AWS MCP Proxy

Changelog

All notable changes to go-aws-mcp-proxy are documented in this file.

The format is based on Keep a Changelog, and the project follows Semantic Versioning. Links in this file are absolute so they resolve identically on GitHub and on the documentation site.

Unreleased

No changes yet.

0.1.0 - 2026-06-12

First functional release: a Go rewrite of aws/mcp-proxy-for-aws that ships the upstream proxy’s core behavior as a single native binary — with no Python or uv runtime to bootstrap — and reaches full parity on the upstream CLI flags. Start with the installation guide and the quickstart.

Added

  • Bridge a stdio MCP client to a remote Streamable HTTP AWS MCP endpoint.
  • AWS SigV4 request signing, with credentials loaded from the standard AWS chain: environment variables, shared config, named profiles, and SSO.
  • Full parity with the upstream CLI flags — --service, --profile, --region, --metadata, --read-only, --retries, --log-level, the --connect-timeout / --read-timeout / --write-timeout / --tool-timeout timeouts, --skip-auth, and --disable-telemetry. See the parity matrix.
  • --ca-bundle (and the AWS_CA_BUNDLE environment variable) to trust an additional PEM certificate bundle for corporate TLS interception, without modifying the system trust store.
  • Automatic SigV4 service and region inference from the endpoint host, including *.api.aws and bedrock-agentcore endpoints.
  • Resilient retry defaults: transient upstream failures are retried up to three times by default (--retries 0 disables retries).
  • --skip-auth for unsigned endpoints, such as the public AWS documentation MCP server.
  • Install script for Linux and macOS, and go run ./cmd/scripts build to build from source.