# AWS Labs aws-msk MCP Server
An AWS Labs Model Context Protocol (MCP) server for Amazon Managed Streaming for Kafka (MSK).
## Overview
The AWS MSK MCP Server provides a set of tools for interacting with Amazon MSK through the Model Context Protocol. It enables AI assistants to manage, monitor, and optimize Amazon MSK clusters by providing structured access to MSK APIs.
## Features
- **Cluster Management**: Create, describe, and update MSK clusters (both provisioned and serverless)
- **Configuration Management**: Create and manage MSK configurations
- **VPC Connection Management**: Create, describe, and manage VPC connections
- **Monitoring and Telemetry**: Access cluster metrics, logs, and operational data
- **Security Management**: Configure authentication, encryption, and access policies
- **Best Practices**: Get recommendations for cluster sizing, configuration, and performance optimization
- **Read-Only Mode**: Server runs in write mode by default, switch to read-only to protect against accidental modifications
## Tools
### Cluster Operations
- **describe_cluster_operation**: Gets information about a specific cluster operation
- **get_cluster_info**: Retrieves various types of information about MSK clusters
- **get_global_info**: Gets global information about MSK resources
- **create_cluster**: Creates a new MSK cluster (provisioned or serverless)
- **update_broker_storage**: Updates storage size of brokers
- **update_broker_type**: Updates broker instance type
- **update_broker_count**: Updates number of brokers in a cluster
- **update_cluster_configuration**: Updates configuration of a cluster
- **update_monitoring**: Updates monitoring settings
- **update_security**: Updates security settings
- **reboot_broker**: Reboots brokers in a cluster
### Configuration Operations
- **get_configuration_info**: Gets information about MSK configurations
- **create_configuration**: Creates a new MSK configuration
- **update_configuration**: Updates an existing configuration
### VPC Operations
- **describe_vpc_connection**: Gets information about a VPC connection
- **create_vpc_connection**: Creates a new VPC connection
- **delete_vpc_connection**: Deletes a VPC connection
- **reject_client_vpc_connection**: Rejects a client VPC connection request
### Security Operations
- **put_cluster_policy**: Puts a resource policy on a cluster
- **associate_scram_secret**: Associates SCRAM secrets with a cluster
- **disassociate_scram_secret**: Disassociates SCRAM secrets from a cluster
- **list_tags_for_resource**: Lists all tags for an MSK resource
- **tag_resource**: Adds tags to an MSK resource
- **untag_resource**: Removes tags from an MSK resource
- **list_customer_iam_access**: Lists IAM access information for a cluster
### Monitoring and Best Practices
- **get_cluster_telemetry**: Retrieves telemetry data for MSK clusters
- **get_cluster_best_practices**: Gets best practices and recommendations for MSK clusters
## Usage
This MCP server can be used by AI assistants to help users manage their Amazon MSK resources. It provides structured access to MSK APIs, making it easier for AI to understand and interact with MSK clusters.
## Prerequisites
1. Install `uv` from [Astral](https://docs.astral.sh/uv/getting-started/installation/) or the [GitHub README](https://github.com/astral-sh/uv#installation)
2. Install Python using `uv python install 3.10`
3. Set up AWS credentials with access to AWS services
- You need an AWS account with appropriate permissions
- Configure AWS credentials with profile name 'default' with `aws configure` or environment variables
### Installation
| Cursor | VS Code |
|:------:|:-------:|
| [](https://cursor.com/en/install-mcp?name=awslabs.aws-msk-mcp-server&config=JTdCJTIyY29tbWFuZCUyMiUzQSUyMnV2eCUyMGF3c2xhYnMuYXdzLW1zay1tY3Atc2VydmVyJTQwbGF0ZXN0JTIwLS1hbGxvdy13cml0ZXMlMjIlMkMlMjJlbnYlMjIlM0ElN0IlMjJGQVNUTUNQX0xPR19MRVZFTCUyMiUzQSUyMkVSUk9SJTIyJTdEJTJDJTIyZGlzYWJsZWQlMjIlM0FmYWxzZSUyQyUyMmF1dG9BcHByb3ZlJTIyJTNBJTVCJTVEJTdE) | [](https://insiders.vscode.dev/redirect/mcp/install?name=AWS%20MSK%20MCP%20Server&config=%7B%22command%22%3A%22uvx%22%2C%22args%22%3A%5B%22awslabs.aws-msk-mcp-server%40latest%22%2C%22--allow-writes%22%5D%2C%22env%22%3A%7B%22FASTMCP_LOG_LEVEL%22%3A%22ERROR%22%7D%2C%22disabled%22%3Afalse%2C%22autoApprove%22%3A%5B%5D%7D) |
To use this MCP server with your MCP client, add the following configuration to your MCP client settings:
```json
"awslabs.aws-msk-mcp-server": {
"command": "uvx",
"args": [
"awslabs.aws-msk-mcp-server@latest",
"--allow-writes"
],
"env": {
"FASTMCP_LOG_LEVEL": "ERROR"
},
"disabled": false,
"autoApprove": []
}
```
### Windows Installation
For Windows users, the MCP server configuration format is slightly different:
```json
{
"mcpServers": {
"awslabs.aws-msk-mcp-server": {
"disabled": false,
"timeout": 60,
"type": "stdio",
"command": "uv",
"args": [
"tool",
"run",
"--from",
"awslabs.aws-msk-mcp-server@latest",
"awslabs.aws-msk-mcp-server.exe"
],
"env": {
"FASTMCP_LOG_LEVEL": "ERROR",
"AWS_PROFILE": "your-aws-profile",
"AWS_REGION": "us-east-1"
}
}
}
}
```
Alternatively, you can use the MCP Inspector to test the server:
```bash
npx @modelcontextprotocol/inspector \
uv \
--directory <absolute path to your server code> \
run \
server.py
```
### AWS Credentials
The server requires AWS credentials to access MSK resources. These can be provided through:
1. Environment variables (`AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, `AWS_SESSION_TOKEN`)
2. AWS credentials file (`~/.aws/credentials`)
3. IAM roles for Amazon EC2 or ECS tasks
### Server Configuration Options
#### `--allow-writes`
By default, the MSK MCP server runs in write mode.
To disable write operations, remove the `--allow-writes` parameter to your MCP client configuration:
```json
"args": [
"--directory",
"<absolute path to your server code>",
"run",
"server.py"
//Removed "--allow-writes"
]
```
In this mode, only read operations (tools in directories prefixed with "read_") and utility tools are available. Write operations (tools in directories prefixed with "mutate_") are disabled.
#### Region Selection
Most tools require specifying an AWS region. The server will prompt for a region if one is not provided.
## Example Use Cases
- Creating and configuring new MSK clusters
- Monitoring cluster performance and health
- Implementing best practices for MSK clusters
- Managing security and access controls
- Troubleshooting cluster issues
Raw data
{
"_id": null,
"home_page": null,
"name": "awslabs.aws-msk-mcp-server",
"maintainer": null,
"docs_url": null,
"requires_python": ">=3.10",
"maintainer_email": null,
"keywords": null,
"author": "Amazon Web Services",
"author_email": "AWSLabs MCP <203918161+awslabs-mcp@users.noreply.github.com>, Ryan Song <songry@amazon.com>",
"download_url": "https://files.pythonhosted.org/packages/ce/a1/a330f0664f2c140534760bbd2bb661c73cb97a5302bd6bac0338c9dc34f3/awslabs_aws_msk_mcp_server-0.0.8.tar.gz",
"platform": null,
"description": "# AWS Labs aws-msk MCP Server\n\nAn AWS Labs Model Context Protocol (MCP) server for Amazon Managed Streaming for Kafka (MSK).\n\n## Overview\n\nThe AWS MSK MCP Server provides a set of tools for interacting with Amazon MSK through the Model Context Protocol. It enables AI assistants to manage, monitor, and optimize Amazon MSK clusters by providing structured access to MSK APIs.\n\n## Features\n\n- **Cluster Management**: Create, describe, and update MSK clusters (both provisioned and serverless)\n- **Configuration Management**: Create and manage MSK configurations\n- **VPC Connection Management**: Create, describe, and manage VPC connections\n- **Monitoring and Telemetry**: Access cluster metrics, logs, and operational data\n- **Security Management**: Configure authentication, encryption, and access policies\n- **Best Practices**: Get recommendations for cluster sizing, configuration, and performance optimization\n- **Read-Only Mode**: Server runs in write mode by default, switch to read-only to protect against accidental modifications\n\n## Tools\n\n### Cluster Operations\n\n- **describe_cluster_operation**: Gets information about a specific cluster operation\n- **get_cluster_info**: Retrieves various types of information about MSK clusters\n- **get_global_info**: Gets global information about MSK resources\n- **create_cluster**: Creates a new MSK cluster (provisioned or serverless)\n- **update_broker_storage**: Updates storage size of brokers\n- **update_broker_type**: Updates broker instance type\n- **update_broker_count**: Updates number of brokers in a cluster\n- **update_cluster_configuration**: Updates configuration of a cluster\n- **update_monitoring**: Updates monitoring settings\n- **update_security**: Updates security settings\n- **reboot_broker**: Reboots brokers in a cluster\n\n### Configuration Operations\n\n- **get_configuration_info**: Gets information about MSK configurations\n- **create_configuration**: Creates a new MSK configuration\n- **update_configuration**: Updates an existing configuration\n\n### VPC Operations\n\n- **describe_vpc_connection**: Gets information about a VPC connection\n- **create_vpc_connection**: Creates a new VPC connection\n- **delete_vpc_connection**: Deletes a VPC connection\n- **reject_client_vpc_connection**: Rejects a client VPC connection request\n\n### Security Operations\n\n- **put_cluster_policy**: Puts a resource policy on a cluster\n- **associate_scram_secret**: Associates SCRAM secrets with a cluster\n- **disassociate_scram_secret**: Disassociates SCRAM secrets from a cluster\n- **list_tags_for_resource**: Lists all tags for an MSK resource\n- **tag_resource**: Adds tags to an MSK resource\n- **untag_resource**: Removes tags from an MSK resource\n- **list_customer_iam_access**: Lists IAM access information for a cluster\n\n### Monitoring and Best Practices\n\n- **get_cluster_telemetry**: Retrieves telemetry data for MSK clusters\n- **get_cluster_best_practices**: Gets best practices and recommendations for MSK clusters\n\n## Usage\n\nThis MCP server can be used by AI assistants to help users manage their Amazon MSK resources. It provides structured access to MSK APIs, making it easier for AI to understand and interact with MSK clusters.\n\n## Prerequisites\n\n1. Install `uv` from [Astral](https://docs.astral.sh/uv/getting-started/installation/) or the [GitHub README](https://github.com/astral-sh/uv#installation)\n2. Install Python using `uv python install 3.10`\n3. Set up AWS credentials with access to AWS services\n - You need an AWS account with appropriate permissions\n - Configure AWS credentials with profile name 'default' with `aws configure` or environment variables\n\n### Installation\n\n| Cursor | VS Code |\n|:------:|:-------:|\n| [](https://cursor.com/en/install-mcp?name=awslabs.aws-msk-mcp-server&config=JTdCJTIyY29tbWFuZCUyMiUzQSUyMnV2eCUyMGF3c2xhYnMuYXdzLW1zay1tY3Atc2VydmVyJTQwbGF0ZXN0JTIwLS1hbGxvdy13cml0ZXMlMjIlMkMlMjJlbnYlMjIlM0ElN0IlMjJGQVNUTUNQX0xPR19MRVZFTCUyMiUzQSUyMkVSUk9SJTIyJTdEJTJDJTIyZGlzYWJsZWQlMjIlM0FmYWxzZSUyQyUyMmF1dG9BcHByb3ZlJTIyJTNBJTVCJTVEJTdE) | [](https://insiders.vscode.dev/redirect/mcp/install?name=AWS%20MSK%20MCP%20Server&config=%7B%22command%22%3A%22uvx%22%2C%22args%22%3A%5B%22awslabs.aws-msk-mcp-server%40latest%22%2C%22--allow-writes%22%5D%2C%22env%22%3A%7B%22FASTMCP_LOG_LEVEL%22%3A%22ERROR%22%7D%2C%22disabled%22%3Afalse%2C%22autoApprove%22%3A%5B%5D%7D) |\n\nTo use this MCP server with your MCP client, add the following configuration to your MCP client settings:\n\n```json\n\"awslabs.aws-msk-mcp-server\": {\n \"command\": \"uvx\",\n \"args\": [\n \"awslabs.aws-msk-mcp-server@latest\",\n \"--allow-writes\"\n ],\n \"env\": {\n \"FASTMCP_LOG_LEVEL\": \"ERROR\"\n },\n \"disabled\": false,\n \"autoApprove\": []\n}\n```\n### Windows Installation\n\nFor Windows users, the MCP server configuration format is slightly different:\n\n```json\n{\n \"mcpServers\": {\n \"awslabs.aws-msk-mcp-server\": {\n \"disabled\": false,\n \"timeout\": 60,\n \"type\": \"stdio\",\n \"command\": \"uv\",\n \"args\": [\n \"tool\",\n \"run\",\n \"--from\",\n \"awslabs.aws-msk-mcp-server@latest\",\n \"awslabs.aws-msk-mcp-server.exe\"\n ],\n \"env\": {\n \"FASTMCP_LOG_LEVEL\": \"ERROR\",\n \"AWS_PROFILE\": \"your-aws-profile\",\n \"AWS_REGION\": \"us-east-1\"\n }\n }\n }\n}\n```\n\n\nAlternatively, you can use the MCP Inspector to test the server:\n\n```bash\nnpx @modelcontextprotocol/inspector \\\n uv \\\n --directory <absolute path to your server code> \\\n run \\\n server.py\n```\n\n### AWS Credentials\n\nThe server requires AWS credentials to access MSK resources. These can be provided through:\n\n1. Environment variables (`AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, `AWS_SESSION_TOKEN`)\n2. AWS credentials file (`~/.aws/credentials`)\n3. IAM roles for Amazon EC2 or ECS tasks\n\n### Server Configuration Options\n\n#### `--allow-writes`\n\nBy default, the MSK MCP server runs in write mode.\n\nTo disable write operations, remove the `--allow-writes` parameter to your MCP client configuration:\n\n```json\n\"args\": [\n \"--directory\",\n \"<absolute path to your server code>\",\n \"run\",\n \"server.py\"\n //Removed \"--allow-writes\"\n]\n```\n\nIn this mode, only read operations (tools in directories prefixed with \"read_\") and utility tools are available. Write operations (tools in directories prefixed with \"mutate_\") are disabled.\n\n#### Region Selection\n\nMost tools require specifying an AWS region. The server will prompt for a region if one is not provided.\n\n## Example Use Cases\n\n- Creating and configuring new MSK clusters\n- Monitoring cluster performance and health\n- Implementing best practices for MSK clusters\n- Managing security and access controls\n- Troubleshooting cluster issues\n",
"bugtrack_url": null,
"license": "Apache-2.0",
"summary": "An AWS Labs Model Context Protocol (MCP) server for aws-msk",
"version": "0.0.8",
"project_urls": {
"changelog": "https://github.com/awslabs/mcp/blob/main/src/aws-msk-mcp-server/CHANGELOG.md",
"docs": "https://awslabs.github.io/mcp/servers/aws-msk-mcp-server/",
"documentation": "https://awslabs.github.io/mcp/servers/aws-msk-mcp-server/",
"homepage": "https://awslabs.github.io/mcp/",
"repository": "https://github.com/awslabs/mcp.git"
},
"split_keywords": [],
"urls": [
{
"comment_text": null,
"digests": {
"blake2b_256": "b6f63531d29782e814e61d3eb76d070ece9a2a4b278e2d321011010be5ac0712",
"md5": "76294ae8e08d5b47f1480dac112e857a",
"sha256": "ad8ae173cfd378a01698a58f1420a1e2ff772eae4e3ef870c690fa507cf543eb"
},
"downloads": -1,
"filename": "awslabs_aws_msk_mcp_server-0.0.8-py3-none-any.whl",
"has_sig": false,
"md5_digest": "76294ae8e08d5b47f1480dac112e857a",
"packagetype": "bdist_wheel",
"python_version": "py3",
"requires_python": ">=3.10",
"size": 94341,
"upload_time": "2025-10-13T20:47:56",
"upload_time_iso_8601": "2025-10-13T20:47:56.698935Z",
"url": "https://files.pythonhosted.org/packages/b6/f6/3531d29782e814e61d3eb76d070ece9a2a4b278e2d321011010be5ac0712/awslabs_aws_msk_mcp_server-0.0.8-py3-none-any.whl",
"yanked": false,
"yanked_reason": null
},
{
"comment_text": null,
"digests": {
"blake2b_256": "cea1a330f0664f2c140534760bbd2bb661c73cb97a5302bd6bac0338c9dc34f3",
"md5": "618266b2be0580c91a4d90b0784f33fc",
"sha256": "20b441d40fe735a8a2e2fe8e41efec4555f9be6aefa90c591be28b2c6b71be13"
},
"downloads": -1,
"filename": "awslabs_aws_msk_mcp_server-0.0.8.tar.gz",
"has_sig": false,
"md5_digest": "618266b2be0580c91a4d90b0784f33fc",
"packagetype": "sdist",
"python_version": "source",
"requires_python": ">=3.10",
"size": 156657,
"upload_time": "2025-10-13T20:47:58",
"upload_time_iso_8601": "2025-10-13T20:47:58.987610Z",
"url": "https://files.pythonhosted.org/packages/ce/a1/a330f0664f2c140534760bbd2bb661c73cb97a5302bd6bac0338c9dc34f3/awslabs_aws_msk_mcp_server-0.0.8.tar.gz",
"yanked": false,
"yanked_reason": null
}
],
"upload_time": "2025-10-13 20:47:58",
"github": true,
"gitlab": false,
"bitbucket": false,
"codeberg": false,
"github_user": "awslabs",
"github_project": "mcp",
"travis_ci": false,
"coveralls": false,
"github_actions": true,
"lcname": "awslabs.aws-msk-mcp-server"
}
JSON
