sigitp-git/sjc38-lab-manager-mcp-server

SJC38 Lab Manager MCP Server

A Model Context Protocol (MCP) server for managing AWS Control Tower and AWS Resource Access Manager as an administrator.

Features

• AWS Control Tower Management: Create, configure, and manage Control Tower landing zones
• AWS Resource Access Manager: Manage resource sharing across AWS accounts and organizations
• Administrative Operations: Full administrative control over multi-account AWS environments

Installation

For local development, this MCP server is designed to be run with uv:

# Install dependencies
uv sync --extra dev

# Run the server
uv run sjc38-lab-manager-mcp-server

For production deployment, you can publish to PyPI and use uvx:

uvx sjc38-lab-manager-mcp-server

Configuration

Local Development Configuration

Add to your MCP client configuration for local development (see mcp-config-example.json for a complete example):

{
  "mcpServers": {
    "sjc38-lab-manager": {
      "command": "uv",
      "args": [
        "run",
        "--directory",
        "/path/to/sjc38-lab-manager-mcp-server",
        "sjc38-lab-manager-mcp-server"
      ],
      "env": {
        "AWS_PROFILE": "your-admin-profile",
        "AWS_REGION": "us-east-1"
      },
      "disabled": false,
      "autoApprove": []
    }
  }
}

Production Configuration

For production deployment (after publishing to PyPI):

{
  "mcpServers": {
    "sjc38-lab-manager": {
      "command": "uvx",
      "args": ["sjc38-lab-manager-mcp-server"],
      "env": {
        "AWS_PROFILE": "your-admin-profile",
        "AWS_REGION": "us-east-1"
      }
    }
  }
}

AWS Permissions

This server requires administrative permissions for:

• AWS Control Tower
• AWS Resource Access Manager
• AWS Organizations
• AWS IAM
• AWS CloudFormation

Available Tools

Control Tower Tools

• create_landing_zone: Create a new Control Tower landing zone
• get_landing_zone: Get landing zone details
• update_landing_zone: Update landing zone configuration
• list_enabled_controls: List enabled controls in OUs
• enable_control: Enable a control on an OU
• disable_control: Disable a control on an OU

Resource Access Manager Tools

• create_resource_share: Create a new resource share
• get_resource_share: Get resource share details
• update_resource_share: Update resource share configuration
• associate_resource_share: Associate resources with a share
• disassociate_resource_share: Remove resources from a share
• get_resource_share_invitations: List pending invitations
• accept_resource_share_invitation: Accept a resource share invitation

Development

# Install with development dependencies
uv sync --extra dev

# Run tests
uv run pytest

# Format code
uv run black .
uv run isort .

# Type checking
uv run mypy .

License

MIT License