Skip to content
MCP-Bridge
Cloud InfrastructureAuto-generatedScore: 46

AWS Greengrass MCP Server

AWS IoT Greengrass, developed by Amazon Web Services, is a comprehensive open-source runtime and cloud service that enables you to build, deploy, and manage applications for connected devices at the edge.

Quick Start Summary

The AWS Greengrass MCP server is a Model Context Protocol bridge that connects AI assistants — including Claude Desktop, Cursor, Windsurf, and VS Code Copilot — to the AWS Greengrass API through natural language. It exposes 10 API endpoints as callable tools, such as GetAssociatedRole, AssociateRoleToGroup, DisassociateRoleFromGroup, and more. No authentication is required — setup takes approximately 30 seconds. The server uses STDIO transport and can be installed by running npx -y @mcp/amazonaws-com-greengrass. This integration is sourced from the auto AWS Greengrass OpenAPI specification (v2017-06-07) and has a quality score of 46/99 (fair documentation coverage).

10Endpointstools mapped
NoneAuthopen access
46/99Qualityfair
~30 secSetupno auth
View Hosted Config URLClaude Desktop Setup Guide

Server Details

Category
Cloud Infrastructure
Authentication
None
Endpoints
10 operations
Transport
STDIO
Spec Version
v2017-06-07
Install Command
npx -y @mcp/amazonaws-com-greengrass

Environment Variables

AWS_GREENGRASS_API_KEY

Example: your_aws_greengrass_api_key

Top Endpoints

GET
/greengrass/groups/{GroupId}/role

GetAssociatedRole

PUT
/greengrass/groups/{GroupId}/role

AssociateRoleToGroup

DELETE
/greengrass/groups/{GroupId}/role

DisassociateRoleFromGroup

GET
/greengrass/servicerole

GetServiceRoleForAccount

PUT
/greengrass/servicerole

AssociateServiceRoleToAccount

Own this API?

Verify ownership of this listing to control the description, configuration details, and documentation links. Choose between free manual verification or instant premium placement.

Option 1: Free Verification

Slow manual review. Requires creating a GitHub issue with verified documentation or domain verification.

  • • Verified badge on page
  • • Standard search sorting
  • • 2-3 business days review
Start Free Claim →
Instant & Boosted

Option 2: Featured Upgrade($9/mo)

Instant verification plus premium styling, featured badges, and directory placement boost.

  • • ★ Featured star & amber highlight border
  • • Top of directory search placement
  • • Instant activation via claim token

📖 Detailed MCP Integration Guide

A technical breakdown of capabilities, agent workflows, and security/configuration best practices.

⚡Capabilities & Use Cases
AWS IoT Greengrass, developed by Amazon Web Services, is a comprehensive open-source runtime and cloud service that enables you to build, deploy, and manage applications for connected devices at the edge. This specific API suite provides a programmatic interface for managing the core logical and role-based configurations of Greengrass groups and connectors. A Greengrass group is a fundamental organizational unit containing definitions for devices, connectors, and the Lambda functions or machine learning models they run. The API endpoints allow for the creation, retrieval, and deletion of the IAM (Identity and Access Management) roles associated with these groups and the service itself, as well as the management of connector definitions. Connectors are pre-built modules that simplify the integration of Greengrass with other AWS services like Amazon Kinesis or with local hardware and protocols like Modbus. Typical enterprise use cases span industrial IoT (IIoT) for real-time machinery monitoring and predictive maintenance, smart city infrastructure for distributed sensor data aggregation, and agricultural technology for localized environmental analysis and automated irrigation control, all requiring low-latency processing and operation in intermittent network conditions.
🤖AI Agent Value
When exposed as tools via the Model Context Protocol (MCP) to an AI coding assistant, this API's value multiplies by enabling dynamic, programmatic interaction with a device fleet's edge configuration from a natural language interface. The AI agent gains the ability to interpret a developer's request and directly manipulate the deployment blueprint of an IoT solution. For instance, instead of manually navigating the AWS console or writing specific CLI commands, a developer could instruct the assistant to "audit all Greengrass groups in the 'manufacturing-us-east' account to ensure they are using the least-privilege 'GreengrassServiceRole'." The AI would then sequentially call the GET /greengrass/groups/{GroupId}/role endpoints for each group, analyze the returned policy, and provide a summary or flag non-compliant groups. This transforms complex, error-prone infrastructure-as-code or manual operations into a conversational, auditable workflow.
💬Example Workflows
Practical workflows enabled by this MCP server are focused on DevOps automation and configuration management at scale. A developer can instruct the AI to perform dynamic tasks such as: "For the 'PlantFloorA' group, update its role to grant only S3 write access to a specific logging bucket," which would trigger a PUT /greengrass/groups/{GroupId}/role call with a new, fine-grained IAM policy. "Generate a new version of the 'MQTT-to-S3' connector definition that includes an updated configuration parameter for batch size," would instruct the AI to first retrieve the current definition with GET /greengrass/definition/connectors/{ConnectorDefinitionId}/versions, craft a new version payload with the modification, and then submit it via the corresponding POST endpoint. "List all available connector definitions and their latest versions to create an inventory document," would orchestrate a sequence of GET calls to compile a structured report. This allows for rapid prototyping, bulk updates, and consistent enforcement of security policies across thousands of edge deployments through guided, intelligent automation.
🛡️Security & Auth
Despite the API specification noting "None" for authentication on these specific endpoint descriptions, in a real-world AWS deployment, all calls are rigorously authenticated and authorized. The service itself uses an IAM role (managed via the /servicerole endpoints) to make secure calls to other AWS services on your behalf. Developers and AI agents must be authenticated using AWS credentials with appropriate permissions, typically via IAM users or roles with policies granting greengrass:* permissions scoped to the necessary resources. Critical security best practices include strictly applying the principle of least privilege: the service role should only have permissions for the specific AWS services and resources the Greengrass core functions actually need, and the IAM entity (user/role) used to call this API should be limited to only the Greengrass management actions required. Configuration guidelines mandate that connector definitions are versioned, reviewed, and stored as code to maintain a clear, auditable history of changes to the edge environment. All communication must use TLS, and sensitive configuration parameters within connectors or Lambda functions should be managed via AWS Secrets Manager or Parameter Store rather than being hard-coded in API payloads.

Similar APIs

Other APIs in the Cloud Infrastructure category.

Supabase API

Manage Supabase projects, databases, authentication, and storage through your AI agent.

API Key

Cloudflare API

Manage Cloudflare DNS, CDN, Workers, and security settings through your AI agent.

API Key

Vercel API

Deploy projects, manage domains, and monitor deployments through your AI agent.

Bearer Token

DigitalOcean API

The DigitalOcean API is a comprehensive, RESTful interface provided by DigitalOcean, a leading cloud infrastructure provider focused on simplifying cloud computing for developers, startups, and enterprises. It serves as the programmatic backbone for managing the entire DigitalOcean ecosystem, enabling users to provision, configure, and control cloud resources such as Droplets (virtual private servers), Kubernetes clusters, managed databases, networks, storage volumes, and application platforms. Core capabilities include full lifecycle management of these resources, from creation and scaling to monitoring and deletion, mirroring the functionality available in the DigitalOcean control panel. Its primary use cases range from automating infrastructure setup for CI/CD pipelines and enabling infrastructure-as-code practices to supporting dynamic application scaling and resource optimization for SaaS products, e-commerce sites, and development environments. The API is designed for both developers seeking to automate their cloud operations and businesses that require programmable, scalable cloud infrastructure without the complexity of larger hyperscale providers.

Related MCP Server Integrations

Supabase API MCP Setup

Manage Supabase projects, databases, authentication, and storage through your AI agent.

Cloud InfrastructureConfigure →

Cloudflare API MCP Setup

Manage Cloudflare DNS, CDN, Workers, and security settings through your AI agent.

Cloud InfrastructureConfigure →

Vercel API MCP Setup

Deploy projects, manage domains, and monitor deployments through your AI agent.

Cloud InfrastructureConfigure →

DigitalOcean API MCP Setup

The DigitalOcean API is a comprehensive, RESTful interface provided by DigitalOcean, a leading cloud infrastructure provider focused on simplifying cloud computing for developers, startups, and enterprises. It serves as the programmatic backbone for managing the entire DigitalOcean ecosystem, enabling users to provision, configure, and control cloud resources such as Droplets (virtual private servers), Kubernetes clusters, managed databases, networks, storage volumes, and application platforms. Core capabilities include full lifecycle management of these resources, from creation and scaling to monitoring and deletion, mirroring the functionality available in the DigitalOcean control panel. Its primary use cases range from automating infrastructure setup for CI/CD pipelines and enabling infrastructure-as-code practices to supporting dynamic application scaling and resource optimization for SaaS products, e-commerce sites, and development environments. The API is designed for both developers seeking to automate their cloud operations and businesses that require programmable, scalable cloud infrastructure without the complexity of larger hyperscale providers.

Cloud InfrastructureConfigure →

Access Analyzer MCP Setup

The AWS Identity and Access Management Access Analyzer API provides a powerful, policy-as-code service that automatically identifies resources accessible from outside your AWS account or organization. At its core, the service continuously evaluates resource-based policies—such as Amazon S3 bucket policies, AWS Identity and Access Management (IAM) roles, Amazon KMS key policies, and AWS Lambda function policies—using logic-based reasoning to determine which resources grant access to unknown external principals. Its primary use case is for security and compliance teams within enterprises to proactively detect unintended data exposure, enforce least privilege principles, and audit cross-account and cross-service access. The API endpoints allow programmatic control to create, configure, and query analyzers, manage archive rules for storing findings, and generate custom policy documents, making it a foundational tool for automating cloud security posture management at scale.

Cloud InfrastructureConfigure →