@apono-io/mcp-aws-managed 0.2.0

package/README.md

@@ -0,0 +1,30 @@
+# @apono-io/mcp-aws-managed
+
+Apono MCP server for AWS. Assumes the granted role via STS, then proxies stdio MCP
+traffic to the [managed AWS MCP Server](https://docs.aws.amazon.com/agent-toolkit/latest/userguide/getting-started-aws-mcp-server.html),
+signing every request with SigV4.
+
+Unlike `@apono-io/mcp-aws` it spawns no vendor process, so `uvx`, `uv` and Python
+are not required on the host.
+
+## Usage
+
+Launched by the Apono CLI via `npx`. Environment variables:
+
+| Variable | Description |
+|---|---|
+| `AWS_ACCESS_KEY_ID` | Brokered IAM credentials — access key |
+| `AWS_SECRET_ACCESS_KEY` | Brokered IAM credentials — secret key |
+| `AWS_SESSION_TOKEN` | Brokered IAM credentials — session token |
+| `AWS_ROLE_ARN` | ARN of the role to assume via STS |
+| `AWS_REGION` | Region for the STS call (default `us-east-1`) |
+| `AWS_MCP_ENDPOINT` | Override the endpoint (default `https://aws-mcp.us-east-1.api.aws/mcp`; `https://aws-mcp.eu-central-1.api.aws/mcp` also exists) |
+
+The SigV4 signing service and region are derived from the endpoint hostname, so
+overriding `AWS_MCP_ENDPOINT` is enough to switch region.
+
+## Limitations
+
+The role is assumed once at startup, as in `@apono-io/mcp-aws`. Sessions outliving
+the assumed credentials will see `ExpiredToken` surface as tool errors rather than
+as a startup failure.

package/dist/failures.d.ts

@@ -0,0 +1,14 @@
+export declare const FailureCategory: {
+    readonly MissingEnv: "missing_env";
+    readonly CredentialExpired: "credential_expired";
+    readonly CredentialInvalid: "credential_invalid";
+    readonly AssumeRoleDenied: "assume_role_denied";
+};
+export type FailureCategory = (typeof FailureCategory)[keyof typeof FailureCategory];
+export declare class StartupFailure extends Error {
+    readonly category: FailureCategory;
+    constructor(category: FailureCategory, message: string);
+}
+export declare function stsFailureCategory(error: unknown): FailureCategory | undefined;
+export declare function reportFailure(error: unknown): void;
+//# sourceMappingURL=failures.d.ts.map

package/dist/failures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"failures.d.ts","sourceRoot":"","sources":["../src/failures.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe;;;;;CAKlB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAYrF,qBAAa,cAAe,SAAQ,KAAK;IAErC,QAAQ,CAAC,QAAQ,EAAE,eAAe;gBAAzB,QAAQ,EAAE,eAAe,EAClC,OAAO,EAAE,MAAM;CAKlB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,SAAS,CAG9E;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAKlD"}

package/dist/failures.js

@@ -0,0 +1,36 @@
+export const FailureCategory = {
+    MissingEnv: 'missing_env',
+    CredentialExpired: 'credential_expired',
+    CredentialInvalid: 'credential_invalid',
+    AssumeRoleDenied: 'assume_role_denied',
+};
+const MARKER_PREFIX = 'APONO_MCP_ERROR:';
+const STS_ERROR_CATEGORIES = [
+    ['ExpiredToken', FailureCategory.CredentialExpired],
+    ['InvalidClientTokenId', FailureCategory.CredentialInvalid],
+    ['UnrecognizedClient', FailureCategory.CredentialInvalid],
+    ['SignatureDoesNotMatch', FailureCategory.CredentialInvalid],
+    ['AccessDenied', FailureCategory.AssumeRoleDenied],
+];
+export class StartupFailure extends Error {
+    category;
+    constructor(category, message) {
+        super(message);
+        this.category = category;
+        this.name = 'StartupFailure';
+    }
+}
+export function stsFailureCategory(error) {
+    const name = error instanceof Error ? error.name : '';
+    return STS_ERROR_CATEGORIES.find(([code]) => name.includes(code))?.[1];
+}
+export function reportFailure(error) {
+    process.stderr.write(`Error: ${message(error)}\n`);
+    if (error instanceof StartupFailure) {
+        process.stderr.write(`${MARKER_PREFIX} ${error.category}\n`);
+    }
+}
+function message(error) {
+    return error instanceof StartupFailure ? error.message : String(error);
+}
+//# sourceMappingURL=failures.js.map

package/dist/failures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failures.js","sourceRoot":"","sources":["../src/failures.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU,EAAE,aAAa;IACzB,iBAAiB,EAAE,oBAAoB;IACvC,iBAAiB,EAAE,oBAAoB;IACvC,gBAAgB,EAAE,oBAAoB;CAC9B,CAAC;AAIX,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEzC,MAAM,oBAAoB,GAAsD;IAC9E,CAAC,cAAc,EAAE,eAAe,CAAC,iBAAiB,CAAC;IACnD,CAAC,sBAAsB,EAAE,eAAe,CAAC,iBAAiB,CAAC;IAC3D,CAAC,oBAAoB,EAAE,eAAe,CAAC,iBAAiB,CAAC;IACzD,CAAC,uBAAuB,EAAE,eAAe,CAAC,iBAAiB,CAAC;IAC5D,CAAC,cAAc,EAAE,eAAe,CAAC,gBAAgB,CAAC;CACnD,CAAC;AAEF,MAAM,OAAO,cAAe,SAAQ,KAAK;IAE5B;IADX,YACW,QAAyB,EAClC,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,aAAQ,GAAR,QAAQ,CAAiB;QAIlC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;QACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,aAAa,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+import { run } from './run.js';
+import { reportFailure } from './failures.js';
+run(process.env).catch((err) => {
+    reportFailure(err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IACtC,aAAa,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/run.d.ts

@@ -0,0 +1,24 @@
+import { STSClient } from '@aws-sdk/client-sts';
+import type { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
+export declare const DEFAULT_ENDPOINT = "https://aws-mcp.us-east-1.api.aws/mcp";
+export interface AwsCredentials {
+    accessKeyId: string;
+    secretAccessKey: string;
+    sessionToken: string;
+}
+export declare function validateEnv(env: NodeJS.ProcessEnv): {
+    credentials: AwsCredentials;
+    roleArn: string;
+    region: string;
+    endpoint: URL;
+};
+export declare function assumeRole(sts: STSClient, roleArn: string): Promise<AwsCredentials>;
+export declare function assumeRoleOrFail(sts: STSClient, roleArn: string): Promise<AwsCredentials>;
+/**
+ * Pumps JSON-RPC messages between the two transports without interpreting them,
+ * so every tool, notification and future protocol method passes through
+ * untouched. The only thing this process adds is the SigV4 signature.
+ */
+export declare function relay(local: Transport, remote: Transport): void;
+export declare function run(env: NodeJS.ProcessEnv): Promise<void>;
+//# sourceMappingURL=run.d.ts.map

package/dist/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../src/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGnE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAW/E,eAAO,MAAM,gBAAgB,0CAA0C,CAAC;AAExE,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG;IACnD,WAAW,EAAE,cAAc,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,GAAG,CAAC;CACf,CAoBA;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAgBzF;AAED,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAU/F;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CAS/D;AAMD,wBAAsB,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB/D"}

package/dist/run.js

@@ -0,0 +1,94 @@
+import { AssumeRoleCommand, STSClient } from '@aws-sdk/client-sts';
+import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { FailureCategory, StartupFailure, stsFailureCategory } from './failures.js';
+import { createSignedFetch } from './signing.js';
+const REQUIRED_ENV = [
+    'AWS_ACCESS_KEY_ID',
+    'AWS_SECRET_ACCESS_KEY',
+    'AWS_SESSION_TOKEN',
+    'AWS_ROLE_ARN',
+];
+export const DEFAULT_ENDPOINT = 'https://aws-mcp.us-east-1.api.aws/mcp';
+export function validateEnv(env) {
+    for (const key of REQUIRED_ENV) {
+        if (!env[key]) {
+            throw new StartupFailure(FailureCategory.MissingEnv, `Missing required environment variable: ${key}`);
+        }
+    }
+    return {
+        credentials: {
+            accessKeyId: env.AWS_ACCESS_KEY_ID,
+            secretAccessKey: env.AWS_SECRET_ACCESS_KEY,
+            sessionToken: env.AWS_SESSION_TOKEN,
+        },
+        roleArn: env.AWS_ROLE_ARN,
+        region: env.AWS_REGION ?? env.AWS_DEFAULT_REGION ?? 'us-east-1',
+        endpoint: new URL(env.AWS_MCP_ENDPOINT ?? DEFAULT_ENDPOINT),
+    };
+}
+export async function assumeRole(sts, roleArn) {
+    const response = await sts.send(new AssumeRoleCommand({
+        RoleArn: roleArn,
+        RoleSessionName: `apono-mcp-aws-${Date.now()}`,
+    }));
+    const credentials = response.Credentials;
+    if (!credentials?.AccessKeyId || !credentials?.SecretAccessKey || !credentials?.SessionToken) {
+        throw new Error('STS response missing credentials fields');
+    }
+    return {
+        accessKeyId: credentials.AccessKeyId,
+        secretAccessKey: credentials.SecretAccessKey,
+        sessionToken: credentials.SessionToken,
+    };
+}
+export async function assumeRoleOrFail(sts, roleArn) {
+    try {
+        return await assumeRole(sts, roleArn);
+    }
+    catch (error) {
+        const category = stsFailureCategory(error);
+        if (!category) {
+            throw error;
+        }
+        throw new StartupFailure(category, `AssumeRole failed: ${String(error)}`);
+    }
+}
+/**
+ * Pumps JSON-RPC messages between the two transports without interpreting them,
+ * so every tool, notification and future protocol method passes through
+ * untouched. The only thing this process adds is the SigV4 signature.
+ */
+export function relay(local, remote) {
+    local.onmessage = (message) => {
+        remote.send(message).catch((err) => local.onerror?.(asError(err)));
+    };
+    remote.onmessage = (message) => {
+        local.send(message).catch((err) => remote.onerror?.(asError(err)));
+    };
+    local.onclose = () => void remote.close();
+    remote.onclose = () => void local.close();
+}
+function asError(err) {
+    return err instanceof Error ? err : new Error(String(err));
+}
+export async function run(env) {
+    const { credentials, roleArn, region, endpoint } = validateEnv(env);
+    const assumed = await assumeRoleOrFail(new STSClient({ credentials, region }), roleArn);
+    const remote = new StreamableHTTPClientTransport(endpoint, {
+        fetch: createSignedFetch(endpoint, assumed),
+    });
+    const local = new StdioServerTransport();
+    relay(local, remote);
+    remote.onerror = (err) => process.stderr.write(`Upstream error: ${err.message}\n`);
+    await remote.start();
+    await local.start();
+    for (const signal of ['SIGINT', 'SIGTERM']) {
+        process.on(signal, () => {
+            void remote.close();
+            void local.close();
+            process.exit(0);
+        });
+    }
+}
+//# sourceMappingURL=run.js.map

package/dist/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../src/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,YAAY,GAAG;IACnB,mBAAmB;IACnB,uBAAuB;IACvB,mBAAmB;IACnB,cAAc;CACN,CAAC;AAEX,MAAM,CAAC,MAAM,gBAAgB,GAAG,uCAAuC,CAAC;AAQxE,MAAM,UAAU,WAAW,CAAC,GAAsB;IAMhD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,IAAI,cAAc,CACtB,eAAe,CAAC,UAAU,EAC1B,0CAA0C,GAAG,EAAE,CAChD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW,EAAE;YACX,WAAW,EAAE,GAAG,CAAC,iBAAkB;YACnC,eAAe,EAAE,GAAG,CAAC,qBAAsB;YAC3C,YAAY,EAAE,GAAG,CAAC,iBAAkB;SACrC;QACD,OAAO,EAAE,GAAG,CAAC,YAAa;QAC1B,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,kBAAkB,IAAI,WAAW;QAC/D,QAAQ,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,gBAAgB,IAAI,gBAAgB,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAc,EAAE,OAAe;IAC9D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAC7B,IAAI,iBAAiB,CAAC;QACpB,OAAO,EAAE,OAAO;QAChB,eAAe,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,EAAE;KAC/C,CAAC,CACH,CAAC;IACF,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IACzC,IAAI,CAAC,WAAW,EAAE,WAAW,IAAI,CAAC,WAAW,EAAE,eAAe,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO;QACL,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,eAAe,EAAE,WAAW,CAAC,eAAe;QAC5C,YAAY,EAAE,WAAW,CAAC,YAAY;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAc,EAAE,OAAe;IACpE,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,sBAAsB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,KAAgB,EAAE,MAAiB;IACvD,KAAK,CAAC,SAAS,GAAG,CAAC,OAAO,EAAE,EAAE;QAC5B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC;IACF,MAAM,CAAC,SAAS,GAAG,CAAC,OAAO,EAAE,EAAE;QAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC;IACF,KAAK,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;IAC1C,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,GAAsB;IAC9C,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAEpE,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,SAAS,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAExF,MAAM,MAAM,GAAG,IAAI,6BAA6B,CAAC,QAAQ,EAAE;QACzD,KAAK,EAAE,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC;KAC5C,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAEzC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrB,MAAM,CAAC,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;IAEnF,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IAEpB,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QACpD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACtB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/signing.d.ts

@@ -0,0 +1,18 @@
+import type { AwsCredentialIdentity } from '@smithy/types';
+export type FetchLike = (url: string | URL, init?: RequestInit) => Promise<Response>;
+/**
+ * The managed AWS MCP endpoints are named `<service>.<region>.api.aws`, and the
+ * signature's credential scope must match both. AWS's own `mcp-proxy-for-aws`
+ * derives them from the hostname the same way, so
+ * `aws-mcp.us-east-1.api.aws` signs as service `aws-mcp` in `us-east-1`.
+ */
+export declare function signingTarget(endpoint: URL): {
+    service: string;
+    region: string;
+};
+/**
+ * A `fetch` that SigV4-signs every request before sending it. Handed to the MCP
+ * streamable-HTTP transport so both the POSTs and the GET event stream are signed.
+ */
+export declare function createSignedFetch(endpoint: URL, credentials: AwsCredentialIdentity, fetchImpl?: FetchLike): FetchLike;
+//# sourceMappingURL=signing.d.ts.map

package/dist/signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.d.ts","sourceRoot":"","sources":["../src/signing.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE3D,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAErF;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,GAAG,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAShF;AAoBD;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,GAAG,EACb,WAAW,EAAE,qBAAqB,EAClC,SAAS,GAAE,SAAiB,GAC3B,SAAS,CA0BX"}

package/dist/signing.js

@@ -0,0 +1,61 @@
+import { Sha256 } from '@aws-crypto/sha256-js';
+import { SignatureV4 } from '@smithy/signature-v4';
+/**
+ * The managed AWS MCP endpoints are named `<service>.<region>.api.aws`, and the
+ * signature's credential scope must match both. AWS's own `mcp-proxy-for-aws`
+ * derives them from the hostname the same way, so
+ * `aws-mcp.us-east-1.api.aws` signs as service `aws-mcp` in `us-east-1`.
+ */
+export function signingTarget(endpoint) {
+    const [service, region, ...rest] = endpoint.hostname.split('.');
+    if (rest.join('.') !== 'api.aws' || !service || !region) {
+        throw new Error(`Cannot derive SigV4 service and region from endpoint host "${endpoint.hostname}"; ` +
+            'expected <service>.<region>.api.aws');
+    }
+    return { service, region };
+}
+function headerRecord(headers) {
+    const record = {};
+    new Headers(headers).forEach((value, key) => {
+        record[key] = value;
+    });
+    delete record.connection;
+    return record;
+}
+function queryRecord(url) {
+    const query = {};
+    for (const key of new Set(url.searchParams.keys())) {
+        const values = url.searchParams.getAll(key);
+        query[key] = values.length > 1 ? values : values[0];
+    }
+    return query;
+}
+/**
+ * A `fetch` that SigV4-signs every request before sending it. Handed to the MCP
+ * streamable-HTTP transport so both the POSTs and the GET event stream are signed.
+ */
+export function createSignedFetch(endpoint, credentials, fetchImpl = fetch) {
+    const { service, region } = signingTarget(endpoint);
+    const signer = new SignatureV4({ service, region, sha256: Sha256, credentials });
+    return async (input, init = {}) => {
+        const url = new URL(input.toString());
+        const body = typeof init.body === 'string' ? init.body : undefined;
+        const headers = headerRecord(init.headers);
+        headers.host = url.host;
+        if (body !== undefined) {
+            headers['content-length'] = String(Buffer.byteLength(body));
+        }
+        const signed = await signer.sign({
+            method: init.method ?? 'GET',
+            protocol: url.protocol,
+            hostname: url.hostname,
+            port: url.port ? Number(url.port) : undefined,
+            path: url.pathname,
+            query: queryRecord(url),
+            headers,
+            body,
+        });
+        return fetchImpl(url, { ...init, headers: signed.headers });
+    };
+}
+//# sourceMappingURL=signing.js.map

package/dist/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../src/signing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAKnD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,QAAa;IACzC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,8DAA8D,QAAQ,CAAC,QAAQ,KAAK;YAClF,qCAAqC,CACxC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,YAAY,CAAC,OAA+B;IACnD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,UAAU,CAAC;IACzB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,GAAQ;IAC3B,MAAM,KAAK,GAAsC,EAAE,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5C,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAa,EACb,WAAkC,EAClC,YAAuB,KAAK;IAE5B,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAEjF,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE;QAChC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACxB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;YAC5B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YAC7C,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC;YACvB,OAAO;YACP,IAAI;SACL,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@apono-io/mcp-aws-managed",
+  "version": "0.2.0",
+  "description": "Apono MCP server for AWS — signs requests to the managed AWS MCP Server with STS AssumeRole credentials",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "apono-mcp-aws-managed": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "test": "vitest run",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@aws-crypto/sha256-js": "^5.2.0",
+    "@aws-sdk/client-sts": "^3.0.0",
+    "@modelcontextprotocol/sdk": "^1.30.0",
+    "@smithy/signature-v4": "^5.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.7.0",
+    "vitest": "^3.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "author": "Apono",
+  "license": "ISC"
+}