Registry / aws / awslabs-cloudtrail-mcp-server

awslabs-cloudtrail-mcp-server

library0.0.15pypypiunverified

An AWS Labs MCP (Model Context Protocol) server that provides AI agents with access to AWS CloudTrail logs for security investigation and troubleshooting. Current version 0.0.13, under active development with frequent releases.

aws observability ai-ml

pip install awslabs-cloudtrail-mcp-server

github ↗package ↗homepage ↗docs ↗changelog ↗

INSTALL

IMPORT

SIG · AWSLABS-CLOUDTRAIL

awslabs-cloudtrail-mcp-server

awspythonv0.0.15

Install

9.3s avg

Import

—

Disk

105MB

Pass rate

8/ 10

Env Coverage8 / 10

glibc

3.9–3.13

musl

3.9–3.13

Install & Compatibility

Where this runs

tested against v0.0.15 · pip install

no network on importno background threads

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

glibc

py 3.10

✓ —

✓ 10.9s

py 3.11

✓ —

✓ 10s

py 3.12

✓ —

✓ 8.2s

py 3.13

✓ —

✓ 7.9s

py 3.9

✕ build_error

105MB installed

● package 105MB

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

CloudTrailMCPServer

✓ from awslabs.cloudtrail_mcp_server import CloudTrailMCPServer

✗ from awslabs.cloudtrail_mcp_server import CloudTrailMCPServer

Start the CloudTrail MCP server with AWS credentials.

import os from cloudtrail_mcp_server import CloudTrailMCPServer # Configure AWS credentials (ensure proper IAM permissions) aws_access_key_id = os.environ.get('AWS_ACCESS_KEY_ID', '') aws_secret_access_key = os.environ.get('AWS_SECRET_ACCESS_KEY', '') region = os.environ.get('AWS_DEFAULT_REGION', 'us-east-1') # Initialize and run the server server = CloudTrailMCPServer( aws_access_key_id=aws_access_key_id, aws_secret_access_key=aws_secret_access_key, region=region ) server.run()

cloudtrail-mcp-server --version

Debug

Known issues

breakingPython 3.10 or higher required. The library uses match/case and other 3.10 features.

fix

Upgrade to Python 3.10+ or use an older version (none exist).

affects: <0.0.1

gotchaRequires AWS credentials with cloudtrail:LookupEvents permission. Without proper IAM, the server starts but returns empty results.

fix

Attach a policy like AWSCloudTrailReadOnlyAccess to the IAM user/role.

affects: all

gotchaThe server runs as a subprocess; ensure that the parent process manages its lifecycle to avoid zombie processes.

fix

Use a proper process supervisor or call server.stop() on shutdown.

affects: all

Upgrade

Version history

0.0.15latest on PyPI · released May 9, 2026

Audit

Dependencies

No dependency data recorded yet.

Agent activity

35 hits · last 30 days

node

OpenAI (training)

Resources

githubhttps://github.com/awslabs/mcp ↗

packagehttps://pypi.org/project/awslabs-cloudtrail-mcp-server/ ↗

homepagehttps://awslabs.github.io/mcp/ ↗

docshttps://awslabs.github.io/mcp/servers/cloudtrail-mcp-server/ ↗

changeloghttps://github.com/awslabs/mcp/blob/main/src/cloudtrail-mcp-server/CHANGELOG.md ↗