awslabs.dynamodb-mcp-server 0.1.3__tar.gz → 0.1.4__tar.gz

{awslabs_dynamodb_mcp_server-0.1.3 → awslabs_dynamodb_mcp_server-0.1.4}/Dockerfile

@@ -10,7 +10,7 @@
 # and limitations under the License.
 
 #FROM public.ecr.aws/sam/build-python3.10:1.137.1-20250411084548
-FROM public.ecr.aws/sam/build-python3.10@sha256:04cdbe84bec08d17d621192bc3f0a9e4a85a83f2ac99aa9241659dfac0d845ea AS uv
+FROM public.ecr.aws/sam/build-python3.10@sha256:e78695db10ca8cb129e59e30f7dc9789b0dbd0181dba195d68419c72bac51ac1 AS uv
 
 # Install the project into `/app`
 WORKDIR /app
@@ -44,7 +44,7 @@ RUN --mount=type=cache,target=/root/.cache/uv \
 # Make the directory just in case it doesn't exist
 RUN mkdir -p /root/.local
 
-FROM public.ecr.aws/sam/build-python3.10@sha256:04cdbe84bec08d17d621192bc3f0a9e4a85a83f2ac99aa9241659dfac0d845ea
+FROM public.ecr.aws/sam/build-python3.10@sha256:e78695db10ca8cb129e59e30f7dc9789b0dbd0181dba195d68419c72bac51ac1
 
 # Place executables in the environment at the front of the path and include other binaries
 ENV PATH="/app/.venv/bin:$PATH:/usr/sbin"

{awslabs_dynamodb_mcp_server-0.1.3 → awslabs_dynamodb_mcp_server-0.1.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: awslabs.dynamodb-mcp-server
-Version: 0.1.3
+Version: 0.1.4
 Summary: The official MCP Server for interacting with AWS DynamoDB
 Project-URL: homepage, https://awslabs.github.io/mcp/
 Project-URL: docs, https://awslabs.github.io/mcp/servers/dynamodb-mcp-server/
@@ -104,6 +104,7 @@ Add the MCP to your favorite agentic tools. e.g. for Amazon Q Developer CLI MCP,
       "command": "uvx",
       "args": ["awslabs.dynamodb-mcp-server@latest"],
       "env": {
+        "DDB-MCP-READONLY": "true",
         "AWS_PROFILE": "default",
         "AWS_REGION": "us-west-2",
         "FASTMCP_LOG_LEVEL": "ERROR"

{awslabs_dynamodb_mcp_server-0.1.3 → awslabs_dynamodb_mcp_server-0.1.4}/README.md

@@ -74,6 +74,7 @@ Add the MCP to your favorite agentic tools. e.g. for Amazon Q Developer CLI MCP,
       "command": "uvx",
       "args": ["awslabs.dynamodb-mcp-server@latest"],
       "env": {
+        "DDB-MCP-READONLY": "true",
         "AWS_PROFILE": "default",
         "AWS_REGION": "us-west-2",
         "FASTMCP_LOG_LEVEL": "ERROR"

{awslabs_dynamodb_mcp_server-0.1.3 → awslabs_dynamodb_mcp_server-0.1.4}/awslabs/dynamodb_mcp_server/common.py

@@ -1,3 +1,4 @@
+import os
 from functools import wraps
 from typing import Any, Callable, Dict, List, Literal, Optional
 from typing_extensions import TypedDict
@@ -26,6 +27,19 @@ def handle_exceptions(func: Callable) -> Callable:
     return wrapper
 
 
+def mutation_check(func):
+    """Decorator to block mutations if DDB-MCP-READONLY is set to true."""
+
+    @wraps(func)
+    async def wrapper(*args, **kwargs):
+        readonly = os.environ.get('DDB-MCP-READONLY', '').lower()
+        if readonly in ('true', '1', 'yes'):  # treat these as true
+            return {'error': 'Mutation not allowed: DDB-MCP-READONLY is set to true.'}
+        return await func(*args, **kwargs)
+
+    return wrapper
+
+
 # Type definitions
 AttributeValue = Dict[Literal['S', 'N', 'B', 'BOOL', 'NULL', 'L', 'M', 'SS', 'NS', 'BS'], Any]
 KeyAttributeValue = Dict[Literal['S', 'N', 'B'], Any]

{awslabs_dynamodb_mcp_server-0.1.3 → awslabs_dynamodb_mcp_server-0.1.4}/awslabs/dynamodb_mcp_server/server.py

@@ -30,6 +30,7 @@ from awslabs.dynamodb_mcp_server.common import (
     UpdateTableInput,
     WarmThroughput,
     handle_exceptions,
+    mutation_check,
 )
 from botocore.config import Config
 from mcp.server.fastmcp import FastMCP
@@ -99,6 +100,7 @@ resource_arn: str = Field(description='The Amazon Resource Name (ARN) of the Dyn
 
 @app.tool()
 @handle_exceptions
+@mutation_check
 async def put_resource_policy(
     resource_arn: str = resource_arn,
     policy: Union[str, Dict[str, Any]] = Field(
@@ -236,6 +238,7 @@ async def query(
 
 @app.tool()
 @handle_exceptions
+@mutation_check
 async def update_item(
     table_name: str = table_name,
     key: Dict[str, KeyAttributeValue] = key,
@@ -303,6 +306,7 @@ async def get_item(
 
 @app.tool()
 @handle_exceptions
+@mutation_check
 async def put_item(
     table_name: str = table_name,
     item: Dict[str, AttributeValue] = Field(
@@ -337,6 +341,7 @@ async def put_item(
 
 @app.tool()
 @handle_exceptions
+@mutation_check
 async def delete_item(
     table_name: str = table_name,
     key: Dict[str, KeyAttributeValue] = key,
@@ -370,6 +375,7 @@ async def delete_item(
 
 @app.tool()
 @handle_exceptions
+@mutation_check
 async def update_time_to_live(
     table_name: str = table_name,
     time_to_live_specification: TimeToLiveSpecification = Field(
@@ -387,6 +393,7 @@ async def update_time_to_live(
 
 @app.tool()
 @handle_exceptions
+@mutation_check
 async def update_table(
     table_name: str = table_name,
     attribute_definitions: List[AttributeDefinition] = Field(
@@ -483,6 +490,7 @@ async def list_tables(
 
 @app.tool()
 @handle_exceptions
+@mutation_check
 async def create_table(
     table_name: str = Field(
         description='The name of the table to create.',
@@ -536,6 +544,7 @@ async def describe_table(
 
 @app.tool()
 @handle_exceptions
+@mutation_check
 async def create_backup(
     table_name: str = table_name,
     backup_name: str = Field(
@@ -602,6 +611,7 @@ async def list_backups(
 
 @app.tool()
 @handle_exceptions
+@mutation_check
 async def restore_table_from_backup(
     backup_arn: str = Field(
         description='The Amazon Resource Name (ARN) associated with the backup.',
@@ -717,6 +727,7 @@ async def describe_continuous_backups(
 
 @app.tool()
 @handle_exceptions
+@mutation_check
 async def untag_resource(
     resource_arn: str = resource_arn,
     tag_keys: List[str] = Field(description='List of tags to remove.', min_length=1),
@@ -730,6 +741,7 @@ async def untag_resource(
 
 @app.tool()
 @handle_exceptions
+@mutation_check
 async def tag_resource(
     resource_arn: str = resource_arn,
     tags: List[Tag] = Field(description='Tags to be assigned.'),
@@ -762,6 +774,7 @@ async def list_tags_of_resource(
 
 @app.tool()
 @handle_exceptions
+@mutation_check
 async def delete_table(
     table_name: str = table_name,
     region_name: str = Field(default=None, description='The aws region to run the tool'),
@@ -802,6 +815,25 @@ async def update_continuous_backups(
     return response['ContinuousBackupsDescription']
 
 
+@app.tool()
+@handle_exceptions
+async def list_imports(
+    next_token: str = Field(default=None, description='Token to fetch the next page of results.'),
+    region_name: str = Field(default=None, description='The aws region to run the tool'),
+) -> dict:
+    """Lists imports completed within the past 90 days."""
+    client = get_dynamodb_client(region_name)
+    params = {}
+    if next_token:
+        params['NextToken'] = next_token
+    params['PageSize'] = 25
+    response = client.list_imports(**params)
+    return {
+        'ImportSummaryList': response.get('ImportSummaryList', []),
+        'NextToken': response.get('NextToken'),
+    }
+
+
 def main():
     """Main entry point for the MCP server application."""
     app.run()

{awslabs_dynamodb_mcp_server-0.1.3 → awslabs_dynamodb_mcp_server-0.1.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "awslabs.dynamodb-mcp-server"
-version = "0.1.3"
+version = "0.1.4"
 description = "The official MCP Server for interacting with AWS DynamoDB"
 readme = "README.md"
 requires-python = ">=3.10"

{awslabs_dynamodb_mcp_server-0.1.3 → awslabs_dynamodb_mcp_server-0.1.4}/tests/test_dynamodb_server.py

@@ -872,3 +872,18 @@ async def test_exception_handling(test_table):
     # Verify error is returned
     assert 'error' in error_result
     print(error_result)
+
+
+@pytest.mark.asyncio
+async def test_list_imports(test_table):
+    """Test listing imports for a table (should be empty with moto)."""
+    from awslabs.dynamodb_mcp_server.server import list_imports
+
+    # Call list_imports with no imports present
+    result = await list_imports(
+        region_name='us-west-2',
+        next_token=None,
+    )
+
+    # Should return a dict with ImportSummaryList and NextToken keys
+    assert isinstance(result, dict)

awslabs_dynamodb_mcp_server-0.1.4/tests/test_readonly_delete_table.py

@@ -0,0 +1,14 @@
+import pytest
+from awslabs.dynamodb_mcp_server import server
+
+
+@pytest.mark.asyncio
+async def test_delete_table_blocked_by_readonly(monkeypatch):
+    """Test that delete_table is blocked if DDB-MCP-READONLY is set to true."""
+    # Set the environment variable to simulate read-only mode
+    monkeypatch.setenv('DDB-MCP-READONLY', 'true')
+
+    # Call delete_table and expect an error
+    result = await server.delete_table(table_name='TestTable', region_name='us-west-2')
+    assert 'error' in result
+    assert 'DDB-MCP-READONLY' in result['error']