AWS Cognito MCP Server

Example Use Cases

• 1

  Authenticate end users against an AWS Cognito user pool to obtain and refresh access/ID tokens for downstream API calls.

• 2

  Perform user management tasks programmatically, such as sign-up, confirm sign-up via email code, reset passwords, change passwords, update user attributes, and delete users.

• 3

  Enforce or verify MFA (TOTP) and handle token lifecycle (refresh, sign-out) when interacting with protected resources.

Description

This repository implements a Model Context Protocol (MCP) server that integrates with AWS Cognito to provide authentication and user management tools for agents. It exposes actions for sign-up, confirmation, sign-in, sign-out, password reset, attribute updates, MFA/TOTP verification, token refresh, and user deletion. The server is designed to run with Node.js and can be used with Claude Desktop or Claude Code via stdio, with debugging support through an Inspector. It simplifies adding Cognito-backed auth flows to agent workflows so agents can perform user-specific operations securely.