AWS Cognito
About
Integrates with AWS Cognito to provide user authentication flows including sign-up, sign-in, password management, account verification, and multi-factor authentication for secure identity management.
Details
- Author
- gitcarrot
- Repository
- gitCarrot/mcp-server-aws-cognito
- Categories
- Cloud Service, Other, Security, Design, Developer Tools, AI, Infrastructure, Frontend
Jump to
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
AWS CognitoCommand (node, npx, python, etc.)/path/to/mcp-server-aws-cognito/build/index.jsEnvironment-
AWS_COGNITO_USER_POOL_ID
your-user-pool-id -
AWS_COGNITO_USER_POOL_CLIENT_ID
your-app-client-id
Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
-
AWS_COGNITO_USER_POOL_ID
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
cd mcp-server-aws-cognito
npm install
1. Log in to your AWS Console and navigate to Amazon Cognito
2. Create a User Pool or use an existing one
3. Note your User Pool ID and App Client ID
4. Set these values as environment variables or in a .env file (you need .env file only when you use claude code, not claude desktop):
AWS_COGNITO_USER_POOL_ID=your-user-pool-id
AWS_COGNITO_USER_POOL_CLIENT_ID=your-app-client-id
```
sign_up
Register a new user. Parameters: `email` (string), `password` (string)
sign_up_confirm_code_from_email
Verify account with confirmation code. Parameters: `username` (string), `confirmationCode` (string)
sign_in
Authenticate a user. Parameters: `username` (string), `password` (string)
sign_out
Sign out the current user. Parameters: None
getCurrentUser
Get the current signed-in user. Parameters: None
reset_password_send_code
Request password reset code. Parameters: `username` (string)
reset_password_veryify_code
Reset password with verification code. Parameters: `username` (string), `code` (string), `newPassword` (string)
change_password
Change password for signed-in user. Parameters: `oldPassword` (string), `newPassword` (string)
refresh_session
Refresh the authentication tokens. Parameters: None
update_user_attributes
Update user profile attributes. Parameters: `attributes` (Array of `{name: string, value: string}`)
delete_user
Delete the current signed-in user. Parameters: None
resend_confirmation_code
Resend account verification code. Parameters: `username` (string)
verify_software_token
Verify TOTP for MFA. Parameters: `username` (string), `totpCode` (string)
| Tool Name | Description | Parameters |
|-----------|-------------|------------|
| sign_up | Register a new user | email: string, password: string |
| sign_up_confirm_code_from_email | Verify account with confirmation code | username: string, confirmationCode: string |
| sign_in | Authenticate a user | username: string, password: string |
| sign_out | Sign out the current user | None |
| getCurrentUser | Get the current signed-in user | None |
| reset_password_send_code | Request password reset code | username: string |
| reset_password_veryify_code | Reset password with verification code | username: string, code: string, newPassword: string |
| change_password | Change password for signed-in user | oldPassword: string, newPassword: string |
| refresh_session | Refresh the authentication tokens | None |
| update_user_attributes | Update user profile attributes | attributes: Array of {name: string, value: string} |
| delete_user | Delete the current signed-in user | None |
| resend_confirmation_code | Resend account verification code | username: string |
| verify_software_token | Verify TOTP for MFA | username: string, totpCode: string |
The Inspector will provide a URL to access debugging tools in your browser.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"aws cognito": {
"env": {
"AWS_COGNITO_USER_POOL_ID": "your-user-pool-id",
"AWS_COGNITO_USER_POOL_CLIENT_ID": "your-app-client-id"
},
"args": [],
"command": "/path/to/mcp-server-aws-cognito/build/index.js"
}
}
}
Linux
{
"env": {
"AWS_COGNITO_USER_POOL_ID": "your-user-pool-id",
"AWS_COGNITO_USER_POOL_CLIENT_ID": "your-app-client-id"
},
"args": [],
"command": "/path/to/mcp-server-aws-cognito/build/index.js"
}
Macos
{
"env": {
"AWS_COGNITO_USER_POOL_ID": "your-user-pool-id",
"AWS_COGNITO_USER_POOL_CLIENT_ID": "your-app-client-id"
},
"args": [],
"command": "/path/to/mcp-server-aws-cognito/build/index.js"
}
Windows
{
"env": {
"AWS_COGNITO_USER_POOL_ID": "your-user-pool-id",
"AWS_COGNITO_USER_POOL_CLIENT_ID": "your-app-client-id"
},
"args": [],
"command": "/path/to/mcp-server-aws-cognito/build/index.js"
}
AWS Cognito MCP Server
A Model Context Protocol (MCP) server implementation that connects to AWS Cognito for authentication and user management. This server provides a set of tools for user authentication flows including sign-up, sign-in, password management, and more.Prerequisites
- AWS account with Cognito User Pool configured
- Node.js 18 or higher
Installation
```bash
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.




