home / mcp / aws cognito mcp server

AWS Cognito MCP Server

Provides AWS Cognito-based authentication and user management via MCP tools for sign-up, sign-in, password management, and more.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "gitcarrot-mcp-server-aws-cognito": {
      "command": "/path/to/mcp-server-aws-cognito/build/index.js",
      "args": [],
      "env": {
        "AWS_COGNITO_USER_POOL_ID": "your-user-pool-id",
        "AWS_COGNITO_USER_POOL_CLIENT_ID": "your-app-client-id"
      }
    }
  }
}

You run this MCP server to authenticate users with AWS Cognito and to handle common user-management flows like sign-up, sign-in, password resets, and MFA. It exposes practical tools you can invoke from an MCP client to manage users and sessions in a secure, scalable way.

How to use

You access the server through an MCP client to perform authentication and profile operations. The server provides tools for registering users, signing in, password management, refreshing tokens, updating attributes, and handling MFA, all backed by AWS Cognito.

Available tools

sign_up

sign_up_confirm_code_from_email

Verify an account using a confirmation code received by email.

sign_in

Authenticate a user using username and password to obtain authentication tokens.

sign_out

Sign out the currently authenticated user.

getCurrentUser

Retrieve information about the current signed-in user.

reset_password_send_code

Request a verification code to reset a forgotten password.

reset_password_veryify_code

Reset the user password using a verification code and new password.

change_password

Change the password for the currently signed-in user.

refresh_session

Refresh authentication tokens to extend the session.

update_user_attributes

Update attributes for the user profile.

delete_user

Delete the currently signed-in user account.

resend_confirmation_code

Resend the account verification code to the user.

verify_software_token

Verify a TOTP code for MFA to enable multi-factor authentication.