free-table-remote-mcp-aws by Gyurmatag - MCP Server

FreeTable Remote MCP Server on AWS

A Model Context Protocol (MCP) server for restaurant booking management deployed on AWS infrastructure. This project provides both ECS Fargate and Lambda deployment options with secure OAuth 2.0 authentication.

🏗️ Architecture

graph TB
    subgraph "Internet"
        U[Users/Clients]
        CF[CloudFront Distribution]
    end
    
    subgraph "AWS Global"
        WAF[WAF Protection]
        CF --> WAF
    end
    
    subgraph "AWS Region (us-east-1)"
        subgraph "VPC"
            subgraph "Public Subnets"
                ALB[Application Load Balancer]
                NAT[NAT Gateway]
            end
            
            subgraph "Private Subnets"
                ECS[ECS Fargate Cluster]
                LAMBDA[Lambda Functions]
            end
        end
        
        subgraph "Security & Auth"
            COGNITO[Cognito User Pool]
            IAM[IAM Roles & Policies]
        end
        
        subgraph "Monitoring"
            CW[CloudWatch Logs]
            S3[S3 Access Logs]
        end
        
        subgraph "External APIs"
            FT[FreeTable API<br/>free-table.gyurmatag.workers.dev]
        end
    end
    
    %% Connections
    U --> CF
    WAF --> ALB
    ALB --> ECS
    ALB --> LAMBDA
    ECS --> COGNITO
    LAMBDA --> COGNITO
    ECS --> FT
    LAMBDA --> FT
    ECS --> CW
    LAMBDA --> CW
    ALB --> S3
    ECS --> IAM
    LAMBDA --> IAM
    
    %% Styling
    classDef aws fill:#ff9900,stroke:#232f3e,stroke-width:2px,color:#fff
    classDef external fill:#00a86b,stroke:#232f3e,stroke-width:2px,color:#fff
    classDef compute fill:#4d148c,stroke:#232f3e,stroke-width:2px,color:#fff
    classDef security fill:#dd344c,stroke:#232f3e,stroke-width:2px,color:#fff
    
    class CF,WAF,ALB,ECS,LAMBDA,COGNITO,IAM,CW,S3,NAT aws
    class U,FT external
    class ECS,LAMBDA compute
    class COGNITO,IAM,WAF security

Architecture Components

VPC Stack: Virtual Private Cloud with public/private subnets
Security Stack: Cognito User Pool, WAF rules, and IAM roles
CloudFront-WAF Stack: Global content delivery with security
MCP Server Stack: ECS Fargate and Lambda MCP servers

Data Flow

sequenceDiagram
    participant C as MCP Client
    participant CF as CloudFront
    participant WAF as WAF
    participant ALB as Load Balancer
    participant MCP as MCP Server
    participant COG as Cognito
    participant FT as FreeTable API
    
    C->>CF: 1. MCP Request
    CF->>WAF: 2. Security Check
    WAF->>ALB: 3. Forward Request
    ALB->>MCP: 4. Route to ECS/Lambda
    
    MCP->>COG: 5. Validate OAuth Token
    COG-->>MCP: 6. Token Valid
    
    MCP->>FT: 7. API Call (get_restaurants/create_booking/update_booking)
    FT-->>MCP: 8. API Response
    
    MCP-->>ALB: 9. MCP Response
    ALB-->>CF: 10. Forward Response
    CF-->>C: 11. Return to Client

Security Layers

CloudFront: Global CDN with DDoS protection
WAF: Web Application Firewall with rate limiting
VPC: Network isolation and security groups
Cognito: OAuth 2.0 authentication and authorization
IAM: Least privilege access control

🚀 Features

MCP Server Tools

get_restaurants - Get list of available restaurants
create_booking - Create a restaurant booking
update_booking - Update an existing restaurant booking

Security Features

OAuth 2.0 Protected Resource Metadata (RFC9728)
AWS WAF protection
VPC isolation
IAM least privilege access
JWT token validation

📋 Prerequisites

AWS CLI (v2.0+)
Node.js (v14+)
AWS CDK (v2.0+)
Docker

🚀 Quick Start

Clone the repository

git clone https://github.com/yourusername/free-table-remote-mcp-aws.git
cd free-table-remote-mcp-aws

Install dependencies

cd guidance-for-deploying-model-context-protocol-servers-on-aws/source/cdk/ecs-and-lambda
npm install

Deploy to AWS

# Login to ECR
aws ecr-public get-login-password --region us-east-1 | docker login --username AWS --password-stdin public.ecr.aws

# Deploy all stacks
npx cdk deploy --all --require-approval never

Test the deployment

# Get CloudFront URL
CLOUDFRONT_URL=$(aws cloudformation describe-stacks \
  --stack-name MCP-Server \
  --query 'Stacks[0].Outputs[?OutputKey==`CloudFrontDistributions`].OutputValue' \
  --output text)

# Test health endpoints
curl "https://$CLOUDFRONT_URL/restaurant-booking/"
curl "https://$CLOUDFRONT_URL/restaurant-booking-lambda/"

📚 Documentation

- Detailed step-by-step instructions
- Original AWS guidance

🛠️ Development

Project Structure

free-table-remote-mcp-aws/
├── guidance-for-deploying-model-context-protocol-servers-on-aws/
│   └── source/cdk/ecs-and-lambda/
│       ├── servers/
│       │   ├── sample-ecs-weather-streamablehttp-stateless-nodejs-express/
│       │   └── sample-lambda-weather-streamablehttp-stateless-nodejs-express/
│       ├── lib/
│       └── bin/
├── RESTAURANT_MCP_DEPLOYMENT_GUIDE.md
└── README.md

MCP Server Implementation

The MCP servers are implemented in TypeScript using the @modelcontextprotocol/sdk and integrate with the FreeTable API:

Base URL: https://free-table.gyurmatag.workers.dev
Transport: StreamableHTTP
Authentication: OAuth 2.0 with Cognito

🔧 Configuration

Environment Variables

AWS_REGION=us-east-1
COGNITO_USER_POOL_ID=<from CloudFormation output>
COGNITO_USER_POOL_CLIENT_ID=<from CloudFormation output>
BASE_URL=https://<cloudfront-domain>

FreeTable API Integration

The servers integrate with the FreeTable API endpoints:

GET /api/restaurants - List restaurants
POST /api/bookings - Create booking
PUT /api/bookings/{id} - Update booking

💰 Cost Estimation

Monthly costs (US East 1):

VPC (NAT Gateway): ~$37.35
Application Load Balancer: ~$16.83
CloudFront: ~$87.96
WAF: ~$10.00
ECS Fargate: ~$36.04
Lambda: ~$0.20
Total: ~$194.18/month

🧹 Cleanup

# Destroy all stacks
npx cdk destroy --all --force

📄 License

This project is licensed under the MIT License - see the file for details.

🤝 Contributing

Fork the repository
Create a feature branch (git checkout -b feature/amazing-feature)
Commit your changes (git commit -m 'Add some amazing feature')
Push to the branch (git push origin feature/amazing-feature)
Open a Pull Request

📞 Support

Check the for troubleshooting
Review CloudFormation events for deployment issues
Check CloudWatch logs for runtime errors

Gyurmatag/free-table-remote-mcp-aws