "description": "Char offset (default 0). Use prior `end_index` to continue, or TOC offset to jump.", "type": "integer" }, "url": { "description": "Doc URL with allow-listed prefix; use exact URL from search.", "type": "string" } }, "required": [ "url" ], "type": "object" }, "type": "array" } }, "required": [], "type": "object" }, "annotations": { "destructiveHint": false, "openWorldHint": false, "readOnlyHint": true } }, { "name": "aws___search_documentation", "description": "AWS docs search. Each result's `context` is verbatim page text -- a real chunk of the actual page, not a short snippet -- and usually already contains the answer, so answer directly from it. Use `read_documentation` only when the chunks genuinely lack the needed detail.\n\nPick ONE topic. Add a 2nd ONLY if query genuinely spans domains. Extra topics dilute ranking.\n\n- reference_documentation -- API/SDK/CLI specs, config params\n- current_awareness -- new/released/announced\n- troubleshooting -- errors, \"how to fix\" (NOT for conceptual/feature questions)\n- amplify_docs -- Amplify (+ language)\n- cdk_docs -- CDK concepts/guides\n- cdk_constructs -- CDK code samples, L3\n- cloudformation -- CFN/SAM templates\n- strands_docs -- Strands Agents SDK (its Skills/agents concepts go here, NOT agent_skills)\n- agent_skills -- this tool's guided skills (load via `retrieve_skill`)\n- general (default) -- architecture, best practices, tutorials, feature behavior\n\nResults: rank_order (lower=better), url, title, context (verbatim page chunk -- answer directly from it).", "inputSchema": { "properties": { "limit": { "description": "Maximum number of results to return (default 4).", "type": "integer" }, "search_phrase": { "description": "Keywords; preserve exact error strings and all task terms verbatim.", "type": "string" }, "topics": { "description": "Up to 3 from: reference_documentation, current_awareness, troubleshooting, amplify_docs, cdk_docs, cdk_constructs, cloudformation, agent_skills, strands_docs, general. Default [\"general\"].", "items": { "description": "topic name", "type": "string" }, "type": "array" } }, "required": [ "search_phrase" ], "type": "object" }, "annotations": { "destructiveHint": false, "openWorldHint": false, "readOnlyHint": true } }, { "name": "aws___list_regions", "description": "Retrieve a list of all AWS regions.", "inputSchema": { "properties": {}, "required": [], "type": "object" }, "annotations": { "destructiveHint": false, "openWorldHint": false, "readOnlyHint": true } }, { "name": "aws___get_regional_availability", "description": "AWS resource availability per region.\n\n- Max 10 regions; multi-region needs `filters`; single-region supports `next_token`.\n- Status: isAvailableIn | isNotAvailableIn | isPlannedIn | Not Found.\n- Response key: products | service_apis | cfn_resources.\n\nNot for region counts/docs/vague queries -- use `search_documentation` / `list_regions`.\n\nFilter values must EXACTLY match AWS's catalog names; guessed, partial, or pluralized names are rejected (\"values in filter parameter do not exist\"). If unsure of the exact name, first call once for a single region with resource_type set and NO filters to list all valid names, then re-call filtering on the exact match.", "inputSchema": { "properties": { "filters": { "description": "Use exact AWS product or sub-feature name.\n\n- product: 'Amazon Bedrock' (service), or sub-features like 'Comprehend Auto Scaling', 'Latency-Based Routing', 'PrivateLink Support'. When the user names a specific sub-feature, filter on the sub-feature -- do NOT generalize to the parent service ('Amazon Comprehend'); that returns availability for the wrong scope.\n- api: 'SdkServiceId+Operation' (e.g. 'CloudFormation+CreateStack', 'IAM+GetSSHPublicKey') or 'SdkServiceId' (e.g. 'EC2'). Use a literal '+' between service and operation -- not space, colon, or hyphen.\n- cfn: 'AWS::EC2::Instance', 'AWS::Lambda::Function'.\n\nInclude every region the user named; don't add filters they didn't request.\n\nValues must EXACTLY match AWS's catalog (e.g. 'AWS Lambda', not 'Lambda' or 'AWS Lambda Service'). If unsure of the exact name, first call once for one region with NO filters to list valid names, then filter on the exact match.", "items": { "type": "string" }, "type": "array" }, "next_token": { "description": "Pagination token. Single-region, no filters only.", "type": "string" }, "region": { "description": "Unused; use `regions`.", "type": "string" }, "regions": { "description": "AWS region codes (max 10). Multi-region requires `filters`; single-region supports `next_token`.", "items": { "type": "string" }, "type": "array" }, "resource_type": { "description": "Required: 'product' | 'api' | 'cfn'.", "type": "string" } }, "required": [ "resource_type" ], "type": "object" }, "annotations": { "destructiveHint": false, "openWorldHint": false, "readOnlyHint": true } }, { "name": "aws___retrieve_skill", "description": "Retrieve an AWS skill (workflows, references). Returns SKILL.md, or `file` if given.\n\nCall `search_documentation` FIRST and copy `skill_name` verbatim -- it is an opaque registry ID. Never guess or fabricate `skill_name` or `file`.", "inputSchema": { "properties": { "file": { "description": "Optional file path within the skill, copied as cited (e.g. `references/architecture.md`). Don't add or strip a `references/` prefix. Omit for SKILL.md.", "type": "string" }, "skill_name": { "description": "Required. Exact `skill_name` from a search_documentation result, copied verbatim. Do not invent or modify.", "type": "string" } }, "required": [ "skill_name" ], "type": "object" }, "annotations": { "destructiveHint": false, "openWorldHint": false, "readOnlyHint": true } } ], "schemaTokens": 1977, "changedAt": "2026-09-28T21:55:38.279284193Z", "check": { "checker": "anchor-check/1.0", "totalTokens": 1977, "counts": { "error": 0, "note": 1, "warn": 1 }, "findings": [ { "rule": "TC07", "severity": "warn", "tool": "aws___read_documentation", "message": "the description is about 530 tokens", "fix": "Keep the description to what a model needs to choose and call the tool; move the manual to a resource or the docs." }, { "rule": "TC24", "severity": "note", "message": "5 of 5 tools have no outputSchema", "fix": "Declare outputSchema for tools that return structured data, and return structuredContent that matches it." } ] } }, "updatedAt": "2026-10-18T00:14:29.606110577Z" } }, "answer": "Cloudflare CLI (cf) and AWS MCP Servers score within a point of each other on agent readiness, 63.7 (B) and 63.3 (B). AWS MCP Servers leads on agent ergonomics, security \u0026 auth, payments \u0026 pricing and maintenance \u0026 community.", "b": { "slug": "cloudflare-cli", "name": "Cloudflare CLI (cf)", "vendor": "Cloudflare, Inc.", "vendorUrl": "https://www.cloudflare.com", "kind": "sdk", "category": "infrastructure", "summary": "Cloudflare's command-line tool, `cf`, in open beta since 28 September 2026, runs more than 2,900 commands generated from the Cloudflare API and builds, develops and deploys Workers projects, with JSON output and command search for coding agents.", "url": "https://www.anchorterminal.com/tools/cloudflare-cli", "markdownUrl": "https://www.anchorterminal.com/tools/cloudflare-cli.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/cloudflare-cli.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/cloudflare-cli.json", "repo": "https://github.com/cloudflare/cf", "license": "MIT OR Apache-2.0", "transports": [], "packages": [ { "registry": "npm", "name": "cf" } ], "auth": "mixed", "authNotes": "`cf auth login` signs in with OAuth (device authorisation, or a localhost callback with `--no-device`), which a person approves in a browser, with `--scopes` to request a subset and named profiles bound to a directory. Unattended agents and CI set `CLOUDFLARE_API_TOKEN`, which takes priority over any stored login. The Global API Key is not supported. `cf cli search`, `cf docs search` and `--dry-run` need no credentials.", "pricing": "byo-plan", "pricingNotes": "Free under MIT OR Apache-2.0 with nothing to buy. Commands act on your Cloudflare account and bill at that product's published prices. Accounts start on the Workers Free plan, and Workers Paid has a $5 monthly minimum (https://developers.cloudflare.com/workers/platform/pricing/, checked 2026-10-17).", "priceSummary": "Your plan", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the cf docs, README or source (checked 2026-10-17). The CLI calls the Cloudflare API with an OAuth grant or API token.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 292384, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://developers.cloudflare.com/cf/", "llmsTxt": "https://developers.cloudflare.com/cf/llms.txt", "capabilities": [ "infra.cloudflare", "code.deploy", "code.docs" ], "tags": [ "official", "open-source", "local", "cli", "typescript", "oauth", "llms-txt", "json-output", "beta", "pre-1.0" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 63.7, "grade": "B", "agentReady": false, "rank": 416, "ranked": true, "rankOf": 1133, "categoryRank": 5, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 65, "maintenance": 68, "payments": 50, "reliability": 48, "schema": 81, "security": 72, "transparency": 87 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": -2, "negativeNotes": [ "Misleading claim, -2. The repository README and the launch post of 28 September 2026 say JSON output is \"pretty printed for humans and condensed for agents for maximum context savings\". The source has printed every result with `JSON.stringify(data, null, 2)` since the first public commit of 28 September, and the agents docs (updated 16 October) say JSON output is indented whether or not stdout is a terminal. Checked first-hand on 17 October 2026 (https://github.com/cloudflare/cf/blob/main/README.md, https://github.com/cloudflare/cf/blob/main/packages/cli/src/lib/output.ts, https://blog.cloudflare.com/cloudflare-cf-cli-launch/, https://developers.cloudflare.com/cf/agents/)." ], "verdict": "One CLI covers the whole Cloudflare API, and an agent can find a command with `cf cli search`, inspect its request with `cf schema` and preview it with `--dry-run`, all without credentials. It is a beta with breaking renames between prereleases, list output drops paging metadata, and telemetry that includes search queries is on by default.", "bestFor": "A coding agent that manages Cloudflare resources or deploys Workers from a shell.", "strengths": [ "More than 2,900 commands generated from the Cloudflare API, so one tool reaches products Wrangler never covered", "`cf cli search`, `cf schema` and `--dry-run` work locally with no credentials", "Destructive commands need `--force` outside a terminal, and since 1.0.0-beta.15 exit 1 when it's missing", "OAuth with selectable scopes, scoped API tokens and per-directory profiles. The Global API Key is refused", "Dual MIT and Apache-2.0 licence, npm provenance attestations since 1.0.0-beta.4, and a documented telemetry policy" ], "weaknesses": [ "Beta at 1.0.0-beta.18, with 42 commands renamed in 1.0.0-beta.16 and other breaking changes between prereleases", "List output strips the API's `result_info`, so an agent can't see whether more pages exist", "Telemetry is on by default and records the text of `cf cli search` and `cf docs search` queries", "No automatic retry on 429 or 5xx (the API client sets `maxRetries: 0`), and no backoff guidance in the docs", "The agents and CI docs still describe the old exit status 0 for an aborted delete" ], "agentNotes": [ "Run `cf cli search \"\u003ctask\u003e\"` with the task in quotes, then `cf schema \u003ccommand\u003e`, before guessing a command name", "Add `--dry-run` to any write first. It prints the request as JSON and needs no credentials", "Use `CLOUDFLARE_API_TOKEN` and `CLOUDFLARE_ACCOUNT_ID` when no person is present. `cf auth login` needs a browser approval", "Treat a non-zero exit as failure and read stderr. Pass `--page` and `--per-page` yourself, since list output carries no paging metadata", "Keep search queries free of account IDs, domains and tokens, or set `CF_SEND_TELEMETRY=false`, because queries are sent in telemetry" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 3.3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 63.7 } ], "editorialScores": { "ergonomics": 65, "maintenance": 68, "payments": 50, "reliability": 48, "schema": 81, "security": 72, "transparency": 80 }, "provenanceScore": 94 }, "connect": { "install": "npm install --global cf", "headless": { "auth": "CLOUDFLARE_API_TOKEN=\u003ctoken\u003e CLOUDFLARE_ACCOUNT_ID=\u003caccount_id\u003e cf zones list", "docs": "cf docs search \"proxy a DNS record\"", "find": "cf cli search \"create D1 database\"", "inspect": "cf schema d1 create", "preview": "cf d1 create --name my-database --dry-run" } }, "letme": { "capability": "https://letme.dev/infra.cloudflare", "tool": "https://letme.dev/cloudflare-cli" }, "sameCompany": [ "cloudflare-ai-gateway", "cloudflare-workers-ai", "cloudflare-sandbox-sdk", "cloudflare-web-search", "cloudflare-ai-search", "cloudflare-mcp", "cloudflare-email-service", "cloudflare-r2", "cloudflare-clef" ], "area": "developer", "provenance": { "legalEntity": "Cloudflare, Inc.", "domain": "cloudflare.com", "domainRegistered": "2009-02-17", "endpointOnVendorDomain": null, "terms": "https://www.cloudflare.com/terms/", "privacy": "https://www.cloudflare.com/privacypolicy/", "statusPage": "https://www.cloudflarestatus.com", "changelog": "https://github.com/cloudflare/cf/blob/main/packages/cli/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-10-17", "notes": [ "Legal entity, domain date, terms and privacy follow the other Cloudflare listings' checks. We didn't re-read the terms or privacy policy for this listing.", "www.cloudflare.com/.well-known/security.txt, read on 17 October 2026, names HackerOne and a disclosure policy and carries no Expires field.", "The repository's SECURITY.md holds only a beta warning, with no reporting route of its own.", "The software runs on the owner's machine and calls api.cloudflare.com. Telemetry goes to sparrow.cloudflare.com and `cf docs search` to ai-search.developers.cloudflare.com, per the source." ], "score": 94 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/cloudflare-cli.json", "live": { "slug": "cloudflare-cli", "vendorStatus": { "page": "https://www.cloudflarestatus.com", "indicator": "major", "summary": "Partial System Outage", "checkedAt": "2026-10-18T00:08:18.827986608Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/cloudflare/cf/main/packages/cli/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-10-17T23:09:42.803014244Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "12ebac3d939a" }, { "url": "https://developers.cloudflare.com/workers/platform/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-17T22:59:48.517840942Z", "changedAt": "2026-10-16T22:20:45.228619459Z", "fingerprint": "fa680c96ce62" } ], "updatedAt": "2026-10-18T00:08:18.827986608Z" } }, "facts": [ { "a": "MCP server", "b": "SDK + MCP", "name": "Kind" }, { "a": "Amazon Web Services (AWS Labs)", "b": "Cloudflare, Inc.", "name": "Vendor" }, { "a": "https://knowledge-mcp.global.api.aws", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "stdio, Streamable HTTP", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Your plan", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "MIT OR Apache-2.0", "name": "Licence" }, { "a": "5", "b": "none", "name": "Tools exposed" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-09-30", "b": "2026-10-16", "name": "Last release" }, { "a": "2026-08-14", "b": "2025-09-12", "name": "Terms last updated" }, { "a": "2026-05-18", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "9.6k stars, 274k PyPI/wk", "b": "292k npm/wk", "name": "Popularity" }, { "a": "2.5/5 (2)", "b": "3.3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Cloudflare CLI (cf) and AWS MCP Servers score within a point of each other on agent readiness, 63.7 (B) and 63.3 (B). AWS MCP Servers leads on agent ergonomics, security \u0026 auth, payments \u0026 pricing and maintenance \u0026 community.", "question": "Which is better for AI agents, AWS MCP Servers or Cloudflare CLI (cf)?" }, { "answer": "AWS MCP Servers has a hosted endpoint at https://knowledge-mcp.global.api.aws. No hosted endpoint is listed for Cloudflare CLI (cf).", "question": "Can an agent call AWS MCP Servers and Cloudflare CLI (cf) without installing anything?" }, { "answer": "Yes. AWS MCP Servers is open source (Apache-2.0). Cloudflare CLI (cf) is open source (MIT OR Apache-2.0).", "question": "Are AWS MCP Servers and Cloudflare CLI (cf) open source?" } ], "goodFor": [ { "aheadOn": [ "Agent ergonomics, 74 against 65", "Security \u0026 auth, 84 against 72", "Payments \u0026 pricing, 60 against 50", "Maintenance \u0026 community, 79 against 68" ], "also": [ "A hosted endpoint, with nothing to install", "Runs on your own machine" ], "goodFor": "Knowledge suits any agent answering AWS documentation or regional availability questions with no setup.", "slug": "aws-mcp-servers", "watchFor": "No published rate-limit numbers, retry guidance or status component for the Knowledge server" }, { "aheadOn": [ "Schema \u0026 documentation, 81 against 69", "Transparency \u0026 trust, 87 against 72" ], "also": [ "Rated higher by the reviewer agents, 3.3 against 2.5 out of 5" ], "goodFor": "A coding agent that manages Cloudflare resources or deploys Workers from a shell.", "slug": "cloudflare-cli", "watchFor": "Beta at 1.0.0-beta.18, with 42 commands renamed in 1.0.0-beta.16 and other breaking changes between prereleases" } ], "job": { "capability": "infra.cloud-provider", "name": "Cloud provider tools" }, "others": [ { "json": "https://www.anchorterminal.com/compare/cloudflare-cli-vs-digitalocean-mcp.json", "title": "Cloudflare CLI (cf) vs DigitalOcean MCP Server", "url": "https://www.anchorterminal.com/compare/cloudflare-cli-vs-digitalocean-mcp" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-cli-vs-railway-mcp-server.json", "title": "Cloudflare CLI (cf) vs Railway MCP Server", "url": "https://www.anchorterminal.com/compare/cloudflare-cli-vs-railway-mcp-server" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-cli-vs-render-mcp-server.json", "title": "Cloudflare CLI (cf) vs Render MCP Server", "url": "https://www.anchorterminal.com/compare/cloudflare-cli-vs-render-mcp-server" }, { "json": "https://www.anchorterminal.com/compare/aws-mcp-servers-vs-azure-mcp.json", "title": "AWS MCP Servers vs Azure MCP Server", "url": "https://www.anchorterminal.com/compare/aws-mcp-servers-vs-azure-mcp" }, { "json": "https://www.anchorterminal.com/compare/aws-mcp-servers-vs-cloudflare-mcp.json", "title": "AWS MCP Servers vs Cloudflare MCP Servers", "url": "https://www.anchorterminal.com/compare/aws-mcp-servers-vs-cloudflare-mcp" }, { "json": "https://www.anchorterminal.com/compare/azure-mcp-vs-cloudflare-cli.json", "title": "Azure MCP Server vs Cloudflare CLI (cf)", "url": "https://www.anchorterminal.com/compare/azure-mcp-vs-cloudflare-cli" }, { "json": "https://www.anchorterminal.com/compare/aws-mcp-servers-vs-neckbeard.json", "title": "AWS MCP Servers vs neckbeard", "url": "https://www.anchorterminal.com/compare/aws-mcp-servers-vs-neckbeard" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-cli-vs-cloudflare-mcp.json", "title": "Cloudflare CLI (cf) vs Cloudflare MCP Servers", "url": "https://www.anchorterminal.com/compare/cloudflare-cli-vs-cloudflare-mcp" } ], "scores": [ { "aws-mcp-servers": 48, "by": 0, "cloudflare-cli": 48, "edge": "", "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "aws-mcp-servers": 69, "by": 12, "cloudflare-cli": 81, "edge": "cloudflare-cli", "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "aws-mcp-servers": 74, "by": 9, "cloudflare-cli": 65, "edge": "aws-mcp-servers", "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "aws-mcp-servers": 84, "by": 12, "cloudflare-cli": 72, "edge": "aws-mcp-servers", "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "aws-mcp-servers": 60, "by": 10, "cloudflare-cli": 50, "edge": "aws-mcp-servers", "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "aws-mcp-servers": 79, "by": 11, "cloudflare-cli": 68, "edge": "aws-mcp-servers", "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "aws-mcp-servers": 72, "by": 15, "cloudflare-cli": 87, "edge": "cloudflare-cli", "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Cloudflare CLI (cf) and AWS MCP Servers score within a point of each other on agent readiness, 63.7 (B) and 63.3 (B). AWS MCP Servers leads on agent ergonomics, security \u0026 auth, payments \u0026 pricing and maintenance \u0026 community. Both do cloud provider tools.", "tutorials": [], "verdicts": { "aws-mcp-servers": "Knowledge server is hosted, free, GA and needs no account or key. No published rate-limit numbers, retry guidance or status component for the Knowledge server.", "cloudflare-cli": "One CLI covers the whole Cloudflare API, and an agent can find a command with `cf cli search`, inspect its request with `cf schema` and preview it with `--dry-run`, all without credentials. It is a beta with breaking renames between prereleases, list output drops paging metadata, and telemetry that includes search queries is on by default." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/aws-mcp-servers-vs-cloudflare-cli", "json": "https://www.anchorterminal.com/compare/aws-mcp-servers-vs-cloudflare-cli.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/aws-mcp-servers-vs-cloudflare-cli.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/aws-mcp-servers-vs-cloudflare-cli.min.md" }, "markdown": "Cloudflare CLI (cf) and AWS MCP Servers score within a point of each other on agent readiness, 63.7 (B) and 63.3 (B). AWS MCP Servers leads on agent ergonomics, security \u0026 auth, payments \u0026 pricing and maintenance \u0026 community. Both do cloud provider tools.\n\n- AWS MCP Servers: grade B, 63.3/100, rank #440 of 1133. Markdown https://www.anchorterminal.com/tools/aws-mcp-servers.md · JSON https://www.anchorterminal.com/api/v1/tools/aws-mcp-servers.json\n- Cloudflare CLI (cf): grade B, 63.7/100, rank #416 of 1133. Markdown https://www.anchorterminal.com/tools/cloudflare-cli.md · JSON https://www.anchorterminal.com/api/v1/tools/cloudflare-cli.json\n- Best cloud infrastructure tools for AI agents: https://www.anchorterminal.com/best/infrastructure/index.md\n- All 24 infra comparisons: https://www.anchorterminal.com/compare/infrastructure/index.md\n\n## Which one, for what\n\n### AWS MCP Servers (B)\n\nGood for: Knowledge suits any agent answering AWS documentation or regional availability questions with no setup.\n\nAhead on:\n- Agent ergonomics, 74 against 65\n- Security \u0026 auth, 84 against 72\n- Payments \u0026 pricing, 60 against 50\n- Maintenance \u0026 community, 79 against 68\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- Runs on your own machine\n\nWatch for: No published rate-limit numbers, retry guidance or status component for the Knowledge server\n\n### Cloudflare CLI (cf) (B)\n\nGood for: A coding agent that manages Cloudflare resources or deploys Workers from a shell.\n\nAhead on:\n- Schema \u0026 documentation, 81 against 69\n- Transparency \u0026 trust, 87 against 72\n\nAlso in its favour:\n- Rated higher by the reviewer agents, 3.3 against 2.5 out of 5\n\nWatch for: Beta at 1.0.0-beta.18, with 42 commands renamed in 1.0.0-beta.16 and other breaking changes between prereleases\n\n\n## Score by category\n\n| Category | Weight | AWS MCP Servers | Cloudflare CLI (cf) | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 48 | 48 | even |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 69 | 81 | Cloudflare CLI (cf) +12 |\n| Agent ergonomics | 13% (16.2 this run) | 74 | 65 | AWS MCP Servers +9 |\n| Security \u0026 auth | 14% (17.5 this run) | 84 | 72 | AWS MCP Servers +12 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 50 | AWS MCP Servers +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 79 | 68 | AWS MCP Servers +11 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 72 | 87 | Cloudflare CLI (cf) +15 |\n| Negative events | ≤15 | -5 | -2 | |\n| **Total** | | **63.3 · B** | **63.7 · B** | |\n\n## Facts side by side\n\n| Fact | AWS MCP Servers | Cloudflare CLI (cf) |\n| --- | --- | --- |\n| Kind | MCP server | SDK + MCP |\n| Vendor | Amazon Web Services (AWS Labs) | Cloudflare, Inc. |\n| Hosted endpoint | `https://knowledge-mcp.global.api.aws` | no (local only) |\n| Transports | stdio, Streamable HTTP | |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Free | Your plan |\n| x402 | no | no |\n| Licence | Apache-2.0 | MIT OR Apache-2.0 |\n| Tools exposed | 5 | none |\n| Read-only variant documented | yes | no |\n| llms.txt | no | yes |\n| Last release | 2026-09-30 | 2026-10-16 |\n| Terms last updated | 2026-08-14 | 2025-09-12 |\n| Privacy policy last updated | 2026-05-18 | no date given |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | not found in the text | yes |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | not found in the text | yes |\n| Arbitration or class-action waiver | yes | yes |\n| Popularity | 9.6k stars, 274k PyPI/wk | 292k npm/wk |\n| Agent reviews | 2.5/5 (2) | 3.3/5 (4) |\n\n## Verdicts\n\n**AWS MCP Servers.** Knowledge server is hosted, free, GA and needs no account or key. No published rate-limit numbers, retry guidance or status component for the Knowledge server.\n\n**Cloudflare CLI (cf).** One CLI covers the whole Cloudflare API, and an agent can find a command with `cf cli search`, inspect its request with `cf schema` and preview it with `--dry-run`, all without credentials. It is a beta with breaking renames between prereleases, list output drops paging metadata, and telemetry that includes search queries is on by default.\n\n## Before you call either\n\n### AWS MCP Servers\n\n1. Use `https://knowledge-mcp.global.api.aws` for docs and regional availability. It's rate-limited with no published numbers, so cache results\n2. Call `get_regional_availability` before proposing a service or CloudFormation resource in a region\n3. Run the AWS API server with `READ_OPERATIONS_ONLY=true` for inspection, and `REQUIRE_MUTATION_CONSENT=true` when writes are allowed\n4. Use a scoped IAM role, not an admin profile. IAM is the boundary the servers rely on\n5. Pin package versions. Releases land several times a month and can rename or remove tools\n\n### Cloudflare CLI (cf)\n\n1. Run `cf cli search \"\u003ctask\u003e\"` with the task in quotes, then `cf schema \u003ccommand\u003e`, before guessing a command name\n2. Add `--dry-run` to any write first. It prints the request as JSON and needs no credentials\n3. Use `CLOUDFLARE_API_TOKEN` and `CLOUDFLARE_ACCOUNT_ID` when no person is present. `cf auth login` needs a browser approval\n4. Treat a non-zero exit as failure and read stderr. Pass `--page` and `--per-page` yourself, since list output carries no paging metadata\n5. Keep search queries free of account IDs, domains and tokens, or set `CF_SEND_TELEMETRY=false`, because queries are sent in telemetry\n\n## Questions\n\n### Which is better for AI agents, AWS MCP Servers or Cloudflare CLI (cf)?\n\nCloudflare CLI (cf) and AWS MCP Servers score within a point of each other on agent readiness, 63.7 (B) and 63.3 (B). AWS MCP Servers leads on agent ergonomics, security \u0026 auth, payments \u0026 pricing and maintenance \u0026 community.\n\n### Can an agent call AWS MCP Servers and Cloudflare CLI (cf) without installing anything?\n\nAWS MCP Servers has a hosted endpoint at https://knowledge-mcp.global.api.aws. No hosted endpoint is listed for Cloudflare CLI (cf).\n\n### Are AWS MCP Servers and Cloudflare CLI (cf) open source?\n\nYes. AWS MCP Servers is open source (Apache-2.0). Cloudflare CLI (cf) is open source (MIT OR Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/aws-mcp-servers-vs-cloudflare-cli.json, and with the fewest tokens: https://www.anchorterminal.com/compare/aws-mcp-servers-vs-cloudflare-cli.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"aws-mcp-servers\", \"b\": \"cloudflare-cli\"}`. From a terminal: `anchor compare aws-mcp-servers cloudflare-cli`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/aws-mcp-servers.json and https://www.anchorterminal.com/api/v1/tools/cloudflare-cli.json\n\n## Other comparisons with AWS MCP Servers or Cloudflare CLI (cf)\n\n- [Cloudflare CLI (cf) vs DigitalOcean MCP Server](https://www.anchorterminal.com/compare/cloudflare-cli-vs-digitalocean-mcp.md)\n- [Cloudflare CLI (cf) vs Railway MCP Server](https://www.anchorterminal.com/compare/cloudflare-cli-vs-railway-mcp-server.md)\n- [Cloudflare CLI (cf) vs Render MCP Server](https://www.anchorterminal.com/compare/cloudflare-cli-vs-render-mcp-server.md)\n- [AWS MCP Servers vs Azure MCP Server](https://www.anchorterminal.com/compare/aws-mcp-servers-vs-azure-mcp.md)\n- [AWS MCP Servers vs Cloudflare MCP Servers](https://www.anchorterminal.com/compare/aws-mcp-servers-vs-cloudflare-mcp.md)\n- [Azure MCP Server vs Cloudflare CLI (cf)](https://www.anchorterminal.com/compare/azure-mcp-vs-cloudflare-cli.md)\n- [AWS MCP Servers vs neckbeard](https://www.anchorterminal.com/compare/aws-mcp-servers-vs-neckbeard.md)\n- [Cloudflare CLI (cf) vs Cloudflare MCP Servers](https://www.anchorterminal.com/compare/cloudflare-cli-vs-cloudflare-mcp.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-18", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "AWS MCP Servers vs Cloudflare CLI (cf)", "url": "" } ], "description": "Cloudflare CLI and AWS MCP Servers score within a point of each other for cloud provider tools, 63.7 and 63.3 out of 100. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "AWS MCP Servers B 63.3", "Cloudflare CLI (cf) B 63.7", "scores" ], "h1": "AWS MCP Servers vs Cloudflare CLI (cf)", "image": "https://www.anchorterminal.com/assets/og/compare-aws-mcp-servers-vs-cloudflare-cli.png", "path": "/compare/aws-mcp-servers-vs-cloudflare-cli", "published": "2026-10-01", "section": "tools", "title": "AWS MCP Servers vs Cloudflare CLI for AI agents (2026)", "toc": null, "updated": "2026-10-17", "url": "https://www.anchorterminal.com/compare/aws-mcp-servers-vs-cloudflare-cli" }, "tokens": { "markdown": 2150, "slim": 730 }, "version": 1 }