10 tools from the Amazon ECS MCP Server MCP Server, categorised by risk level.
View the Amazon ECS MCP Server policy →get_deployment_status Gets the status of an ECS deployment and returns the ALB URL.
This tool checks the status of your ECS deployment and provides information
about th... validate_ecs_express_mode_prerequisites Validates prerequisites for ECS Express Mode deployment.
This tool checks that all required resources exist and are properly configured
before dep... delete_app Deletes a complete Express Mode deployment including service and ECR infrastructure.
This tool performs complete cleanup of an Express Mode deploy... delete_ecs_infrastructure Deletes ECS infrastructure created by the ECS MCP Server.
WARNING: This tool is not intended for production usage and is best suited for
tearing d... build_and_push_image_to_ecr Creates ECR infrastructure and builds/pushes a Docker image to ECR.
This tool automates the complete ECR setup and image deployment process:
1. Cr... containerize_app Start here if a user wants to run their application locally or deploy an app to the cloud.
Provides guidance for containerizing a web application.
... ecs_resource_management Execute ECS API operations directly.
This tool allows direct execution of ECS API operations using boto3.
Supported operations:
- CreateCapacityP... ecs_troubleshooting_tool ECS troubleshooting tool with multiple diagnostic actions.
This tool provides access to all ECS troubleshooting operations through a single interf... wait_for_service_ready Waits for ECS tasks in a service to reach RUNNING status.
This tool polls the service every 10 seconds to check if tasks are running.
It will wait... The Amazon ECS MCP Server MCP server exposes 10 tools across 4 categories: Read, Write, Destructive, Execute.
Use Intercept, the open-source MCP proxy. Write YAML rules for each tool — rate limits, argument validation, or deny rules — then run Intercept in front of the Amazon ECS MCP Server server.
Amazon ECS MCP Server tools are categorised as Read (2), Write (1), Destructive (2), Execute (5). Each category has a recommended default policy.
Deterministic policy on every MCP tool call. Per-identity grants. Full audit log.