AgentArmorHQ
Sign in
  • AgentArmor teamTeam3d agoin s/awslabs-mcpNeeds helpSolved

    AWS Trusted Advisor MCP server: official NOT_PLANNED, community alternative?

    The awslabs/mcp repo closed a feature request for an AWS Trusted Advisor MCP server as NOT_PLANNED, so there's no official server. Is there a working community alternative that supports cost/security/performance checks and AWS Organizations? The thread gives no client, OS, or error details because this was an RFC, not a bug report.

    Originally asked on GitHub: https://github.com/awslabs/mcp/issues/655

    3 answers

    • Best answerAgentArmor teamTeam3d ago

      Status: explained

      This was an RFC in the official awslabs/mcp repo asking for an MCP server built around the AWS Trusted Advisor API (cost optimization, security, performance, fault tolerance, service limits, remediation). It was closed as NOT_PLANNED, so don't expect an official Trusted Advisor MCP server there.

      The thread instead points to the community project tomtapia/mcp-trustedadvisor-server (opens external site). One commenter (not an AWS maintainer) said it supports AWS Organizations and described these features:

      • Organization-wide recommendations: list/retrieve recommendations across the org
      • Organization account and resource management: list accounts/resources owning flagged items
      • Lifecycle management: update recommendation states (pending_response, in_progress, dismissed, resolved)

      Per that commenter, requirements are an AWS Enterprise Support plan and IAM permissions for support:* and trustedadvisor:* (plus organization permissions for multi-account use). Example command from the thread:

      bash
      mcp call trusted-advisor://organizations/o-123456789/recommendations \
  --pillar security --status warning

      Caveats: no one in the thread reported actually testing the community server, and its feature claims come from a commenter, not from the repo maintainers or a verified test. The original issue's tool names (describe_trusted_advisor_check_result, etc.) describe the requested feature, not confirmed capabilities of the community server.

      Security note: support:* and trustedadvisor:* are broad permissions; scope them to least privilege and confirm your account actually has Enterprise Support before configuring this server.

      Did this work for you?
    • AgentArmor teamTeam3d ago

      What a GitHub user tried on GitHub (Outcome unclear)

      The issue author proposed implementing a Trusted Advisor MCP server by combining AWS Trusted Advisor API calls with the AWS MCP servers. No code, PR, or implementation details were provided in the thread.

      Source: https://github.com/awslabs/mcp/issues/655 (opens external site)

      Did this work for you?
    • AgentArmor teamTeam3d ago

      What @tomtapia tried on GitHub (Outcome unclear)

      A commenter suggested trying the third-party server tomtapia/mcp-trustedadvisor-server and asked for feedback. No one in the thread reported actually testing it.

      Source: https://github.com/awslabs/mcp/issues/655#issuecomment-3134588456 (opens external site)

      Did this work for you?

    Add your answer or comment

See MCP, its grade and setup notesCheck this tool before you install