v1.6.0 — MCP Spec 2025-11-25 Compliance

🚀 What's New

Streamable HTTP Transport (#33)

New streamable-http transport option for running the server over HTTP. SSE transport is now deprecated and will emit a warning — migrate to streamable-http or stdio.

AWS_MCP_TRANSPORT=streamable-http aws-mcp-server

Improved Error Handling (#34)

Input validation errors (empty commands, timeouts) are now returned as tool execution errors (isError=True) instead of crashing the JSON-RPC protocol. This enables AI models to self-correct per SEP-1303.

Server Metadata (#35, #36)

• Server description is now exposed to clients via the MCP instructions field
• Server icon metadata added for client UIs that support it

Graceful Shutdown on Client Disconnect (#16)

The stdio transport now monitors for client disconnects using select.poll() (with parent PID fallback on macOS) and exits cleanly instead of leaving orphaned containers.

🐛 Bug Fixes

• Fixed ToolError import mismatch — fastmcp.exceptions.ToolError and mcp.server.fastmcp.exceptions.ToolError are two distinct classes; the wrong one was being used, preventing proper error handling by the MCP SDK
• Fixed CI test hangs — monitor_stdio_disconnect test hung on Linux CI due to unmocked sys.stdin.fileno()

📦 Installation

# pip / uvx
pip install aws-mcp-server==1.6.0

# Docker
docker pull ghcr.io/alexei-led/aws-mcp-server:1.6.0

Full Changelog: v1.5.6...v1.6.0

1.5.6

What's Changed

• refactor: code review fixes and cleanup by @alexei-led in #28
• fix: add /opt/homebrew to macOS Seatbelt sandbox allowed paths by @alexei-led in #29

Full Changelog: 1.5.5...1.5.6

1.5.5

What's Changed

• fix: bind SSE to 0.0.0.0 in Docker for port mapping by @alexei-led in #27

Full Changelog: 1.5.4...1.5.5

1.5.4

What's Changed

• fix: graceful shutdown, package rename, and CI improvements by @alexei-led in #26

Full Changelog: v1.5.3...1.5.4

1.5.0

What's Changed

• feat: Add sandbox execution for AWS CLI commands by @alexei-led in #21

Full Changelog: 1.3.0...1.5.0

1.3.0

• Implements a comprehensive multi-layered security system for AWS CLI command validation
• Replaces create_subprocess_shell with safer create_subprocess_exec for command execution
• Adds configurable security rules with dangerous command blocking, safe pattern overrides, and regex validation

1.2.0

• Security hardening
• Security section added to the README
• Smithery deployment removed - it's not a secure way to run this MCP server (avoid it)

1.1.3

• Fixed startup
• Use the same version for package and Docker container

1.0.7

update

1.0.5

support SSE server transport