AWS Cognito

by gitcarrot

Not rated
GitHub

About

Integrates with AWS Cognito to provide user authentication flows including sign-up, sign-in, password management, account verification, and multi-factor authentication for secure identity management.

Details

Author
gitcarrot
Repository
gitCarrot/mcp-server-aws-cognito
Categories
Cloud Service, Other, Security, Design, Developer Tools, AI, Infrastructure, Frontend

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

  1. Download and install Highlight from highlightai.com/download
  2. Navigate to the plugins tab and select "Add Custom Plugin"
  3. Configure the plugin with the settings below
    Plugin Name AWS Cognito
    Command (node, npx, python, etc.) /path/to/mcp-server-aws-cognito/build/index.js
    Environment
    • AWS_COGNITO_USER_POOL_ID your-user-pool-id
    • AWS_COGNITO_USER_POOL_CLIENT_ID your-app-client-id

    Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.

  4. Enable "Start Automatically" if you want the plugin to start when Highlight launches

From the repository


cd mcp-server-aws-cognito
npm install

1. Log in to your AWS Console and navigate to Amazon Cognito
2. Create a User Pool or use an existing one
3. Note your User Pool ID and App Client ID
4. Set these values as environment variables or in a .env file (you need .env file only when you use claude code, not claude desktop):


AWS_COGNITO_USER_POOL_ID=your-user-pool-id
AWS_COGNITO_USER_POOL_CLIENT_ID=your-app-client-id
```

sign_up

Register a new user. Parameters: `email` (string), `password` (string)

sign_up_confirm_code_from_email

Verify account with confirmation code. Parameters: `username` (string), `confirmationCode` (string)

sign_in

Authenticate a user. Parameters: `username` (string), `password` (string)

sign_out

Sign out the current user. Parameters: None

getCurrentUser

Get the current signed-in user. Parameters: None

reset_password_send_code

Request password reset code. Parameters: `username` (string)

reset_password_veryify_code

Reset password with verification code. Parameters: `username` (string), `code` (string), `newPassword` (string)

change_password

Change password for signed-in user. Parameters: `oldPassword` (string), `newPassword` (string)

refresh_session

Refresh the authentication tokens. Parameters: None

update_user_attributes

Update user profile attributes. Parameters: `attributes` (Array of `{name: string, value: string}`)

delete_user

Delete the current signed-in user. Parameters: None

resend_confirmation_code

Resend account verification code. Parameters: `username` (string)

verify_software_token

Verify TOTP for MFA. Parameters: `username` (string), `totpCode` (string)

| Tool Name | Description | Parameters |
|-----------|-------------|------------|
| sign_up | Register a new user | email: string, password: string |
| sign_up_confirm_code_from_email | Verify account with confirmation code | username: string, confirmationCode: string |
| sign_in | Authenticate a user | username: string, password: string |
| sign_out | Sign out the current user | None |
| getCurrentUser | Get the current signed-in user | None |
| reset_password_send_code | Request password reset code | username: string |
| reset_password_veryify_code | Reset password with verification code | username: string, code: string, newPassword: string |
| change_password | Change password for signed-in user | oldPassword: string, newPassword: string |
| refresh_session | Refresh the authentication tokens | None |
| update_user_attributes | Update user profile attributes | attributes: Array of {name: string, value: string} |
| delete_user | Delete the current signed-in user | None |
| resend_confirmation_code | Resend account verification code | username: string |
| verify_software_token | Verify TOTP for MFA | username: string, totpCode: string |

The Inspector will provide a URL to access debugging tools in your browser.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "aws cognito": {
            "env": {
                "AWS_COGNITO_USER_POOL_ID": "your-user-pool-id",
                "AWS_COGNITO_USER_POOL_CLIENT_ID": "your-app-client-id"
            },
            "args": [],
            "command": "/path/to/mcp-server-aws-cognito/build/index.js"
        }
    }
}

Linux

{
    "env": {
        "AWS_COGNITO_USER_POOL_ID": "your-user-pool-id",
        "AWS_COGNITO_USER_POOL_CLIENT_ID": "your-app-client-id"
    },
    "args": [],
    "command": "/path/to/mcp-server-aws-cognito/build/index.js"
}

Macos

{
    "env": {
        "AWS_COGNITO_USER_POOL_ID": "your-user-pool-id",
        "AWS_COGNITO_USER_POOL_CLIENT_ID": "your-app-client-id"
    },
    "args": [],
    "command": "/path/to/mcp-server-aws-cognito/build/index.js"
}

Windows

{
    "env": {
        "AWS_COGNITO_USER_POOL_ID": "your-user-pool-id",
        "AWS_COGNITO_USER_POOL_CLIENT_ID": "your-app-client-id"
    },
    "args": [],
    "command": "/path/to/mcp-server-aws-cognito/build/index.js"
}

AWS Cognito MCP Server

A Model Context Protocol (MCP) server implementation that connects to AWS Cognito for authentication and user management. This server provides a set of tools for user authentication flows including sign-up, sign-in, password management, and more.

Prerequisites

- AWS account with Cognito User Pool configured
- Node.js 18 or higher

Installation

```bash

No reviews yet — be the first

Sign in to leave a review

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.