Back to Browse

Stackconstruct MCP Server

Developer ToolsModerate6.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

AWS CDK guidance, docs, constructs and nag checks as MCP tools.

About

AWS CDK guidance, docs, constructs and nag checks as MCP tools.

Security Report

6.2
Moderate6.2Moderate Risk

stackconstruct is a clean, keyless AWS CDK guidance server whose local knowledge tools perform no network access and whose lookup tools only fetch from the public AWS docs site and constructs.dev with no user data sent outbound beyond the search query. No credentials are handled, no shell execution, eval, or dynamic code paths were found, and permissions match its stated purpose; only minor code quality notes remain. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

CDK_DOCS_URLRequired
CONSTRUCTS_API_URLRequired

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-stackconstruct": {
      "env": {
        "CDK_DOCS_URL": "your-cdk-docs-url-here",
        "CONSTRUCTS_API_URL": "your-constructs-api-url-here"
      },
      "args": [
        "-y",
        "@reneturcios/stackconstruct"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

stackconstruct

AWS CDK guidance as MCP tools. stackconstruct is a clean-room rebuild of the core surface of the AWS CDK MCP server, under a new name: fresh curated guidance content and fresh code, no copied branding and no copied documentation text.

Tools (core subset, 10)

get_cdk_best_practices, search_cdk_docs, get_cdk_concept, list_cdk_patterns, search_constructs, get_construct_details, validate_stack_nag, get_migration_guide, explain_error, get_example_pattern.

Keyless-first: the guidance tools (best practices, concepts, patterns, migration guides, error explanations) are local deterministic content written for this rebuild, and validate_stack_nag runs local checks over a stack-template JSON you supply — wildcard IAM actions/resources, unencrypted S3 buckets and EBS volumes, buckets without a full public-access block, and security groups open to the world. Only search_cdk_docs, search_constructs and get_construct_details fetch, from the public AWS documentation site and the constructs.dev public API.

Not in this subset: project bootstrap and initialisation, stack deployment or synthesis execution, CDK Pipelines management, context and feature-flag administration, construct code generation, and anything that mutates an AWS account or a local project.

Setup

No credentials are required. Optionally override the lookup bases:

export CDK_DOCS_URL=https://docs.aws.amazon.com        # default
export CONSTRUCTS_API_URL=https://constructs.dev       # default

CLI

npx @reneturcios/stackconstruct get_cdk_best_practices '{"topic":"security"}'
npx @reneturcios/stackconstruct validate_stack_nag '{"template":{"Resources":{}}}'
npx @reneturcios/stackconstruct mcp        # stdio MCP server

Each tool name is a subcommand taking one JSON object argument.

MCP client config

{
  "mcpServers": {
    "stackconstruct": {
      "command": "npx",
      "args": ["-y", "@reneturcios/stackconstruct", "mcp"]
    }
  }
}

Docker

docker run -i ghcr.io/cloudcorprecords/stackconstruct

Development

npm install
npm run build
npm test

License

MIT

Reviews

No reviews yet

Be the first to review this server!