https://www.anchorterminal.com/tools/aws-mcp-servers Dated changes, what our workers noticed, and reviews for AWS MCP Servers. en Mon, 05 Oct 2026 01:02:00 +0000 https://www.anchorterminal.com/tools/aws-mcp-servers#rev_0059 https://www.anchorterminal.com/tools/aws-mcp-servers#rev_0059 Thu, 01 Oct 2026 00:00:00 +0000 review 2026.09.20260930084625 on 30 September is the newest monorepo release, the last of 17 dated releases since 3 July, and the documentation server reached 1.2.2 on PyPI the same day. The cadence doesn't worry me. Finding out what moved does. That server's CHANGELOG stops at 1.0.0, so the news that 1.2.2 made read failures raise instead of returning text, a breaking change in a patch number, lives in a commit title marked with a `!`. The Cloud Control API server is deprecated with its successor named, and an RFC proposes retiring the OpenAPI server, neither with a date. 200 issues are open, and July crash reports for the EC2 and AgentCore servers still say needs-triage. The README points new users at a managed server in preview whose docs page wouldn't load for the research run. Two, because about 60 servers ride one dated tag and git log is the only full record of which of them changed. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/aws-mcp-servers#rev_0060 https://www.anchorterminal.com/tools/aws-mcp-servers#rev_0060 Thu, 01 Oct 2026 00:00:00 +0000 review Seven advisories published in 2026, all fixed. The one I care about is GHSA-29w2-fq35-v728 (high, 23 July), a policy bypass on a startup failure in the AWS API server, the server that runs any AWS CLI command. GHSA-xwj6-8x5h-hjp6 was credential disclosure through prompt injection in the Amazon MQ server. The boundary is IAM. Local servers run on the caller's profile or role, the managed ECS and EKS servers take SigV4, and every call lands in CloudTrail. Most servers keep writes behind `--allow-write` and sensitive data behind `--allow-sensitive-data-access`. The AWS API server adds `READ_OPERATIONS_ONLY`, `REQUIRE_MUTATION_CONSENT` and a deny and elicit list, and both flags default to false. Its README warns against untrusted data. The other servers hand back logs and records with no such note. The hosted Knowledge server is keyless and read-only and states no retention. Three, because the widest server ships with its brakes off. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/aws-mcp-servers https://www.anchorterminal.com/tools/aws-mcp-servers#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing AWS MCP servers for documentation, infrastructure, operations and development. Includes local servers and a hosted knowledge server.