{"repo":"aws-solutions-library-samples/guidance-for-deploying-model-context-protocol-servers-on-aws","free":true,"listed":false,"github":"https://github.com/aws-solutions-library-samples/guidance-for-deploying-model-context-protocol-servers-on-aws","clone":"git clone https://github.com/aws-solutions-library-samples/guidance-for-deploying-model-context-protocol-servers-on-aws.git","description":"This Guidance demonstrates how to securely run Model Context Protocol (MCP) servers on the AWS Cloud using containerized architecture. It helps organizations implement industry-standard OAuth 2.0 authentication while protecting server deployments with multiple security layers, including content delivery networks and web application firewalls.","language":"TypeScript","stars":153,"topics":[],"license":"MIT-0","category":"mcp-servers","readme_excerpt":"Guidance for Deploying Model Context Protocol Servers on AWS Table of Contents 1. Overview - Cost 2. Prerequisites - Operating System 3. Deployment Steps 4. Deployment Validation 5. Running the Guidance 6. Next Steps 7. Cleanup 8. FAQ, known issues, additional considerations, and limitations 9. Revisions 10. Notices Overview This guidance demonstrates how to deploy Model Context Protocol (MCP) servers on AWS with secure authentication using Amazon Cognito, implementing the 2025-06-18 MCP specification with OAuth 2.0 Protected Resource Metadata (RFC9728). It enables you to host MCP servers that can be accessed remotely while maintaining security through standards-compliant OAuth 2.0 authentication flows. The solution addresses several key challenges: - Secure hosting of MCP servers on AWS infrastructure - Standards-compliant authentication using OAuth 2.0 Protected Resource Metadata (RFC9728) - Remote access to MCP servers through secure StreamableHTTP transport - Stateless server architecture for concurrent client support - Scalable and maintainable deployment using AWS CDK Architecture The architecture implements: 1. CloudFront distribution for global content delivery with WAF protection 2. Application Load Balancer for traffic distribution and SSL termination 3. ECS Fargate and Lambda for containerized and serverless MCP servers 4. AWS Cognito for OAuth 2.0 authorization server functionality 5. OAuth 2.0 Protected Resource Metadata endpoints for standards-compliant authenti","default_branch":null,"files":null,"tree":[],"storefront":"/r/aws-solutions-library-samples","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/aws-solutions-library-samples/guidance-for-deploying-model-context-protocol-servers-on-aws/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}