Atlas / MCP servers / davidshtian / Aws Bedrock Integration

Aws Bedrock IntegrationSAFE

mcp/davidshtian/aws-bedrock-integration

A simple and clear example for implementation and understanding Anthropic MCP (on AWS Bedrock).

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
1 1r · 0w · 0d
Transport
streamable-http
License
MIT
Stars
55
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

A simple and clear example for implementation and understanding Anthropic MCP (on AWS Bedrock).

For multiple MCP servers management, this tiny project Q-2001 could be referred~

Overview

This project demonstrates how to implement and use Anthropic's Model Context Protocol (MCP) with AWS Bedrock. It provides a client implementation that can interact with MCP-enabled tools through AWS Bedrock's runtime service.

Updates 2025-05-10: Streamable HTTP

  • Add support for Streamable HTTP
  • Rewrite the URL fetching MCP server fetch_url_mcp_server.py that demonstrates different transport types

Usage Instructions

Run the server with default stdio settings (no transport parameter):

uv run fetch_url_mcp_server.py

# client
uv run client_stdio.py

Run with streamable-http transport on default port (8000):

python fetch_url_mcp_server.py --transport streamable-http

# client
uv run client_streamablehttp.py

Run with streamable-http transport on custom port:

python fetch_url_mcp_server.py --transport streamable-http --port 8080

Prerequisites

  • Python 3.10 or higher
  • AWS account with Bedrock access
  • Configured AWS credentials
  • UV package manager

Features

  • Seamless integration with AWS Bedrock runtime using Converse API
  • Tool format conversion for Bedrock compatibility
  • Asynchronous communication handling
  • Structured logging for debugging

Contributing

Feel free to submit issues and pull requests to improve the implementation.

License

MIT License

References

Read from source at commit 6e816020ac14OBSERVED · 2026-10-08
02

Exposed tools (1)

1 read · 0 write · 0 destructive.

ToolRiskDescription
fetch_urlreadFetches a website and returns its content
03

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (1 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (1)

MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862
streamable-http
Why it matters. a network transport with no auth environment variable found
Fix. require a token

Gates applied: no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha 6e816020ac14full audit observations/trust-audit/mcp-server/davidshtian__aws-bedrock-integration.json · Report an issue / request a re-scan
04

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-086e816020ac14SAFEB89first audit
05

Questions

What is the Aws Bedrock Integration MCP server?

A simple and clear example for implementation and understanding Anthropic MCP (on AWS Bedrock).

What tools does Aws Bedrock Integration expose?

1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Aws Bedrock Integration safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does Aws Bedrock Integration need?

No credential environment variables were found in its source, so it appears to need none.

How does Aws Bedrock Integration run?

It speaks streamable-http, so it runs as a service you connect to over the network.

How current is this page?

The grade is for one exact copy of the source (6e816020ac14), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement