Registry / aws / awslabs-well-architected-security-mcp-server

awslabs-well-architected-security-mcp-server

library0.1.7pypypiunverified

A Model Context Protocol (MCP) server that provides AWS Well-Architected Security best-practice assessments and guidance. Version 0.1.7, released monthly-ish.

aws llm-agents

pip install awslabs-well-architected-security-mcp-server

package ↗

INSTALL

IMPORT

SIG · AWSLABS-WELL-ARCHI

awslabs-well-architected-security-mcp-server

awspythonv0.1.7

Install

13.5s avg

Import

—

Disk

151MB

Pass rate

8/ 10

Env Coverage8 / 10

glibc

3.9–3.13

musl

3.9–3.13

Install & Compatibility

Where this runs

tested against v0.1.7 · pip install

no network on importno background threads

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

glibc

py 3.10

✓ —

✓ 16.2s

py 3.11

✓ —

✓ 14.3s

py 3.12

✓ —

✓ 11.7s

py 3.13

✓ —

✓ 11.7s

py 3.9

✕ build_error

151MB installed

● package 151MB

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

WellArchitectedSecurityMCPServer

✓ from awslabs.well_architected_security_mcp_server import WellArchitectedSecurityMCPServer

✗ from well_architected_security_mcp_server import WellArchitectedSecurityMCPServer

Starts the MCP server for AWS Well-Architected Security assessments.

import os from well_architected_security_mcp_server import run_server # Ensure AWS credentials are configured (e.g., via AWS_PROFILE or env vars) os.environ.get('AWS_PROFILE', 'default') run_server()

Debug

Known issues

gotchaRequires AWS credentials with permissions for wellarchitected:ListWorkloads, wellarchitected:GetWorkload, wellarchitected:ListLensReviews, and wellarchitected:GetLensReviewReport.

fix

Ensure the AWS credentials used (via environment variables, AWS profile, or IAM role) have the required permissions. Attach the AWSWellArchitectedConsoleFullAccess managed policy or craft a custom policy.

affects: all

gotchaThe server binds to localhost:8080 by default; if the port is already in use or blocked, the server will fail to start.

fix

Override port via environment variable MCP_SERVER_PORT or modify the source code (currently no CLI argument). Use a different port or ensure 8080 is free.

affects: all

deprecatedAs of v0.1.5, the function `start_server` was renamed to `run_server`. Old code using `start_server` will break.

fix

Replace `from well_architected_security_mcp_server import start_server` with `from well_architected_security_mcp_server import run_server`.

affects: >=0.1.5

Upgrade

Version history

0.1.7latest on PyPI · released Mar 6, 2026

Audit

Dependencies

boto3requiredAWS SDK for interacting with Well-Architected Tool API

mcprequiredModel Context Protocol library

Agent activity

18 hits · last 30 days

node

OpenAI (training)

Resources

packagehttps://pypi.org/project/awslabs-well-architected-security-mcp-server/ ↗