AWS Application Discovery ServiceMCP Configuration & Schema Registry
The AWS Application Discovery Service Model Context Protocol (MCP) configuration provides a validated, machine-readable JSON schema and executable bridge that connects state-of-the-art AI coding assistants — including Claude Desktop, Cursor IDE, Windsurf, Cline, and VS Code Copilot — directly to the AWS Application Discovery Service REST API. By leveraging the standardized open Model Context Protocol, AI agents can dynamically discover capabilities, validate input parameters against strict JSON Schemas, and execute live API operations without context switching or manual copy-pasting.
Quick Specs & Integration Summary
Technical Architecture & Protocol Semantics
Under the Model Context Protocol specification, the AWS Application Discovery Service configuration functions as an isolated protocol adapter. When an AI agent initializes a session, the client establishes a bidirectional JSON-RPC 2.0 communication channel over standard input/output (stdio) or Server-Sent Events (SSE). During the initial handshake, the server publishes its tool manifest extracted from the AWS Application Discovery Service OpenAPI specification (version 2015-11-01).
The AWS Application Discovery Service, provided by Amazon Web Services (AWS), is a foundational tool designed to simplify and de-risk the complex process of migrating on-premises data center environments to the cloud. Its core capability lies in the automated discovery, collection, and analysis of critical infrastructure data, including server configurations, performance metrics, utilization patterns, and network dependencies. By deploying lightweight agents on physical servers or VMs, or by leveraging agentless discovery through existing data sources like VMware vCenter, the service constructs a detailed inventory and dependency map of the application portfolio. This data is instrumental for enterprise migration planning, enabling accurate Total Cost of Ownership (TCO) calculations for AWS migration services like AWS Migration Hub, AWS Server Migration Service, and AWS Database Migration Service. Typical use cases include data center consolidation, cloud readiness assessments, application modernization planning, and maintaining an accurate, up-to-date IT asset inventory. When this service's API is exposed as a set of tools via the Model Context Protocol (MCP) to an AI coding assistant, it transforms from a standalone discovery console into a dynamic, programmable resource for intelligent migration orchestration. An AI agent like Claude Desktop or Cline gains the ability to directly interact with the discovery data lifecycle, moving beyond static analysis to perform real-time, contextual operations. The value lies in enabling the AI to act as a migration planner and execution coordinator, automatically enriching application portfolios with discovered infrastructure context, validating migration groupings, and updating project metadata based on live or recent scan data. This integration bridges the gap between descriptive data and actionable insight, allowing the AI to not only read but also actively manage the foundational dataset of a migration project. A developer can instruct the AI agent to perform a variety of dynamic, integrated tasks. For example, they can command it to "Create a new application container in AWS Application Discovery Service for the 'Customer Portal' project and associate the previously discovered servers identified by their configuration IDs." The AI would execute the `CreateApplication` and `AssociateConfigurationItemsToApplication` calls sequentially. Another workflow could involve the instruction: "Generate a summary report of all exported configuration data from the last month, identify any servers with less than 20% CPU utilization, and tag those servers in the discovery service with 'LowUtilization' for later decommission analysis." This would combine `DescribeExportConfigurations` to find the data, process the information, and then use `CreateTags` to update the asset records. Furthermore, an agent could be tasked to "Clean up test data by deleting the staging application and all its associated import records," which would trigger `DeleteApplications` followed by `BatchDeleteImportData`. Secure integration with the AWS Application Discovery Service API is paramount. Although the endpoint authentication mechanism is listed as "None," this refers to the direct HTTP endpoint signature; in practice, all API calls must be authenticated and authorized using AWS Identity and Access Management (IAM). Developers must configure the AI agent's execution environment with secure AWS credentials, preferably via an IAM role with temporary credentials (e.g., AWS STS AssumeRole) rather than long-lived access keys. The principle of least privilege is critical; the IAM policy attached to the role or user should grant only the specific permissions required for the intended tasks (e.g., `discovery:CreateApplication`, `discovery:DescribeAgents`), and should be scoped to the relevant AWS account and, if possible, specific resources. All communication should be secured with TLS, and audit logs via AWS CloudTrail should be enabled to monitor all API activity for compliance and forensic analysis. This architecture guarantees strict process boundary isolation: all sensitive authorization headers and secret tokens remain sandboxed inside the client runtime, never leaking into language model context windows or external logging endpoints.
Hosted Remote Configuration URL
MCP Configuration FileProvide this hosted URL in any client that supports remote MCP schema auto-loading.
https://mcpbridge.org/config/amazonaws-com-discovery.json2. AI Assistant Use Cases & Practical Workflows
Tailored for DatabasesReal-world execution scenarios demonstrating how LLM agents (Claude 3.7, GPT-4o, Cursor Agent) invoke AWS Application Discovery Service tools to automate developer workflows.
1. Schema Introspection & Query Plan Optimization
Query OptimizationAllow AI coding assistants in Cursor or Claude Desktop to inspect live database schemas, identify missing indexes, and generate optimized queries.
"Inspect the table schema using AWS Application Discovery Service MCP tools. Analyze index coverage for recent user activity filters and construct an optimized SQL query with EXPLAIN plan recommendations."
2. Real-Time Health & Connection Pool Monitoring
Database ReliabilityDiagnose production latency spikes by checking active connection pool utilization, deadlocks, and slow query execution logs.
"Query AWS Application Discovery Service health and operational metrics. Summarize current active connections, identify any slow query bottlenecks exceeding 250ms, and recommend pool sizing tweaks."
3. Automated ETL Validation & Data Pipeline Sync
Data PipelinesExtract recent mutation batches, validate record field types against destination schemas, and output migration statistics.
"Retrieve records modified in the last 24 hours via AWS Application Discovery Service. Validate each record schema against our target interface and output a batch migration summary report."
4. Backup Verification & Disaster Recovery Audit
Disaster RecoveryVerify automated snapshot integrity, inspect point-in-time recovery timestamps, and audit compliance retention windows.
"List recent automated snapshot backups in AWS Application Discovery Service. Confirm that the most recent snapshot completed successfully within the last 6 hours and report retention metadata."
End-to-End Multi-Step Agent Execution Lifecycle
When an engineer submits a task to Claude Desktop or Cursor, the LLM executes an autonomous 4-phase Model Context Protocol loop:
Schema Introspection
Handshake lists all 10 tools and builds argument validators.
Argument Synthesis
Model extracts parameters from prompt and validates types against OpenAPI rules.
Stdio Execution
Bridge invokes live API with injected local credentials and captures raw HTTP response.
Output Remediation
LLM parses JSON results, handles status codes, and presents synthesized answers.
3. Multi-Client Installation Matrix & Setup Guides
Select your AI assistant below to view exact configuration file paths, JSON installation snippets, and launch commands.
Claude Desktop
claude_desktop_config.json~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json~/.config/Claude/claude_desktop_config.json{
"mcpServers": {
"amazonaws-com-discovery": {
"command": "npx",
"args": [
"-y",
"@modelcontextprotocol/server-openapi",
"https://api.apis.guru/v2/specs/amazonaws.com/discovery/2015-11-01/openapi.json"
],
"env": {
"AWS_APPLICATION_DISCOVERY_SERVICE_API_KEY": "your_aws_application_discovery_service_api_key"
}
}
}
}Cursor IDE
.cursor/mcp.jsonOpen Cursor Settings → Features → MCP Servers, or create .cursor/mcp.json in your project root.
{
"mcpServers": {
"amazonaws-com-discovery": {
"command": "npx",
"args": [
"-y",
"@modelcontextprotocol/server-openapi",
"https://api.apis.guru/v2/specs/amazonaws.com/discovery/2015-11-01/openapi.json"
],
"env": {
"AWS_APPLICATION_DISCOVERY_SERVICE_API_KEY": "your_aws_application_discovery_service_api_key"
}
}
}
}Saves as .cursor/mcp.json in the download. Move it to your project root.
VS Code / Cline Extension
cline_mcp_settings.jsonPaste into your Cline extension MCP configuration or Roo Code host settings.
{
"mcpServers": {
"amazonaws-com-discovery": {
"command": "npx",
"args": [
"-y",
"@modelcontextprotocol/server-openapi",
"https://api.apis.guru/v2/specs/amazonaws.com/discovery/2015-11-01/openapi.json"
],
"env": {
"AWS_APPLICATION_DISCOVERY_SERVICE_API_KEY": "your_aws_application_discovery_service_api_key"
}
}
}
}Zed Editor & Docker CLI
Zed / DockerDocker container execution command:
docker run -i --rm -e AWS_APPLICATION_DISCOVERY_SERVICE_API_KEY="YOUR_SECRET_VALUE" node:20-alpine npx -y @modelcontextprotocol/server-openapi https://api.apis.guru/v2/specs/amazonaws.com/discovery/2015-11-01/openapi.json
Zed settings context servers JSON:
{
"context_servers": {
"amazonaws-com-discovery": {
"command": {
"path": "npx",
"args": [
"-y",
"@modelcontextprotocol/server-openapi",
"https://api.apis.guru/v2/specs/amazonaws.com/discovery/2015-11-01/openapi.json"
],
"env": {
"AWS_APPLICATION_DISCOVERY_SERVICE_API_KEY": "your_aws_application_discovery_service_api_key"
}
}
}
}
}Programmatic SDK Integration (TypeScript / Python)
Initialize the AWS Application Discovery Service MCP client directly in your backend codebase.
import { Client } from "@modelcontextprotocol/sdk/client/index.js";
import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
// Initialize AWS Application Discovery Service MCP client transport over stdio
const transport = new StdioClientTransport({
command: "npx",
args: ["-y","@modelcontextprotocol/server-openapi","https://api.apis.guru/v2/specs/amazonaws.com/discovery/2015-11-01/openapi.json"],
env: { AWS_APPLICATION_DISCOVERY_SERVICE_API_KEY: process.env.AWS_APPLICATION_DISCOVERY_SERVICE_API_KEY || "YOUR_SECRET_KEY" }
});
const client = new Client(
{ name: "amazonaws-com-discovery-client", version: "1.0.0" },
{ capabilities: { tools: {}, resources: {}, prompts: {} } }
);
async function connectAndRun() {
await client.connect(transport);
const tools = await client.listTools();
console.log("Connected to AWS Application Discovery Service MCP Server.");
console.log("Discovered 10 mapped tools:", tools);
}
connectAndRun().catch(console.error);Raw Stdio Schema Definition
schema.jsonFor standalone CLI wrappers, background daemon daemons, or custom script integrations:
{
"mcpServers": {
"amazonaws-com-discovery": {
"command": "npx",
"args": [
"-y",
"@modelcontextprotocol/server-openapi",
"https://api.apis.guru/v2/specs/amazonaws.com/discovery/2015-11-01/openapi.json"
],
"env": {
"AWS_APPLICATION_DISCOVERY_SERVICE_API_KEY": "your_aws_application_discovery_service_api_key"
}
}
}
}4. Security, Authentication & Credential Management
Safely configure authentication tokens, isolate execution environments, and implement enterprise security best practices.
Required Environment Keys Reference
| Variable Name | Required | Type | Default | Purpose & Guidance |
|---|---|---|---|---|
| AWS_APPLICATION_DISCOVERY_SERVICE_API_KEY | REQUIRED | Secret Key / Token | None (Set in env) | your_aws_application_discovery_service_api_key |
Zero-Downtime Token Rotation Protocol
- Generate Secondary Key: Create a new secret API token with identical scopes in your AWS Application Discovery Service developer portal.
- Update Client Configuration: Insert the new token inside the
envblock of your MCP client JSON config. - Validate Connection: Issue a test query in Claude or Cursor to ensure handshake and tool calls succeed.
- Revoke Stale Token: Decommission the legacy key on the vendor portal to prevent unauthorized access.
Least-Privilege & Sandboxing Rules
- Read-Only Token Scoping: Whenever your workflow only requires querying data, provision read-only credentials to prevent accidental mutations.
- Local Process Isolation: Stdio transports run in isolated local subprocesses; secret credentials are never sent across the internet to MCP Bridge servers.
- Prompt Injection Defense: AI model responses are sandboxed; verify generated destructive arguments before confirming execution in agent mode.
Enterprise Security Checklist (Mandatory Practices)
- Never commit
claude_desktop_config.jsonor.cursor/mcp.jsoncontaining raw secrets into public GitHub repositories. - Add
.cursor/mcp.jsonand.env.localto your project's.gitignorefile. - Always enforce TLS/HTTPS encryption on outbound network requests initiated by the server process.
5. Tool Parameter Schemas & Natural Language Execution
Mapped OpenAPI operations converted into discrete Model Context Protocol tools with strict JSON-RPC payload validators.
/#X-Amz-Target=AWSPoseidonService_V2015_11_01.AssociateConfigurationItemsToApplicationAssociateConfigurationItemsToApplication
{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "amazonaws-com-discovery_post_X_Amz_Target_AWSPoseidonService_V2015_11_01_AssociateConfigurationItemsToApplication",
"arguments": {}
}
}"Use AWS Application Discovery Service to execute AssociateConfigurationItemsToApplication and output the formatted result."
/#X-Amz-Target=AWSPoseidonService_V2015_11_01.BatchDeleteImportDataBatchDeleteImportData
{
"jsonrpc": "2.0",
"id": 2,
"method": "tools/call",
"params": {
"name": "amazonaws-com-discovery_post_X_Amz_Target_AWSPoseidonService_V2015_11_01_BatchDeleteImportData",
"arguments": {}
}
}"Use AWS Application Discovery Service to execute BatchDeleteImportData and output the formatted result."
/#X-Amz-Target=AWSPoseidonService_V2015_11_01.CreateApplicationCreateApplication
{
"jsonrpc": "2.0",
"id": 3,
"method": "tools/call",
"params": {
"name": "amazonaws-com-discovery_post_X_Amz_Target_AWSPoseidonService_V2015_11_01_CreateApplication",
"arguments": {}
}
}"Use AWS Application Discovery Service to execute CreateApplication and output the formatted result."
/#X-Amz-Target=AWSPoseidonService_V2015_11_01.CreateTagsCreateTags
{
"jsonrpc": "2.0",
"id": 4,
"method": "tools/call",
"params": {
"name": "amazonaws-com-discovery_post_X_Amz_Target_AWSPoseidonService_V2015_11_01_CreateTags",
"arguments": {}
}
}"Use AWS Application Discovery Service to execute CreateTags and output the formatted result."
/#X-Amz-Target=AWSPoseidonService_V2015_11_01.DeleteApplicationsDeleteApplications
{
"jsonrpc": "2.0",
"id": 5,
"method": "tools/call",
"params": {
"name": "amazonaws-com-discovery_post_X_Amz_Target_AWSPoseidonService_V2015_11_01_DeleteApplications",
"arguments": {}
}
}"Use AWS Application Discovery Service to execute DeleteApplications and output the formatted result."
/#X-Amz-Target=AWSPoseidonService_V2015_11_01.DeleteTagsDeleteTags
{
"jsonrpc": "2.0",
"id": 6,
"method": "tools/call",
"params": {
"name": "amazonaws-com-discovery_post_X_Amz_Target_AWSPoseidonService_V2015_11_01_DeleteTags",
"arguments": {}
}
}"Use AWS Application Discovery Service to execute DeleteTags and output the formatted result."
/#X-Amz-Target=AWSPoseidonService_V2015_11_01.DescribeAgentsDescribeAgents
{
"jsonrpc": "2.0",
"id": 7,
"method": "tools/call",
"params": {
"name": "amazonaws-com-discovery_post_X_Amz_Target_AWSPoseidonService_V2015_11_01_DescribeAgents",
"arguments": {}
}
}"Use AWS Application Discovery Service to execute DescribeAgents and output the formatted result."
/#X-Amz-Target=AWSPoseidonService_V2015_11_01.DescribeConfigurationsDescribeConfigurations
{
"jsonrpc": "2.0",
"id": 8,
"method": "tools/call",
"params": {
"name": "amazonaws-com-discovery_post_X_Amz_Target_AWSPoseidonService_V2015_11_01_DescribeConfigurations",
"arguments": {}
}
}"Use AWS Application Discovery Service to execute DescribeConfigurations and output the formatted result."
6. Interactive Troubleshooting & FAQ Accordion
Diagnose and resolve common JSON-RPC protocol error codes, connection disconnects, and schema refresh issues.
A 401 Unauthorized response indicates that the upstream AWS Application Discovery Service API rejected the authentication credential supplied in your MCP client's environment configuration. To resolve this: (1) Verify that your secret token is defined inside the "env" block of claude_desktop_config.json or .cursor/mcp.json rather than hardcoded in the command string. (2) Check whether AWS Application Discovery Service requires a prefix such as "Bearer <token>" in the authorization header. (3) Confirm that your API key has not expired and has been granted sufficient least-privilege scopes on the AWS Application Discovery Service developer dashboard.
If your MCP client fails to initialize tools for AWS Application Discovery Service: (1) Test the bridge launcher command ("npx -y @modelcontextprotocol/server-openapi https://api.apis.guru/v2/specs/amazonaws.com/discovery/2015-11-01/openapi.json") directly inside your terminal or shell to inspect stdout/stderr diagnostic traces. (2) Verify network connectivity to the schema source (https://api.apis.guru/v2/specs/amazonaws.com/discovery/2015-11-01/openapi.json). (3) Ensure Node.js (v18+) is installed and accessible in your system PATH. (4) For authenticated APIs, confirm credentials are configured in your client's "env" mapping rather than command arguments.
MCP clients like Claude Desktop and Cursor query the server's tools list ("tools/list") during startup and cache the resulting JSON Schema for the duration of the application session. If new endpoints or parameters are added to AWS Application Discovery Service: (1) Fully quit and restart Claude Desktop (Cmd+Q on macOS or File > Exit on Windows). (2) In Cursor IDE, navigate to Settings > Features > MCP Servers, toggle the AWS Application Discovery Service server off and on, or click the refresh icon to re-execute the initialization handshake.
If the AI model hallucinates parameters or fails to invoke a tool automatically: (1) Add explicit system instructions in your project's .cursorrules or Claude project prompt (e.g., "When querying Databases, always invoke the amazonaws-com-discovery MCP server tools first"). (2) Ensure parameter types match schema specifications (e.g., passing integers as numbers rather than strings). (3) Check that required parameters marked in Section 5 are not omitted from the model's generated payload.
When the AWS Application Discovery Service upstream endpoint returns an HTTP 429 Too Many Requests response, the MCP server bubbles the structured error payload back to the AI client over stdio. Modern LLMs like Claude 3.7 and Cursor Agent recognize rate-limiting status codes, inspect the "Retry-After" header if present, and will automatically introduce backoff delays or ask the user before retrying the operation.
The Hosted Config URL (https://mcpbridge.org/config/amazonaws-com-discovery.json) provides a static, remote JSON schema definition that cloud-native MCP clients can fetch over HTTPS for dynamic discovery. In contrast, local stdio configurations execute a local subprocess on your workstation. Local stdio processes offer maximum security because secret API keys remain strictly on your local machine and never transit third-party proxy servers.
Similar Databases Configurations
Explore related API bridges with ready-to-use Model Context Protocol schemas.
PostgreSQL (MCP)
DatabasesQuery and manage PostgreSQL databases directly from your AI agent. Read schemas, run queries, and manage data.
https://mcpbridge.org/config/postgres.jsonNotion API
DatabasesThe Notion API is a comprehensive RESTful interface provided by Notion, the popular all-in-one workspace platform, enabling programmatic interaction with its rich set of collaborative objects. It grants developers and automated systems the ability to read, create, update, and manage core Notion entities such as blocks (the fundamental building blocks of content like text, lists, and media), databases (structured tables with properties), pages (containers for content and databases), and comments. Typical use cases span enterprise and consumer scenarios, including automating team workflows, syncing data between Notion and other business systems (like CRM, project management, or analytics tools), building custom dashboards, generating dynamic reports, and enhancing content collaboration through programmatic updates. Organizations leverage this API to break down data silos, enforce process automation, and create tailored integrations that extend Notion's native capabilities for specific departmental or cross-functional needs. When these specific Notion API endpoints are exposed as tools via the Model Context Protocol (MCP) for an AI coding assistant, they transform the assistant from a passive code generator into an active, context-aware collaborator that can directly interact with a team's live knowledge base and operational data. The value lies in dynamic, real-time data access and manipulation within the development workflow. Instead of the developer manually copying data, checking status, or updating records, the AI agent can perform these actions conversationally. For instance, an MCP server implementing these endpoints allows the AI to query a project database to fetch current sprint tasks (using POST /v1/databases/{id}/query), read the details of a specific feature page (GET /v1/pages/{id}), or even update the status of a completed task by patching its block content (PATCH /v1/blocks/{id}). This creates a powerful feedback loop where the AI is grounded in the actual, up-to-date project context, leading to more accurate code suggestions, documentation that reflects current system states, and automated updates that maintain consistency across development and project management tools. Practical workflow examples demonstrate significant productivity gains. A developer can instruct the AI agent: "Query our Notion database of API specs, find the entry for the 'User Auth' endpoint, and use its latest property values to generate a complete OpenAPI 3.0 YAML definition in the current file." The AI would use the database query and page retrieval tools to fetch the live data and produce code. In another scenario, a developer could say, "After we finish refactoring this service, please update the 'Progress' property on our project tracking page for 'Backend Refactor' to 95% and add a comment with the key changes made." The AI would use the PATCH endpoints on the page and blocks to update the database property and append a new comment block, automating routine project management bookkeeping. For incident response, one could command, "Create a new page under our 'Incident Log' database for today's outage, pre-populate the 'Status' and 'Severity' properties, and add an initial block with a summary of the service affected," enabling rapid, structured documentation directly from the chat interface. Critical authentication and security configuration are paramount when setting up an MCP server for the Notion API. While the provided endpoint list omits authentication details, the official Notion API mandates the use of either a Notion Integration (internal integration) or OAuth for accessing a workspace. Developers must first create a Notion Integration via the developer portal to obtain an Internal Integration Token (a secret API key). This token must be securely stored and injected into the MCP server's environment, never exposed in client-side code or version control. The principle of least privilege is essential: the integration's capabilities should be scoped precisely within the Notion workspace, granting access only to the specific databases and pages required for the intended automation, and using read-only permissions where possible. Furthermore, when sharing the MCP server configuration with AI tools, the developer must ensure that the tool's access to the server is itself secured and that all API requests are proxied through a trusted backend to avoid direct exposure of the Notion token to the AI model's runtime environment. Regular review of integration permissions and audit logs is a necessary best practice.
https://mcpbridge.org/config/notion-com.jsonAmazon CloudWatch Application Insights
DatabasesAmazon CloudWatch Application Insights is a specialized observability service provided by Amazon Web Services (AWS) designed to simplify the monitoring and troubleshooting of applications, particularly those built on Microsoft IIS and .NET frameworks running on EC2 instances or within Elastic Beanstalk environments. Its core capability lies in automatically discovering application components, analyzing correlated metrics, logs, and traces to identify anomalies, and then surfacing actionable insights that pinpoint the root cause of common operational issues. By integrating seamlessly with other AWS services like CloudWatch, AWS X-Ray, and AWS Systems Manager, it provides a unified view of application health, reducing the mean time to resolution (MTTR) for performance degradations and errors. The typical use case spans enterprise environments managing distributed microservices or monolithic .NET applications, where teams need to proactively detect issues such as memory leaks, high CPU utilization, or specific application errors without manually configuring complex monitoring dashboards and alarms. When exposed as tools to an AI coding assistant through the Model Context Protocol (MCP), the Amazon CloudWatch Application Insights API becomes a powerful asset for intelligent development and operations automation. An AI agent, such as one integrated into Claude Desktop or Cursor, can leverage these endpoints to perform context-aware diagnostics and infrastructure adjustments directly within a developer's workflow. For instance, an AI could use the `DescribeApplication` and `DescribeComponent` tools to instantly fetch the current health status and configuration of a running application, providing a developer with a real-time summary during a debugging session. It could then utilize `DescribeComponentConfigurationRecommendation` to suggest optimal monitoring settings based on AWS best practices, or dynamically call `CreateLogPattern` to ingest new error logs identified during an AI-assisted code review, thereby automating the setup of precise observability for newly added application features. This transforms the AI from a passive code generator into an active participant in the application lifecycle, capable of bridging the gap between code deployment and operational monitoring. Practical workflows enabled by this MCP integration include dynamic infrastructure provisioning and reactive incident response. A developer could instruct the AI agent: "Analyze the error logs from the last deployment and, if a database connection timeout pattern is detected, create a new CloudWatch Application Insights component for the database tier and configure a log pattern to capture all related timeout events." The AI would execute the sequence by first querying logs, then using `CreateApplication` and `CreateComponent` to structure the monitoring, followed by `CreateLogPattern` to focus on the relevant data. Another scenario involves automated optimization: "Review the current monitoring configuration for my 'Checkout' service, compare it against the recommended settings, and apply the recommendations where they improve visibility into latency." Here, the AI would chain `DescribeComponentConfiguration`, `DescribeComponentConfigurationRecommendation`, and then update the configuration accordingly, automating a best-practice audit that would otherwise require manual console navigation and comparison. Despite the API endpoint listing showing "None" for authentication, all actions within Amazon CloudWatch Application Insights are governed by AWS Identity and Access Management (IAM) policies. Critical security best practices include enforcing the principle of least privilege by granting only the specific permissions required for the intended task, such as `cloudwatch:Describe*` for read-only access or `cloudwatch:Create*` and `cloudwatch:Delete*` for management functions. It is essential to use IAM roles with temporary credentials for any AI agent integration, never embedding long-term access keys in configuration files. Furthermore, network security should be maintained by ensuring the API calls originate from within a trusted VPC or are secured via AWS PrivateLink if applicable, and all access should be monitored and audited through AWS CloudTrail to maintain a compliance trail for any automated changes made by the AI assistant.
https://mcpbridge.org/config/amazonaws-com-application-insights.jsonApplication Auto Scaling
DatabasesThe Application Auto Scaling API, provided by Amazon Web Services (AWS), is a robust service designed to automate the scaling of computing resources for a wide array of AWS services, ensuring optimal performance, availability, and cost efficiency. Its core capability is to define policies that automatically adjust the provisioned capacity of supported resources in response to changing demand, as measured by CloudWatch metrics or predefined schedules. Beyond the initially listed resources, it supports scaling for Amazon DynamoDB tables and global secondary indexes, Amazon ECS services running on Fargate or EC2, Amazon ElastiCache replication groups, Amazon Neptune clusters, Amazon SageMaker endpoint variants, and custom resources via the AWS Lambda-backed scalable target. This makes it a central tool for architects and DevOps engineers in building resilient, self-optimizing cloud architectures. Typical enterprise use cases include dynamically adjusting the number of Aurora read replicas to handle database query load spikes, scaling ECS task counts during peak traffic for a microservices application, or optimizing costs by scaling down SageMaker inference endpoints during off-hours. When exposed as tools to an AI coding assistant via the Model Context Protocol (MCP), this API gains significant contextual power. An AI agent, such as Claude or a specialized coding assistant, can directly inspect, reason about, and manipulate an application's scaling configuration in real-time. The value lies in transforming static infrastructure code or manual console operations into dynamic, conversational management. The AI can query the current scaling state (e.g., "describe all registered scalable targets and their current capacity"), analyze scaling activity logs to diagnose performance issues (e.g., "what scaling activities occurred on my ECS service in the past hour?"), or even propose and validate configuration changes (e.g., "draft a scaling policy to maintain average CPU at 40% for my Aurora cluster"). This creates a powerful feedback loop where the AI assistant can act as an expert collaborator, helping developers quickly understand, debug, and evolve their auto-scaling strategies. Practical workflows enabled by this MCP server are numerous and impactful. A developer could instruct the AI: "List all my scalable targets for Amazon Aurora and describe their current scaling policies to check for misconfigurations." The agent would execute the corresponding DescribeScalableTargets and DescribeScalingPolicies calls, then summarize the findings, perhaps flagging a policy with an aggressive cooldown period. Another dynamic task could be: "For my ECS service named 'checkout-service,' create a scheduled action to scale out to 10 tasks every weekday at 9 AM EST and scale in to 3 tasks at 5 PM EST." The AI would use PutScheduledAction to implement this, verifying the time zone and parameters. Furthermore, an AI agent could be tasked with cleanup and optimization: "Identify any scaling policies for DynamoDB tables that have not triggered a scaling activity in 30 days and suggest whether to keep or delete them, then remove the unused ones." This involves querying DescribeScalingActivities and then calling DeleteScalingPolicy based on the analysis, automating routine maintenance. Critical for implementation are authentication and security, as the API actions perform privileged infrastructure changes. While the endpoint list notes "None" for authentication, in a real-world deployment, this API must be invoked with temporary AWS credentials obtained through an IAM role or user with precisely scoped permissions. Developers must adhere to the principle of least privilege when creating the policy document for the AI assistant's execution role. Permissions should be narrowly tailored to only the necessary actions and resource ARNs. For example, a role might allow `application-autoscaling:DescribeScalableTargets` and `application-autoscaling:PutScalingPolicy` only for a specific service namespace and resource ID, preventing unintended modifications. All API calls should be logged via AWS CloudTrail for auditability. It is also essential to ensure that the MCP server configuration securely manages any AWS credentials or role assumptions, preferably through environment variables or a secure secret manager, and never hardcodes them.
https://mcpbridge.org/config/amazonaws-com-application-autoscaling.json