14 tools from the AWS Cloud Control API (CCAPI) MCP Server MCP Server, categorised by risk level.
View the AWS Cloud Control API (CCAPI) MCP Server policy →check_environment_variables Check if required environment variables are set correctly. get_aws_account_info Get information about the current AWS account being used.
Common questions this tool answers:
- "What AWS account am I using?"
- "Which AWS region... get_aws_session_info Get information about the current AWS session.
This tool provides details about the current AWS session, including the profile name,
account ID, r... get_resource Get details of a specific AWS resource. get_resource_request_status Get the status of a long running operation with the request token. get_resource_schema_information Get schema information for an AWS resource.
Parameters:
resource_type: The AWS resource type (e.g., "AWS::S3::Bucket")
Returns:
The resou... list_resources List AWS resources of a specified type.
Parameters:
resource_type: The AWS resource type (e.g., "AWS::S3::Bucket", "AWS::RDS::DBInstance")
... create_resource Create an AWS resource.
This tool automatically adds default identification tags to all resources for support and troubleshooting purposes.
IMPOR... create_template Create a CloudFormation template from existing resources using the IaC Generator API.
This tool allows you to generate CloudFormation templates fr... generate_infrastructure_code Generate infrastructure code before resource creation or update. update_resource Update an AWS resource.
IMPORTANT: Always check the response for 'security_warning' field and display any warnings to the user. The AWS Cloud Control API (CCAPI) MCP Server MCP server exposes 14 tools across 4 categories: Read, Write, Destructive, Execute.
Use Intercept, the open-source MCP proxy. Write YAML rules for each tool — rate limits, argument validation, or deny rules — then run Intercept in front of the AWS Cloud Control API (CCAPI) MCP Server server.
AWS Cloud Control API (CCAPI) MCP Server tools are categorised as Read (7), Write (4), Destructive (2), Execute (1). Each category has a recommended default policy.
Deterministic policy on every MCP tool call. Per-identity grants. Full audit log.