Back to Browse

Serverlessrun MCP Server

Developer ToolsModerate5.6MCP RegistryLocal
Free

Server data from the Official MCP Registry

AWS Lambda functions, versions, aliases, layers and settings as MCP tools.

About

AWS Lambda functions, versions, aliases, layers and settings as MCP tools.

Security Report

5.6
Moderate5.6Moderate Risk

serverlessrun is a clean, well-tested read-oriented AWS Lambda MCP server that requires AWS credentials via environment variables and validates arguments with zod. Its permissions (network HTTP to AWS endpoints, env vars for credentials, and a Lambda invoke tool) match its stated purpose, and no exfiltration, hardcoded secrets, or shell execution were found. Minor notes: the default signer is unconfigured so live calls cannot succeed out of the box, and invoke_function can trigger side-effecting function executions that users should be aware of. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

stdio

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

AWS_ACCESS_KEY_IDRequired
AWS_SECRET_ACCESS_KEYRequired
AWS_REGIONRequired
AWS_SESSION_TOKENRequired

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-serverlessrun": {
      "env": {
        "AWS_REGION": "your-aws-region-here",
        "AWS_ACCESS_KEY_ID": "your-aws-access-key-id-here",
        "AWS_SESSION_TOKEN": "your-aws-session-token-here",
        "AWS_SECRET_ACCESS_KEY": "your-aws-secret-access-key-here"
      },
      "args": [
        "-y",
        "@reneturcios/serverlessrun"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

serverlessrun

AWS Lambda as MCP tools, shaping requests for the documented Lambda REST API. serverlessrun is a clean-room rebuild of the core surface of the aws-lambda MCP server, under a new name: the same tool names and request shapes, fresh code, no copied branding.

Tools (core subset, 10)

list_functions, get_function, invoke_function, list_versions_by_function, get_alias, list_aliases, list_layers, get_layer_version, list_event_source_mappings, get_account_settings.

Not in this subset: function create/update/delete and code upload, configuration and policy management, tags, concurrency controls, function URLs, destinations, event source mapping writes, and code signing.

How it works

Every tool shapes a documented Lambda REST request (API version 2015-03-31) and hands it to an injectable executor: execute({ service: "lambda", operation, path, method, body, query }). Library users can inject their own executor or signer to run against real AWS with their own signing stack.

Setup

export AWS_ACCESS_KEY_ID=...
export AWS_SECRET_ACCESS_KEY=...
export AWS_REGION=us-east-1        # optional, this is the default
export AWS_SESSION_TOKEN=...       # optional

Honest limitation: this rebuild ships no SigV4 signer of its own. With credentials set but no signer injected, calls fail with SigV4 signing not configured: inject a signer/executor. With no credentials, calls fail with an error naming AWS_ACCESS_KEY_ID.

CLI

npx @reneturcios/serverlessrun list_functions '{}'
npx @reneturcios/serverlessrun mcp        # stdio MCP server

Each tool name is a subcommand taking one JSON object argument.

MCP client config

{
  "mcpServers": {
    "serverlessrun": {
      "command": "npx",
      "args": ["-y", "@reneturcios/serverlessrun", "mcp"],
      "env": { "AWS_ACCESS_KEY_ID": "...", "AWS_SECRET_ACCESS_KEY": "..." }
    }
  }
}

Docker

docker run -i -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY ghcr.io/cloudcorprecords/serverlessrun

Development

npm install
npm run build
npm test

License

MIT

Reviews

No reviews yet

Be the first to review this server!