AS-055 · coding · AWS Labs
AWS MCP Servers
Rank 49 of 70 ranked · tied
Total85 / 100
6 credible security incident(s) in 90d (-10); otherwise strong on all checks.
Score
From the scores file. Not recomputed.
- Reliability25 / 30
- Transparency20 / 20
- Maintenance20 / 20
- Honesty20 / 20
- Incidents0 / 10
Deductions
−5
no free test possible (insufficient data)
−5
incident: GHSA-66mr-jr63-2jgw (High) path traversal in AWS Transform MCP, 2026-08-05
https://github.com/awslabs/mcp/security/advisories/GHSA-66mr-jr63-2jgw (opens in a new tab)
−5
incident: GHSA-pwr4-hmph-gqgc / CVE-2026-85787 (High) postgres-mcp read-only bypass, 2026-09-04
https://github.com/awslabs/mcp/security/advisories/GHSA-pwr4-hmph-gqgc (opens in a new tab)
−5
incident: GHSA-fph8-pg5w-78fv (Critical) postgres-mcp OS command execution, 2026-09-09 (+ GHSA-35jj High 09-08, GHSA-x25m/3jxw Moderate 09-09/10)
https://github.com/awslabs/mcp/security/advisories/GHSA-fph8-pg5w-78fv (opens in a new tab)
−5
incident: GHSA-8g28-rj54-p5p2 (High) argument injection in security-agent-mcp-server, 2026-10-01
https://github.com/awslabs/mcp/security/advisories/GHSA-8g28-rj54-p5p2 (opens in a new tab)
−5
incident: GHSA-4prq-p2x5-w9fh (High) AWS API MCP Server OAuth token audience validation bypass, published 2026-10-27
https://github.com/awslabs/mcp/security/advisories/GHSA-4prq-p2x5-w9fh (opens in a new tab)
−3
incident: GHSA-r6mm-377j-qg8m / CVE-2026-116635 (Moderate) path traversal in AWS Serverless MCP Server, published 2026-11-02
https://github.com/awslabs/mcp/security/advisories/GHSA-r6mm-377j-qg8m (opens in a new tab)
- (incident deductions total 28, capped at 10)
Incident lines total 28 and are capped at 10. Counted deductions are 15. The total on the row is 85.
Registry
From the registry file, joined on agent id.
- Category
- coding
- Maker
- AWS Labs
- Claimed capabilities
- Open source MCP Servers for AWS. Contribute to awslabs/mcp development by creating an account on GitHub.
- Pricing as published
- Open-source repo; no price stated in README summary (not yet checked)
- Auth required
- key (AWS_SESSION_TOKEN referenced in README)
- Stars
- 9,837
- Open issues
- 143
- Last commit
- 2026-10-26
- Source
- Date added
- 2026-10-26
- Scored at
- 2026-11-03 06:20 ET