Skip to content
Cloud InfrastructureAuto-generatedScore: 46

Amazon Elastic Container Registry Public MCP Server

Amazon Elastic Container Registry Public (ECR Public) is a fully managed container image registry service provided by Amazon Web Services (AWS).

Quick Start Summary

The Amazon Elastic Container Registry Public MCP server is a Model Context Protocol bridge that connects AI assistants — including Claude Desktop, Cursor, Windsurf, and VS Code Copilot — to the Amazon Elastic Container Registry Public API through natural language. It exposes 10 API endpoints as callable tools, such as BatchCheckLayerAvailability, BatchDeleteImage, CompleteLayerUpload, and more. No authentication is required — setup takes approximately 30 seconds. The server uses STDIO transport and can be installed by running npx -y @mcp/amazonaws-com-ecr-public. This integration is sourced from the auto Amazon Elastic Container Registry Public OpenAPI specification (v2020-10-30) and has a quality score of 46/99 (fair documentation coverage).

10Endpointstools mapped
NoneAuthopen access
46/99Qualityfair
~30 secSetupno auth

Server Details

Category
Cloud Infrastructure
Authentication
None
Endpoints
10 operations
Transport
STDIO
Spec Version
v2020-10-30
Install Command
npx -y @mcp/amazonaws-com-ecr-public

Environment Variables

AMAZON_ELASTIC_CONTAINER_REGISTRY_PUBLIC_API_KEY

Example: your_amazon_elastic_container_registry_public_api_key

Top Endpoints

POST
/#X-Amz-Target=SpencerFrontendService.BatchCheckLayerAvailability

BatchCheckLayerAvailability

POST
/#X-Amz-Target=SpencerFrontendService.BatchDeleteImage

BatchDeleteImage

POST
/#X-Amz-Target=SpencerFrontendService.CompleteLayerUpload

CompleteLayerUpload

POST
/#X-Amz-Target=SpencerFrontendService.CreateRepository

CreateRepository

POST
/#X-Amz-Target=SpencerFrontendService.DeleteRepository

DeleteRepository

Own this API?

Verify ownership of this listing to control the description, configuration details, and documentation links. Choose between free manual verification or instant premium placement.

Option 1: Free Verification

Slow manual review. Requires creating a GitHub issue with verified documentation or domain verification.

  • • Verified badge on page
  • • Standard search sorting
  • • 2-3 business days review
Start Free Claim →
Instant & Boosted

Option 2: Featured Upgrade($9/mo)

Instant verification plus premium styling, featured badges, and directory placement boost.

  • • ★ Featured star & amber highlight border
  • • Top of directory search placement
  • • Instant activation via claim token

📖 Detailed MCP Integration Guide

A technical breakdown of capabilities, agent workflows, and security/configuration best practices.

Capabilities & Use Cases
Amazon Elastic Container Registry Public (ECR Public) is a fully managed container image registry service provided by Amazon Web Services (AWS). It serves as a high-scale, highly available platform for storing, managing, and distributing Docker container images and OCI (Open Container Initiative) artifacts. At its core, the service enables developers and organizations to publish both public and private container images, facilitating seamless sharing and deployment across cloud environments. Its primary capabilities include the creation and lifecycle management of repositories, the uploading and retrieval of image layers and manifests, detailed image metadata inspection, and policy-based access control. Typical enterprise use cases involve serving as the central artifact repository for microservices architectures, hosting base images for continuous integration and continuous deployment (CI/CD) pipelines, and providing a secure, scalable source for open-source container images. For consumers and development teams, it eliminates the operational burden of managing container registries, offering built-in integration with other AWS services like IAM for authentication and CloudWatch for monitoring, thereby streamlining the container build-and-deploy workflow from code to production.
🤖AI Agent Value
When exposed as tools via the Model Context Protocol (MCP) for integration with an AI coding assistant, the ECR Public API transforms from a set of management endpoints into a dynamic, interactive context for automating and governing container workflows directly within a developer's editing environment. An AI agent leveraging this MCP server moves beyond simple code generation to become an active participant in the DevOps lifecycle. Its value lies in bridging the gap between code authorship and infrastructure management, allowing the assistant to programmatically verify repository states, audit image contents, and execute administrative actions based on the developer's natural language instructions. This integration turns the AI into a proactive collaborator that can ensure consistency, enforce policies, and reduce context-switching, thereby accelerating development cycles and improving the reliability of container-based applications.
💬Example Workflows
Practical workflow examples enabled by this MCP integration are numerous and operationally impactful. A developer can instruct their AI assistant with commands like, "List all repositories in our ECR Public registry and their latest image tags so I can update my deployment manifests," prompting the agent to execute the DescribeRepositories and DescribeImageTags endpoints and present the findings in a readable format. For maintenance, an instruction such as "Delete the old 'dev-environment' repository and all its images to clean up resources" would trigger the DeleteRepository action after the AI agent confirms the target. During development, a user might say, "Create a new repository named 'project-alpha' for our front-end component," leading the AI to invoke CreateRepository and return the repository URI for immediate use in a Dockerfile. Furthermore, the agent can perform security and compliance audits by querying DescribeImages to list images with outdated tags and report findings, or by using BatchCheckLayerAvailability to verify the integrity of specific image layers before a deployment.
🛡️Security & Auth
Critical to the setup and secure use of this API via an MCP server is the management of authentication and authorization, despite the initial API description noting "None" for certain endpoints. In practice, all mutating operations against ECR Public require authentication via AWS IAM (Identity and Access Management) or temporary security credentials. Developers must configure their environment with valid AWS access keys or, preferably, IAM role assumptions for enhanced security. Adhering to the principle of least privilege is paramount; IAM policies should be meticulously crafted to grant the AI agent's runtime environment only the specific ECR permissions it needs (e.g., ecr-public:GetAuthorizationToken, ecr-public:DescribeRepositories, and narrowly scoped ecr-public:CreateRepository if required), and explicitly deny broader, unnecessary actions. Configuration should involve setting up a dedicated IAM user or role for the MCP server, ensuring credentials are securely stored (such as in environment variables or a secrets manager), and never hardcoding them. It is also essential to configure the MCP server connection itself with appropriate network security, such as operating within a private network or using secure tunneling, to protect the API traffic between the AI assistant and the ECR service.

Similar APIs

Other APIs in the Cloud Infrastructure category.

Related MCP Server Integrations

Supabase API MCP Setup

Manage Supabase projects, databases, authentication, and storage through your AI agent.

Cloud InfrastructureConfigure →

Cloudflare API MCP Setup

Manage Cloudflare DNS, CDN, Workers, and security settings through your AI agent.

Cloud InfrastructureConfigure →

Vercel API MCP Setup

Deploy projects, manage domains, and monitor deployments through your AI agent.

Cloud InfrastructureConfigure →

DigitalOcean API MCP Setup

The DigitalOcean API is a comprehensive, RESTful interface provided by DigitalOcean, a leading cloud infrastructure provider focused on simplifying cloud computing for developers, startups, and enterprises. It serves as the programmatic backbone for managing the entire DigitalOcean ecosystem, enabling users to provision, configure, and control cloud resources such as Droplets (virtual private servers), Kubernetes clusters, managed databases, networks, storage volumes, and application platforms. Core capabilities include full lifecycle management of these resources, from creation and scaling to monitoring and deletion, mirroring the functionality available in the DigitalOcean control panel. Its primary use cases range from automating infrastructure setup for CI/CD pipelines and enabling infrastructure-as-code practices to supporting dynamic application scaling and resource optimization for SaaS products, e-commerce sites, and development environments. The API is designed for both developers seeking to automate their cloud operations and businesses that require programmable, scalable cloud infrastructure without the complexity of larger hyperscale providers.

Cloud InfrastructureConfigure →

Access Analyzer MCP Setup

The AWS Identity and Access Management Access Analyzer API provides a powerful, policy-as-code service that automatically identifies resources accessible from outside your AWS account or organization. At its core, the service continuously evaluates resource-based policies—such as Amazon S3 bucket policies, AWS Identity and Access Management (IAM) roles, Amazon KMS key policies, and AWS Lambda function policies—using logic-based reasoning to determine which resources grant access to unknown external principals. Its primary use case is for security and compliance teams within enterprises to proactively detect unintended data exposure, enforce least privilege principles, and audit cross-account and cross-service access. The API endpoints allow programmatic control to create, configure, and query analyzers, manage archive rules for storing findings, and generate custom policy documents, making it a foundational tool for automating cloud security posture management at scale.

Cloud InfrastructureConfigure →