@yawlabs/aws-mcp 1.2.2 → 1.3.1

package/README.md

@@ -100,23 +100,39 @@ The rest -- SSO device-code re-login, CCAPI CRUD with dry-run diffs, multi-regio
 
 ## Install
 
+Add to your MCP client config (e.g. `.mcp.json`):
+
+```json
+{
+  "mcpServers": {
+    "aws": {
+      "command": "npx",
+      "args": ["-y", "@yawlabs/aws-mcp"]
+    }
+  }
+}
+```
+
+The `-y` flag is what gives you **auto-update on each session load**: every time your MCP client spawns the server, `npx` checks the registry for the latest `@yawlabs/aws-mcp` and downloads it if newer. The first launch in a fresh cache adds ~100-500 ms; subsequent launches use npm's cache (typical metadata-freshness window: 5 min) and add ~50 ms or less. Once the server is up, tool calls have zero auto-update overhead -- the check fires only on (re-)spawn. No separate install step is needed; `-y` covers both first-time install and ongoing updates.
+
+If you'd rather pin a specific version (no auto-update, but zero startup overhead), install globally and point the config at the installed binary:
+
 ```bash
 npm install -g @yawlabs/aws-mcp
 ```
 
-Or add to your MCP client config (e.g. `.mcp.json`):
-
 ```json
 {
   "mcpServers": {
     "aws": {
-      "command": "npx",
-      "args": ["-y", "@yawlabs/aws-mcp"]
+      "command": "aws-mcp"
     }
   }
 }
 ```
 
+You'll need to `npm install -g @yawlabs/aws-mcp@latest` manually when you want a newer version.
+
 ## Example session
 
 You ask the assistant to check a staging bucket, but your SSO token just expired. What the assistant does (and what you see):

package/dist/index.js

@@ -55458,6 +55458,7 @@ function canonicalizeStatistic(s) {
   for (const stat of SIMPLE_STATS) {
     if (stat.toLowerCase() === lower) return stat;
   }
+  if (EXTENDED_STAT_RE.test(s)) return lower;
   return s;
 }
 var QUERY_ID_RE = /^[a-z][A-Za-z0-9_]*$/;
@@ -56645,6 +56646,12 @@ function defaultScriptHandlers() {
   const callTool = findTool("aws_call", callTools);
   const paginateTool = findTool("aws_paginate", paginateTools);
   const logsTailTool = findTool("aws_logs_tail", logsTools);
+  const metricsQueryTool = findTool("aws_metrics_query", metricsTools);
+  const iamSimulateTool = findTool("aws_iam_simulate", iamSimulateTools);
+  const multiRegionTool = findTool("aws_multi_region", multiRegionTools);
+  const assumeRoleTool = findTool("aws_assume_role", assumeTools);
+  const docsSearchTool = findTool("aws_docs_search", docsTools);
+  const docsReadTool = findTool("aws_docs_read", docsTools);
   const resourceGet = findTool("aws_resource_get", resourceTools);
   const resourceList = findTool("aws_resource_list", resourceTools);
   const resourceCreate = findTool("aws_resource_create", resourceTools);
@@ -56656,6 +56663,10 @@ function defaultScriptHandlers() {
     paginate: (input) => unwrap(paginateTool, input),
     paginateAll: buildPaginateAll(paginateTool),
     logsTail: (input) => unwrap(logsTailTool, input),
+    metricsQuery: (input) => unwrap(metricsQueryTool, input),
+    iamSimulate: (input) => unwrap(iamSimulateTool, input),
+    multiRegion: (input) => unwrap(multiRegionTool, input),
+    assumeRole: (input) => unwrap(assumeRoleTool, input),
     resource: {
       get: (input) => unwrap(resourceGet, input),
       list: (input) => unwrap(resourceList, input),
@@ -56663,6 +56674,10 @@ function defaultScriptHandlers() {
       update: (input) => unwrap(resourceUpdate, input),
       delete: (input) => unwrap(resourceDelete, input),
       status: (input) => unwrap(resourceStatus, input)
+    },
+    docs: {
+      search: (input) => unwrap(docsSearchTool, input),
+      read: (input) => unwrap(docsReadTool, input)
     }
   };
 }
@@ -56716,6 +56731,10 @@ async function runScript(opts, handlers = defaultScriptHandlers()) {
     paginate: wrapForRealm(handlers.paginate),
     paginateAll: wrapForRealm(handlers.paginateAll),
     logsTail: wrapForRealm(handlers.logsTail),
+    metricsQuery: wrapForRealm(handlers.metricsQuery),
+    iamSimulate: wrapForRealm(handlers.iamSimulate),
+    multiRegion: wrapForRealm(handlers.multiRegion),
+    assumeRole: wrapForRealm(handlers.assumeRole),
     resource: {
       get: wrapForRealm(handlers.resource.get),
       list: wrapForRealm(handlers.resource.list),
@@ -56723,6 +56742,10 @@ async function runScript(opts, handlers = defaultScriptHandlers()) {
       update: wrapForRealm(handlers.resource.update),
       delete: wrapForRealm(handlers.resource.delete),
       status: wrapForRealm(handlers.resource.status)
+    },
+    docs: {
+      search: wrapForRealm(handlers.docs.search),
+      read: wrapForRealm(handlers.docs.read)
     }
   };
   Object.assign(ctx, {
@@ -56807,7 +56830,7 @@ ${opts.code}
 var scriptTools = [
   {
     name: "aws_script",
-    description: "Run a short JavaScript snippet that orchestrates other aws-mcp tools (aws.call, aws.paginate, aws.paginateAll, aws.resource.*, aws.logsTail) and returns a combined result. Best for batched read+filter+aggregate workflows that would otherwise need N tool round-trips: 'list all Lambdas, fetch each one's config, return those with memory > 1024'. Use `return <value>` at the end to surface a result; console.log lines are captured and returned alongside. Helpers throw Errors on failure -- use try/catch. NOT a security sandbox -- treat the same as any other tool the model can call.",
+    description: "Run a short JavaScript snippet that orchestrates other aws-mcp tools (aws.call, aws.paginate, aws.paginateAll, aws.resource.*, aws.logsTail, aws.metricsQuery, aws.iamSimulate, aws.multiRegion, aws.assumeRole, aws.docs.{search,read}) and returns a combined result. Best for batched read+filter+aggregate workflows that would otherwise need N tool round-trips: 'list all Lambdas, fetch each one's config, return those with memory > 1024'. Use `return <value>` at the end to surface a result; console.log lines are captured and returned alongside. Helpers throw Errors on failure -- use try/catch. NOT a security sandbox -- treat the same as any other tool the model can call.",
     annotations: {
       title: "Run a JS snippet that orchestrates AWS tool calls",
       // The script may invoke destructive tools (resource.create/update/delete)
@@ -56819,7 +56842,7 @@ var scriptTools = [
     },
     inputSchema: external_exports3.object({
       code: external_exports3.string().min(1).describe(
-        "JavaScript snippet evaluated inside `(async () => { ... })()`. Use `return <value>` to surface a result. Bound globals: aws.call, aws.paginate, aws.paginateAll, aws.resource.{get,list,create,update,delete,status}, aws.logsTail, console (capture), JSON, Math, Date, Promise, Array, Object, String, Number, Boolean, Error, Intl, Atomics, SharedArrayBuffer, WebAssembly (compile blocked). Intentionally NOT bound (call as sibling MCP tools instead): aws_metrics_query, aws_iam_simulate, aws_multi_region, aws_assume_role, aws_docs_search, aws_docs_read, aws_list_profiles, the auth/session tools, and aws_script itself. Shadowed (undefined): require, import, process, fs, fetch + family, BroadcastChannel, setTimeout/Interval, queueMicrotask, Buffer, global, globalThis. NOT available (ReferenceError if used): URL, URLSearchParams, TextEncoder, TextDecoder, crypto, structuredClone, EventTarget, MessageChannel, performance. eval/Function are disabled (codeGeneration off). Tool helpers throw on failure -- wrap in try/catch when you want to handle errors per-call."
+        "JavaScript snippet evaluated inside `(async () => { ... })()`. Use `return <value>` to surface a result. Bound globals: aws.call, aws.paginate, aws.paginateAll, aws.resource.{get,list,create,update,delete,status}, aws.logsTail, aws.metricsQuery, aws.iamSimulate, aws.multiRegion, aws.assumeRole, aws.docs.{search,read}, console (capture), JSON, Math, Date, Promise, Array, Object, String, Number, Boolean, Error, Intl, Atomics, SharedArrayBuffer, WebAssembly (compile blocked). Intentionally NOT bound (call as sibling MCP tools instead): aws_list_profiles, the auth/session tools, and aws_script itself. Shadowed (undefined): require, import, process, fs, fetch + family, BroadcastChannel, setTimeout/Interval, queueMicrotask, Buffer, global, globalThis. NOT available (ReferenceError if used): URL, URLSearchParams, TextEncoder, TextDecoder, crypto, structuredClone, EventTarget, MessageChannel, performance. eval/Function are disabled (codeGeneration off). Tool helpers throw on failure -- wrap in try/catch when you want to handle errors per-call."
       ),
       timeoutMs: external_exports3.number().int().positive().max(MAX_TIMEOUT_MS).optional().describe(
         `Wall-clock timeout in milliseconds. Default ${DEFAULT_TIMEOUT_MS2}; max ${MAX_TIMEOUT_MS}. Covers evaluation plus every awaited aws.* call. On timeout the script stops being awaited and the tool returns an error, but any aws.* call already in flight is NOT cancelled -- it continues until its own per-call timeout (default 60s). Plan retries accordingly: a script that timed out mid 'resource.delete' may have completed the delete; re-issuing the same script can double-mutate.`
@@ -56920,7 +56943,7 @@ var sessionTools = [
 ];
 
 // src/index.ts
-var version2 = true ? "1.2.2" : (await null).createRequire(import.meta.url)("../package.json").version;
+var version2 = true ? "1.3.1" : (await null).createRequire(import.meta.url)("../package.json").version;
 var subcommand = process.argv[2];
 if (subcommand === "version" || subcommand === "--version") {
   console.log(version2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yawlabs/aws-mcp",
-  "version": "1.2.2",
+  "version": "1.3.1",
   "mcpName": "io.github.YawLabs/aws-mcp",
   "description": "AWS MCP server — call any AWS API from AI assistants, with first-class SSO re-login (no more 'browser won't open' dead ends)",
   "license": "MIT",