Atlas / MCP servers / awslabs / Run Model Context Protocol (MCP) servers with AWS Lambda

Run Model Context Protocol (MCP) servers with AWS LambdaSAFE

Name: Run Model Context Protocol (MCP) servers with AWS Lambda
Author: awslabs

mcp/awslabs/run-model-context-protocol-servers-with-aws-lambda

MCP server by awslabs · Audited 2026-10-12

⚑ Report / re-scan Source ↗

Run existing Model Context Protocol (MCP) stdio-based servers in AWS Lambda functions

Verdict

SAFE

Grade

Trust score

89 /100

Exposed tools

1 1r · 0w · 0d

Transport

stdio · streamable-http

License

Apache-2.0

Stars

380

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://pypi.org/project/run-mcp-servers-with-aws-lambda/) [](https://www.npmjs.com/package/@aws/run-mcp-servers-with-aws-lambda)

This project enables you to run Model Context Protocol stdio-based servers in AWS Lambda functions.

Currently, most implementations of MCP servers and clients are entirely local on a single machine. A desktop application such as an IDE or Claude Desktop initiates MCP servers locally as child processes and communicates with each of those servers over a long-running stdio stream.

flowchart LR
subgraph "Your Laptop"
Host["Desktop Applicationwith MCP Clients"]
S1["MCP Server A(child process)"]
S2["MCP Server B(child process)"]
Host |"MCP Protocol(over stdio stream)"| S1
Host |"MCP Protocol(over stdio stream)"| S2
end

This library helps you to wrap existing stdio MCP servers into Lambda functions. You can invoke these function-based MCP servers from your application using the MCP protocol over short-lived HTTPS connections. Your application can then be a desktop-based app, a distributed system running in the cloud, or any other architecture.

flowchart LR
subgraph "Distributed System"
App["Your Applicationwith MCP Clients"]
S3["MCP Server A(Lambda function)"]
S4["MCP Server B(Lambda function)"]
App |"MCP Protocol(over HTTPS connection)"| S3
App |"MCP Protocol(over HTTPS connection)"| S4
end

Using this library, the Lambda function will manage the lifecycle of your stdio MCP server. Each Lambd

Read from source at commit ddf8bcd92890OBSERVED · 2026-10-12

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add run-mcp-servers-with-aws-lambda --env DOG_API_KEY_SECRET_ARN=${DOG_API_KEY_SECRET_ARN} -- npx -y @aws/[email protected]

claude-desktop

{
  "mcpServers": {
    "run-mcp-servers-with-aws-lambda": {
      "command": "npx",
      "args": [
        "-y",
        "@aws/[email protected]"
      ],
      "env": {
        "DOG_API_KEY_SECRET_ARN": "${DOG_API_KEY_SECRET_ARN}"
      }
    }
  }
}

Exposed tools (1)

1 read · 0 write · 0 destructive.

Tool	Risk	Description
`echo`	read	Echo back the provided message

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: declared (6 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (19)

LOWInventory / provenance · inv.hidden_file · CWE-1104

.mergify.yml

.mergify.yml

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.pre-commit-config.yaml

.pre-commit-config.yaml

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.versionrc

.versionrc

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

examples/chatbots/typescript/src/interactive_oauth.ts:86

exec(command, (error) => {

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table