# Agent Toolkit for AWS — MCP + Skills + Plugins

> Agent Toolkit for AWS ships MCP config, skills, and plugins so Claude Code/Codex can work across 300+ AWS services with guardrails and audits.

## Install

Save the content below to `.claude/skills/` or append to your `CLAUDE.md`:

## Quick Use

1. Claude Code (marketplace → plugin):
   ```
   /plugin marketplace add aws/agent-toolkit-for-aws
   /plugin install aws-core@agent-toolkit-for-aws
   ```
2. Install skills (for other agents):
   ```bash
   npx skills add aws/agent-toolkit-for-aws/skills
   ```

## Intro

Agent Toolkit for AWS ships MCP config, skills, and plugins so Claude Code/Codex can work across 300+ AWS services with guardrails and audits.

- **Best for:** teams who want coding agents to use AWS with least-privilege defaults and clear guardrails
- **Works with:** Claude Code/Codex plugins; MCP server config; skills/rules files; requires AWS credentials for real API calls
- **Setup time:** 15–40 minutes

## Practical Notes

- Quant: the README claims **300+ AWS services** reachable through a single MCP endpoint.
- Quant: status badge says **GA** and the getting-started snippet includes `AWS_REGION=us-west-2` metadata.

## Main

A least-privilege rollout:

1. Start with `aws-core` and restrict to read-only actions until you trust the workflow.
2. Require explicit approvals for mutating actions (deploy, IAM, billing).
3. Treat skills as playbooks: let the agent discover the right skill, then follow it step-by-step.

When something feels vague, force the agent to answer: *which service, which region, which resource ARN, and which rollback plan?*

### FAQ

**Q: Do I need AWS credentials?**
A: Yes for real API calls; docs search and skill discovery can work without auth.

**Q: Which plugin should I install first?**
A: `aws-core` is described as the starting point in the README.

**Q: Is this only for Claude Code?**
A: No—plugins exist for Claude Code/Codex, and skills/MCP config work for other agents too.

## Source & Thanks

> Source: https://github.com/aws/agent-toolkit-for-aws
> License: Apache-2.0
> GitHub stars: 586 · forks: 30

---

<!-- ZH -->

## 快速使用

1. Claude Code（marketplace → plugin）：
   ```
   /plugin marketplace add aws/agent-toolkit-for-aws
   /plugin install aws-core@agent-toolkit-for-aws
   ```
2. 安装 skills（给其他 agent 用）：
   ```bash
   npx skills add aws/agent-toolkit-for-aws/skills
   ```

## 简介

AWS Agent Toolkit 提供 MCP 配置、skills 与插件，让 Claude Code/Codex 能覆盖 300+ AWS 服务并带护栏与审计能力，适合把云上操作变成可控工作流。

- **适合谁：** 希望让 coding agent 以最小权限、明确护栏方式使用 AWS 的团队
- **可搭配：** Claude Code/Codex 插件；MCP 配置；skills/rules；真实调用需要本地 AWS 凭证
- **准备时间：** 15–40 分钟

## 实战建议

- 量化信息：README 声称通过一个 MCP endpoint 覆盖 **300+ AWS 服务**。
- 量化信息：状态标注为 **GA**；示例配置里通过 metadata 传入 `AWS_REGION=us-west-2`。

## 主要内容

最小权限接入建议：

1. 先从 `aws-core` 开始，并在建立信任前只开放只读动作。
2. 对变更类动作（部署/IAM/计费）强制人工审批。
3. 把 skills 当作可复用剧本：让 agent 先发现对应 skill，再按步骤执行。

遇到模糊描述时强制回答：*哪个服务、哪个 region、哪个资源 ARN、回滚方案是什么？*

### FAQ

**需要 AWS 凭证吗？**
答：真实 API 调用需要；文档搜索与 skill 发现可在无鉴权时使用。

**先装哪个插件？**
答：README 明确建议从 `aws-core` 开始。

**只能给 Claude Code 用吗？**
答：不是；Claude Code/Codex 有插件，其余 agent 也可用 skills + MCP 配置。

## 来源与感谢

> Source: https://github.com/aws/agent-toolkit-for-aws
> License: Apache-2.0
> GitHub stars: 586 · forks: 30


---
Source: https://tokrepo.com/en/workflows/agent-toolkit-for-aws-mcp-skills-plugins
Author: Agent Toolkit