What is AWS Service Authorization Reference?
AWS Service Authorization Reference is a documentation resource that provides exhaustive reference data on all IAM Actions, Resources, and Condition Keys for AWS services, consolidating information that was previously scattered across multiple service documentations.
How to use AWS Service Authorization Reference?
To use the AWS Service Authorization Reference, you can run the MCP server using Docker or uv. For Docker, use the command: docker run -i --rm psantus86/aws-service-authorization-reference-mcp-server:latest. For uv, run uv build followed by uv run main.py.
Key features of AWS Service Authorization Reference?
- Access to comprehensive IAM actions, resources, and condition keys for AWS services.
- Programmatic support for retrieving service codes, actions, resources, and condition keys.
- Debugging capabilities using the MCP inspector.
Use cases of AWS Service Authorization Reference?
- Retrieving IAM actions for specific AWS services.
- Accessing resources and condition keys for AWS service actions.
- Debugging and inspecting the MCP server for development purposes.
FAQ from AWS Service Authorization Reference?
- What is the purpose of the AWS Service Authorization Reference?
It consolidates IAM actions, resources, and condition keys into a single reference point for easier access and understanding.
- Is there a cost associated with using the AWS Service Authorization Reference?
No, it is free to use as part of the AWS documentation and tools.
- How can I contribute to the AWS Service Authorization Reference?
You can contribute by providing feedback or suggestions through the project's GitHub repository.
AWS Service Reference Information MCP Server
A Model Context Protocol server providing access to AWS Service Reference Information. This server enables LLMs to retrieve IAM actions, resources and conditions keys.
What is AWS Service Authorization Reference?
AWS Service Authorization Reference is a piece of documentation available here where AWS gives exhaustive reference data on all IAM Actions, Resources and Condition Keys, grouping information that was otherwise scattered across multiple service documentations.
In 2024, AWS added programmatic support to access this data.
Since March 13, 2025, Service Reference Information includes Resources and Condition Keys.
Available Tools
retrieve_service_codes- Lists all service codes for which we have documentation availableretrieve_service_stats- Tells how many Actions, Resources and Condition Keys are documented.service(string, required): the code of the service
retrieve_service_actions- A comma-separeted list of all actions for a serviceservice(string, required): the code of the service
retrieve_service_resources- A comma-separeted list of all resources for a serviceservice(string, required): the code of the service
retrieve_service_condition_keys- A comma-separeted list of all conditions keys for a serviceservice(string, required): the code of the service
retrieve_service_action_information- Retrieve the authorization reference data (resources and condition keys) for a single AWS service actionservice(string, required): the code of the serviceaction(string, required): the code of the action
retrieve_service_resource_information- Retrieve the authorization reference data (resources and condition keys) for a single AWS service actionservice(string, required): the code of the serviceresource(string, required): the code of the action
retrieve_service_condition_key_information- Retrieve the authorization reference data (resources and condition keys) for a single AWS service actionservice(string, required): the code of the servicecondition_key(string, required): the code of the action
Installation
Using uv
With uv no specific installation is needed. Run uv build then uv run main.py.
Configuration
Configure for Claude.app
Add to your Claude settings:
Using uv
"mcpServers": {
"aws-service-authorization-reference": {
"command": "uv",
"args": [
"--directory",
"/root/to/folder/aws-service-authorization-reference",
"run",
"main.py"
]
}
}
Using docker
"mcpServers": {
"aws-service-authorization-reference": {
"command": "docker",
"args": ["run", "-i", "--rm", "psantus86/aws-service-authorization-reference-mcp-server:latest"]
}
}
Debugging
You can use the MCP inspector to debug the server. For uv installations:
npx @modelcontextprotocol/inspector \
uv \
--directory /Root/to/folder/aws-service-authorization-reference \
run \
main.py
License
aws-service-authorization-reference MCP Server is licensed under the MIT License. This means you are free to use, modify, and distribute the software, subject to the terms and conditions of the MIT License. For more details, please see the LICENSE file in the project repository.
