AWS IoT Core MCP Server (io.github.nagarjunr/aws-iot-core)

This Model Context Protocol (MCP) server provides AWS IoT Core capabilities, focused on the device registry, device shadows, jobs for fleet management, the rules engine, and messaging. It is deliberately scoped to IoT Core itself.

🛠️ Key Features

Device registry
Device shadows
Jobs (fleet management)
Rules engine
Messaging

🚀 Use Cases

Managing IoT device state via shadows
Orchestrating device updates and operations with jobs
Applying logic and routing with the rules engine
Exchanging messages through AWS IoT Core

⚡ Developer Benefits

Direct MCP access to IoT Core components listed above
Clear separation from other AWS IoT services not included in this server

⚠️ Limitations

Does not cover Greengrass (separate edge-deployment API)
Does not cover IoT SiteWise (there is an official awslabs MCP server for SiteWise)

AWS IoT Core MCP Server

A Model Context Protocol (MCP) server for AWS IoT Core — device registry, device shadows, jobs (fleet management), the rules engine, and messaging.

Scoped deliberately to IoT Core itself: no Greengrass (separate edge-deployment API), no IoT SiteWise (already has an official awslabs MCP server), no Device Defender/Events/TwinMaker — each of those is its own AWS service with its own API and would be its own connector.

Built with FastMCP and boto3.

Tools

Things (device registry)

Tool	Description
`list_things(thing_type_name, attribute_name, attribute_value, thing_group_name, max_results)`	List things, optionally filtered.
`search_things(query_string, index_name, max_results)`	Fleet-indexing search, e.g. `attributes.location:"lab-1"`. Requires indexing to be enabled.
`get_thing(thing_name)`	Fetch a thing's attributes and type.
`create_thing(thing_name, thing_type_name, attributes, billing_group_name, overwrite=False)`	Register a new thing.
`update_thing(thing_name, attributes, thing_type_name, remove_thing_type, attributes_merge=True)`	Update a thing's attributes/type.
`delete_thing(thing_name, confirm=False)`	Delete a thing. Irreversible.

Thing Types & Thing Groups

Tool	Description
`list_thing_types(thing_type_name)` / `get_thing_type(thing_type_name)`	List/read thing types.
`create_thing_type(thing_type_name, description, searchable_attributes)`	Create a thing type. Immutable once created (AWS limitation) — only deprecation is supported after.
`deprecate_thing_type(thing_type_name, undo=False)`	Deprecate (or un-deprecate) a thing type.
`list_thing_groups(parent_group, name_prefix_filter)` / `get_thing_group(thing_group_name)`	List/read thing groups.
`create_thing_group(thing_group_name, parent_group_name, attributes, overwrite=False)`	Create a thing group.
`delete_thing_group(thing_group_name, confirm=False)`	Delete a thing group. Irreversible.
`modify_thing_group_membership(thing_name, thing_group_name, action)`	`action="add"` or `"remove"` a thing from a group.
`list_things_in_thing_group(thing_group_name)`	List members of a group.

Device Shadows (data plane)

Tool	Description
`get_thing_shadow(thing_name, shadow_name)`	Read a thing's shadow document (`desired`/`reported`/`delta`). Omit `shadow_name` for the classic (unnamed) shadow.
`update_thing_shadow(thing_name, desired, reported, shadow_name)`	Merge-update `desired` and/or `reported` state.
`delete_thing_shadow(thing_name, shadow_name, confirm=False)`	Delete a shadow document.
`list_named_shadows_for_thing(thing_name)`	List named (non-classic) shadows for a thing.

Messaging

Tool	Description
`publish_message(topic, payload, qos=0)`	Publish an MQTT message to the device fleet via the IoT Data Plane.

Jobs (fleet management)

Tool	Description
`list_jobs(status, thing_group_name, max_results)` / `get_job(job_id)`	List/read jobs.
`create_job(job_id, thing_arns, document, description, target_selection="SNAPSHOT")`	Create a fleet job (e.g. an OTA update or remote command).
`cancel_job(job_id, confirm=False, comment, force=False)`	Cancel a job.
`delete_job(job_id, confirm=False, force=False)`	Delete a job. Irreversible.
`list_job_executions_for_job(job_id, status)` / `list_job_executions_for_thing(thing_name, status)`	Track per-device execution status.

Certificates & Policies (device auth)

Tool	Description
`create_keys_and_certificate(set_as_active=True)`	Generate a new key pair + certificate. The private key is returned only once — capture it immediately.
`get_certificate(certificate_id)` / `list_certificates(page_size)`	Read certificate metadata.
`set_certificate_status(certificate_id, status)`	`ACTIVE`, `INACTIVE`, or `REVOKED`.
`delete_certificate(certificate_id, confirm=False, force_delete=False)`	Delete a certificate. Irreversible.
`create_policy(policy_name, policy_document, overwrite=False)` / `get_policy` / `list_policies`	Manage IAM-style IoT policies (JSON documents).
`delete_policy(policy_name, confirm=False)`	Delete a policy. Irreversible.
`modify_policy_attachment(policy_name, target, action)`	Attach/detach a policy to/from a certificate ARN.
`modify_thing_principal(thing_name, principal, action)`	Attach/detach a certificate (principal) to/from a thing.
`list_thing_principals(thing_name)` / `list_principal_things(principal)`	Look up thing↔certificate associations either direction.

Rules Engine

Tool	Description
`list_topic_rules(topic)` / `get_topic_rule(rule_name)`	List/read SQL-based message routing rules.
`put_topic_rule(rule_name, sql, actions, description, sql_version, overwrite=False)`	Create or replace a rule. `actions` is a list of raw AWS action objects (e.g. `{"lambda": {"functionArn": "..."}}`).
`set_topic_rule_enabled(rule_name, enabled)`	Enable/disable a rule without deleting it.
`delete_topic_rule(rule_name, confirm=False)`	Delete a rule. Irreversible.

Misc

Tool	Description
`get_endpoint(endpoint_type)`	Look up this account's IoT Core data endpoint (default `iot:Data-ATS`).

Safety conventions

Same as the rest of this repo: create_*/put_* default to overwrite=False (best-effort — the AWS IoT API itself has no conditional-write header for most of these operations, so this is a describe-then-create check, not fully race-free like Ditto's If-None-Match). Every delete_*/cancel_* requires confirm=True.

Configuration

Standard AWS SDK credential resolution — no custom env vars for auth. Set whichever of these your setup uses:

Env var	Description
`AWS_ACCESS_KEY_ID` / `AWS_SECRET_ACCESS_KEY` / `AWS_SESSION_TOKEN`	Explicit credentials.
`AWS_PROFILE`	Named profile from `~/.aws/credentials`.
`AWS_REGION` / `AWS_DEFAULT_REGION`	Required — AWS IoT Core is regional.
`AWS_ENDPOINT_URL`	Override the API endpoint (e.g. for LocalStack). boto3 reads this natively.

Or an IAM role, if running somewhere with one attached (EC2/ECS/Lambda). See boto3's credential docs.

Running locally

bash

uv sync
export AWS_REGION=us-east-1
# plus whichever credential env vars apply to you
uv run awsiotcoremcpserver.py

See mcp.json for ready-to-use client configs (stdio and Docker).

Testing

This repo's design principles call for testing against a real instance rather than mocks. AWS IoT Core has no official local emulator, and LocalStack's IoT support requires a paid plan (no free tier) — so this server is the one exception in this repo: tests run against moto, a mature, free, open-source AWS API emulator (not hand-rolled mocks — it implements real request/response behavior for the actual boto3 calls this server makes).

bash

uv run pytest -v

License notes

No bundled deployment artifacts here (unlike the other servers) since there's no local broker/service to run — AWS IoT Core only exists as an AWS-hosted service.