AWS Labs RDS Management MCP Server

The official MCP Server for managing AWS RDS database resources. This server provides tools and resources for Amazon RDS clusters, instances, backups, snapshots, restores, and parameter groups.

Available Resource Templates

DB Cluster Resources

• aws-rds://db-cluster - List all available Amazon RDS clusters in your account
• aws-rds://db-cluster/{cluster_id} - Get detailed information about a specific RDS cluster
• aws-rds://db-cluster/backups - List snapshots and automated backups across all DB clusters
• aws-rds://db-cluster/{cluster_id}/backups - List snapshots and automated backups for a specific DB cluster
• aws-rds://db-cluster/parameter-groups - List DB cluster parameter groups
• aws-rds://db-cluster/parameter-groups/{parameter_group_name}/parameters - List parameters for a DB cluster parameter group

DB Instance Resources

• aws-rds://db-instance - List all available Amazon RDS instances in your account
• aws-rds://db-instance/{instance_id} - Get detailed information about a specific RDS instance
• aws-rds://db-instance/backups - List snapshots and automated backups across all DB instances
• aws-rds://db-instance/{instance_id}/backups - List snapshots and automated backups for a specific DB instance
• aws-rds://db-instance/parameter-groups - List DB instance parameter groups
• aws-rds://db-instance/parameter-groups/{parameter_group_name}/parameters - List parameters for a DB instance parameter group

Available Tools

DB Cluster Management Tools

• CreateDBCluster
• ModifyDBCluster
• DeleteDBCluster
• ChangeDBClusterStatus
• FailoverDBCluster
• CreateDBClusterSnapshot
• DeleteDBClusterSnapshot
• RestoreDBClusterFromSnapshot
• RestoreDBClusterToPointInTime
• DescribeDBClusters

DB Instance Management Tools

• CreateDBInstance
• ModifyDBInstance
• DeleteDBInstance
• ChangeDBInstanceStatus
• DescribeDBInstances

Parameter Group Management Tools

• CreateDBClusterParameterGroup
• CreateDBInstanceParamGroup
• ModifyDBClusterParameterGroup
• ModifyDBInstanceParamGroup
• ResetDBClusterParameterGroup
• ResetDBInstanceParameterGroup
• DescribeDBClusterParamGroups
• DescribeDBInstanceParamGroups
• DescribeDBClusterParameters
• DescribeDBInstanceParameters

Prerequisites

1. Install uv from Astral or the uv GitHub README.
2. Install Python using uv python install 3.10.
3. Clone or otherwise have a local checkout of https://github.com/aws-rds-mcp/rds-management.
4. Configure AWS credentials with access to RDS services. Use least-privilege or read-only permissions if mutating operations are not intended.

Installation

The reviewed source checkout launch is:

{
  "mcpServers": {
    "awslabs.rds-management-mcp-server": {
      "command": "uv",
      "args": ["--directory", "/path/to/rds-management", "run", "main.py"],
      "env": {
        "AWS_PROFILE": "default",
        "AWS_REGION": "us-west-2",
        "FASTMCP_LOG_LEVEL": "ERROR"
      }
    }
  }
}

The Wardn package target uses --directory . instead of the README placeholder path.

Configuration

AWS Configuration

AWS region and profile are environment variables, not runtime CLI flags in the reviewed main.py:

AWS_PROFILE=default
AWS_REGION=us-east-1

The source also supports standard AWS credential variables (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN) through the AWS SDK credential chain and RDS/Performance Insights retry and timeout variables (RDS_MAX_RETRIES, RDS_RETRY_MODE, RDS_CONNECT_TIMEOUT, RDS_READ_TIMEOUT, PI_MAX_RETRIES, PI_RETRY_MODE, PI_CONNECT_TIMEOUT, PI_READ_TIMEOUT).

Server CLI Arguments

The reviewed main.py parses only these runtime server arguments:

--max-items 100
--port 8888
--readonly
--no-readonly

Read-only mode is the default. Running with --no-readonly enables mutating operations.

Development

uv venv
source .venv/bin/activate
uv sync
uv run --frozen pytest
uv --directory /path/to/rds-management run main.py
uv --directory /path/to/rds-management run main.py --readonly

Limitations and Safety

The server can create, modify, delete, start, stop, reboot, fail over, snapshot, and restore RDS resources. These operations may change production infrastructure or incur AWS charges. Read-only mode is enabled by default; write operations require running with --no-readonly. AWS credentials must have appropriate RDS permissions, and users should prefer least-privilege or read-only IAM permissions when write access is not intended.