mcp/iam-mcp-server pulls statistics

AWS IAM MCP Server

IAM user, role, group, and policy management.

What is an MCP Server?

MCP Info

Attribute	Details
Docker Image	mcp/iam-mcp-server
Author	awslabs
Repository	https://github.com/awslabs/mcp

Image Building Info

Attribute	Details
Dockerfile	https://github.com/awslabs/mcp/blob/636aca8e109b5559006044f035bb89c16e9e5410/src/iam-mcp-server/Dockerfile
Commit	636aca8e109b5559006044f035bb89c16e9e5410
Docker Image built by	Docker Inc.
Docker Scout Health Score
Verify Signature	COSIGN_REPOSITORY=mcp/signatures cosign verify mcp/iam-mcp-server --key https://raw.githubusercontent.com/docker/keyring/refs/heads/main/public/mcp/latest.pub
Licence	Apache License 2.0

Available Tools (29)

Tools provided by this Server	Short Description
add_user_to_group	Add a user to an IAM group.
attach_group_policy	Attach a managed policy to an IAM group.
attach_user_policy	Attach a managed policy to an IAM user.
create_access_key	Create a new access key for an IAM user.
create_group	Create a new IAM group.
create_role	Create a new IAM role.
create_user	Create a new IAM user.
delete_access_key	Delete an access key for an IAM user.
delete_group	Delete an IAM group.
delete_role_policy	Delete an inline policy from an IAM role.
delete_user	Delete an IAM user.
delete_user_policy	Delete an inline policy from an IAM user.
detach_group_policy	Detach a managed policy from an IAM group.
detach_user_policy	Detach a managed policy from an IAM user.
get_group	Get detailed information about a specific IAM group.
get_managed_policy_document	Retrieve the policy document for a managed policy.
get_role_policy	Retrieve an inline policy for an IAM role.
get_user	Get detailed information about a specific IAM user.
get_user_policy	Retrieve an inline policy for an IAM user.
list_groups	List IAM groups in the account.
list_policies	List IAM policies in the account.
list_role_policies	List all inline policies for an IAM role.
list_roles	List IAM roles in the account.
list_user_policies	List all inline policies for an IAM user.
list_users	List IAM users in the account.
put_role_policy	Create or update an inline policy for an IAM role.
put_user_policy	Create or update an inline policy for an IAM user.
remove_user_from_group	Remove a user from an IAM group.
simulate_principal_policy	Simulate IAM policy evaluation for a principal.

---

Tools Details

Tool: add_user_to_group

Add a user to an IAM group.

Parameters	Type	Description
group_name	string	The name of the IAM group
user_name	string	The name of the IAM user
confirmed	boolean optional	Must be true to confirm this write operation

---

Tool: attach_group_policy

Attach a managed policy to an IAM group.

Parameters	Type	Description
group_name	string	The name of the IAM group
policy_arn	string	The ARN of the policy to attach
confirmed	boolean optional	Must be true to confirm this write operation

---

Tool: attach_user_policy

Attach a managed policy to an IAM user.

Parameters	Type	Description
policy_arn	string	The ARN of the policy to attach
user_name	string	The name of the IAM user
confirmed	boolean optional	Must be true to confirm this write operation

---

Tool: create_access_key

Create a new access key for an IAM user.

Parameters	Type	Description
user_name	string	The name of the IAM user
confirmed	boolean optional	Must be true to confirm this write operation

---

Tool: create_group

Create a new IAM group.

This tool creates a new IAM group in your AWS account. The group will be created without any permissions by default - you'll need to attach policies separately.

Security Best Practices:

• Use descriptive group names that indicate the group's purpose
• Set appropriate paths for organizational structure
• Follow the principle of least privilege when assigning permissions later Parameters|Type|Description -|-|- group_name|string|The name of the new IAM group confirmed|boolean optional|Must be true to confirm this write operation path|string optional|The path for the group

---

Tool: create_role

Create a new IAM role.

Parameters	Type	Description
assume_role_policy_document	string	The trust policy document in JSON format (string or dict)
role_name	string	The name of the new IAM role
confirmed	boolean optional	Must be true to confirm this write operation
description	string optional	Description of the role
max_session_duration	integer optional	Maximum session duration in seconds (3600-43200)
path	string optional	The path for the role
permissions_boundary	string optional	ARN of the permissions boundary policy

---

Tool: create_user

Create a new IAM user.

This tool creates a new IAM user in your AWS account. The user will be created without any permissions by default - you'll need to attach policies separately.

Security Best Practices:

• Use descriptive user names that indicate the user's role or purpose
• Set appropriate paths for organizational structure
• Consider using permissions boundaries to limit maximum permissions
• Follow the principle of least privilege when assigning permissions later Parameters|Type|Description -|-|- ctx|string|MCP context for error reporting user_name|string|The name of the new IAM user confirmed|boolean optional|Must be true to confirm this write operation path|string optional|The path for the user permissions_boundary|string optional|ARN of the permissions boundary policy…