Amazon ECS MCP Server
Vendor-built ECS MCP server covering the full container deployment lifecycle: containerize, push to ECR, deploy via ECS Express Mode with ALB, troubleshoot. Notable for ALLOW_WRITE and ALLOW_SENSITIVE_DATA environment flags that make read-only mode a configuration default.
“The Amazon ECS MCP server is the most capable container deployment server currently shipping. It covers the full lifecycle: containerizing an application, building and pushing to ECR, deploying via ECS Express Mode with Application Load Balancer integration, and tearing it all back down with one tool call. The standout feature is ALLOW_WRITE=false and ALLOW_SENSITIVE_DATA=false as first-class environment flags, which keep the server in monitoring-only mode against a production cluster while restricting the agent to list and describe operations. Most cloud MCPs treat the read/write distinction as an afterthought; AWS Labs treats it as a configuration boundary, and that earns it the editorial pick for production-adjacent ECS work.”
INSTALL THIS SERVER
{
"mcpServers": {
"awslabs.ecs-mcp-server": {
"command": "uvx",
"args": [
"awslabs.ecs-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "your-aws-profile",
"AWS_REGION": "us-east-1",
"FASTMCP_LOG_LEVEL": "ERROR"
}
}
}
}
{
"mcpServers": {
"awslabs.ecs-mcp-server": {
"command": "uvx",
"args": [
"awslabs.ecs-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "your-aws-profile",
"AWS_REGION": "us-east-1",
"FASTMCP_LOG_LEVEL": "ERROR"
}
}
}
}
{
"mcpServers": {
"awslabs.ecs-mcp-server": {
"command": "uvx",
"args": [
"awslabs.ecs-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "your-aws-profile",
"AWS_REGION": "us-east-1",
"FASTMCP_LOG_LEVEL": "ERROR"
}
}
}
}
{
"mcpServers": {
"awslabs.ecs-mcp-server": {
"command": "uvx",
"args": [
"awslabs.ecs-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "your-aws-profile",
"AWS_REGION": "us-east-1",
"FASTMCP_LOG_LEVEL": "ERROR"
}
}
}
}
{
"mcpServers": {
"awslabs.ecs-mcp-server": {
"command": "uvx",
"args": [
"awslabs.ecs-mcp-server@latest"
],
"env": {
"AWS_PROFILE": "your-aws-profile",
"AWS_REGION": "us-east-1",
"FASTMCP_LOG_LEVEL": "ERROR"
}
}
}
}
8 TOOLS AVAILABLE
OUR ASSESSMENT
- ALLOW_WRITE and ALLOW_SENSITIVE_DATA environment flags treat the read/write boundary as a configuration default.
- Full lifecycle coverage: containerize, ECR push, ECS Express Mode deploy with ALB, auto-scaling, circuit-breaker rollback, cleanup.
- Integrated AWS Knowledge MCP proxy gives the agent up-to-date AWS documentation context, including ECS features released after the model's training cutoff.
- AWS-managed hosted version available alongside the local server, with IAM integration and CloudTrail audit logging.
- Currently positioned for development and prototyping by AWS themselves; production use requires careful IAM scoping with the read-only flags set.
- Local install path requires uv package manager plus Docker or Finch; setup overhead exceeds a typical npx server.
- Express Mode is opinionated about infrastructure shape; teams with custom ALB or networking patterns will hit constraints.
ALLOW_WRITE and ALLOW_SENSITIVE_DATA environment variables gate destructive operations and information disclosure. Read-only mode covers list and describe operations across clusters, services, tasks, and task definitions. Production guidance from AWS recommends scoping IAM policies tightly and keeping both flags at false. Credentials inherit from the local AWS profile via the AWS_PROFILE environment variable; the MCP config holds zero long-lived secrets.
ECS-heavy teams who want an agent that can stand up a containerized service end-to-end. Most useful in dev and staging; safe in production with read-only flags set.
TECHNICAL DETAILS
ADOPTION METRICS
// Reading thisThe 8.9k star count covers the whole awslabs/mcp monorepo, of which the ECS server is one of 50+ included servers. Star traction reflects AWS Labs as a publisher, with the ECS server itself benefiting from that umbrella signal.
// Reading thisIn the top 5 of vendor-built cloud MCPs by feature coverage. The lifecycle scope (containerize through teardown) puts it ahead of single-purpose ECS tools.
SOURCES & VERIFICATION
We don't take any single directory's word for it. Before scoring, we cross-reference 4 public MCP sources, install the server ourselves against the clients we cover, and record when we last re-verified.
The same server, 4 different lenses. We reconcile these signals into our editorial score, which is why our number sometimes diverges from a directory-aggregate star count.
| Source | Their rating | Their star count | Their downloads | Last synced |
|---|---|---|---|---|
| AutomationSwitch This page | 4.2editorial | 8,894 | — | APR 28, 2026 |
| PulseMCP | — unrated | unavailable | unavailable | APR 28, 2026 |
| Official MCP Registry | — unrated | unavailable | unavailable | APR 28, 2026 |
| Awesome MCP Servers | — unrated | unavailable | unavailable | APR 28, 2026 |
| Smithery | — unrated | unavailable | unavailable | APR 28, 2026 |
// Counts are directory-reported; we don't adjust them. Discrepancies usually come from different snapshot times or star-caching.
OTHER CLOUD MCP SERVERS
AWS API MCP Server
The official AWS Labs catch-all server. Bridges any AWS CLI command to MCP, giving agents universal access to the AWS API surface. Helps the agent select the right CLI command for a task; respects the local AWS credential chain.
Cloudflare MCP
Cloudflare's MCP offering: 14 hosted remote MCP servers segmented by product surface (Workers Bindings, Observability, Radar, Browser Rendering, Logpush, AI Gateway, Audit Logs, DNS Analytics, DEX, CASB, GraphQL, Docs, Container, Builds) plus a Code Mode server for broader API access. All authenticate via OAuth.
Amazon EKS MCP Server
AWS Labs server for Amazon EKS covering cluster creation via CloudFormation, full Kubernetes resource lifecycle, log retrieval, event fetching, and troubleshooting. Read-only and write IAM policies documented separately for scoped credential setup.
Vercel
Deployment layer for managing Vercel projects, deployments, environment variables, and domains. Deploy, promote, rollback, and inspect from your agent context.
DISCUSS YOUR
MCP REQUIREMENTS.
Evaluating a server, scoping an internal deployment, or working out whether MCP is the right fit at all. Start the conversation and we will point you at the right piece of the ecosystem.