Amazon ECS MCP Server Tool Configurations - Amazon Elastic Container Service
Environment variablesArgumentsTools

Amazon ECS MCP Server Tool Configurations

This guide shows all the configurations available for the fully managed Amazon ECS MCP Server.

Note

The Amazon ECS MCP server is in preview release and is subject to change.

Environment variables

AWS_PROFILE (optional)

AWS credentials profile name to use; can be overridden by the --profile command-line argument.

Example: export AWS_PROFILE=dev

AWS_REGION (optional)

AWS region for SigV4 signing; defaults to us-west-2 if not set.

Example: export AWS_REGION=us-west-2

Arguments

SigV4 MCP endpoint URL (required)

The MCP endpoint URL to connect to.

Example: https://ecs-mcp.us-west-2.api.aws/mcp

--service (optional)

AWS service name for SigV4 signing; auto-detected from the endpoint hostname if not provided.

Example: --service ecs-mcp

--profile (optional)

AWS credentials profile to use. Defaults to the AWS_PROFILE environment variable if not specified.

Example: --profile dev

--region

AWS region to use. Uses AWS_REGION environment variable if not set, defaults to us-east-1.

Example: --region us-west-2

--read-only (optional)

Disable tools which may require write permissions (tools which DO NOT require write permissions are annotated with readOnlyHint=true). By default, all tools are enabled.

Example: --read-only

For more configuration options, see Configuration parameters.

Tools

The Amazon ECS MCP server exposes the following MCP tools.

Read only tools

get_deployment_status

The tool checks your Amazon ECS deployment status for a particular Amazon ECS cluster and service.

  • Required IAM actions:

    • ecs:DescribeServices

    • elasticloadbalancing:DescribeTargetGroups

    • elasticloadbalancing:DescribeLoadBalancers

  • Required parameters:

    • cluster_name (string): Amazon ECS cluster name

    • service_name (string): Amazon ECS service name

  • Response: The tool returns deployment status and details associated with the deployment.

fetch_service_events

This tool retrieves Amazon ECS service events for diagnostics with customizable time windows.

  • Required IAM actions:

    • ecs:DescribeServices

  • Required parameters:

    • cluster_name (string): Amazon ECS cluster name

    • service_name (string): Amazon ECS service name

  • Optional parameters:

    • time_window (integer): You can mention a time window in seconds (default is 1 hour or 3600 seconds)

    • start_time (string): Custom start time in ISO format

    • end_time (string): Custom end time in ISO format

  • Response: The tool returns list of events for the service with summary.

fetch_task_failures

This tool helps you retrieve and analyze Amazon ECS task failures with summaries. Using this tool, you can identify any patterns in task failures.

  • Required IAM actions:

    • ecs:ListTasks

    • ecs:DescribeTasks

  • Required parameters:

    • cluster_name (string): Amazon ECS cluster name where your task resides

  • Optional parameters:

    • service_name (string): You can filter by specific service

    • time_window (integer): You can mention a time window in seconds (default is 1 hour or 3600 seconds)

    • start_time (string): Custom start time in ISO format

    • end_time (string): Custom end time in ISO format

  • Response: The tool returns TaskFailureResult with failed tasks and summary

fetch_task_logs

This tool retrieves CloudWatch logs for Amazon ECS tasks with flexible time range options. You use this tool to troubleshoot runtime issues.

  • Required IAM actions:

    • ecs:DescribeServices

    • ecs:DescribeTaskDefinition

    • logs:FilterLogEvents

  • Required parameters:

    • cluster_name (string): Amazon ECS cluster name

    • service_name (string): Amazon ECS service name

  • Optional parameters:

    • time_window (integer): You can mention a time window in seconds (default is 1 hour or 3600 seconds)

    • start_time (string): Custom start time in ISO format

    • end_time (string): Custom end time in ISO format

    • log_group_name (string): Specify CloudWatch log group

  • Response: The tool returns TaskLogsResult with log entries

get_task_definition_deletion_blockers

This tool identifies dependencies that can prevent task definition deletion. The tool is appropriate when you are running cleanup operations and understand what is preventing Amazon ECS resource deletion.

  • Required IAM actions:

    • ecs:ListClusters

    • ecs:ListServices

    • ecs:DescribeServices

    • ecs:ListTasks

    • ecs:DescribeTasks

  • Required parameters:

    • task_definition_arn (string): Task definition Amazon Resource Name (ARN) to analyze

  • Response: The tool returns the blockers and deletion status

detect_image_pull_failures

This tool helps you to detect and categorize container image pull failures.

  • Required IAM actions:

    • ecs:ListTasks

    • ecs:DescribeTasks

  • Required parameters:

    • cluster_name (string): Amazon ECS cluster name

  • Optional parameters:

    • service_name (string): You can filter by specific service

    • time_window (integer): You can mention a time window in seconds (default is 1 hour or 3600 seconds)

    • start_time (string): Custom start time in ISO format

    • end_time (string): Custom end time in ISO format

  • Response: The tool returns the failures and summary

fetch_network_configuration

This tool retrieves Amazon ECS service network configuration details. You can use this tool to understand the Amazon VPC, subnet, security group configuration of your Amazon ECS setup.

  • Required IAM actions:

    • ecs:DescribeServices

    • ec2:DescribeSecurityGroups

    • ec2:DescribeSubnets

  • Required parameters:

    • cluster_name (string): Amazon ECS cluster name

    • service_name (string): Amazon ECS service name

  • Response: The tool returns a list of NetworkConfigurationResult with network details