CLI Reference

scut mcp

MCP · AWS

MCP utility commands for agents.

scut mcp provides Model Context Protocol utilities intended to be launched by MCP clients or agent configuration.

scut mcp aws-proxy starts a stdio MCP proxy for SigV4-protected AWS MCP endpoints. It mirrors the aws-mcp-proxy command-line surface while running through the scut binary.

The proxy can connect eagerly or defer the upstream connection until tools are requested. Authentication can be required (the default), skipped, or optional so unsigned requests are used only when credentials are unavailable. Empty upstream tool catalogs remain errors unless explicitly allowed.

Generated help

Generated from scut mcp --help.

Usage: scut mcp <command> [flags]

MCP utility commands for agents.

Commands:
  mcp aws-proxy    Run an MCP stdio proxy for SigV4-protected AWS MCP endpoints.

Flags:
  -h, --help       Show context-sensitive help.
  -v, --version    Print version and exit.

Generated from scut mcp aws-proxy --help.

Usage: scut mcp aws-proxy <endpoint> [flags]

Run an MCP stdio proxy for SigV4-protected AWS MCP endpoints.

Arguments:
  <endpoint>    SigV4 MCP endpoint URL.

Flags:
  -h, --help                   Show context-sensitive help.
  -v, --version                Print version and exit.

      --service=SERVICE        AWS service name for SigV4 signing. Inferred from
                               endpoint when omitted.
      --profile=PROFILE ...    AWS profile(s) to use. First profile is the
                               default ($AWS_MCP_PROXY_PROFILES, $AWS_PROFILE).
      --region=REGION          AWS region to sign. Inferred from endpoint or
                               AWS_REGION when omitted.
      --ca-bundle=PATH         Path to a PEM certificate bundle to trust in
                               addition to the system roots ($AWS_CA_BUNDLE).
      --metadata=KEY=VALUE     Metadata to inject into MCP requests as key=value
                               pairs.
      --allow-empty-tools      Allow the upstream server to return an empty tool
                               catalog.
      --lazy-connect           Defer the upstream connection until tools are
                               requested.
      --read-only              Disable tools that do not advertise
                               readOnlyHint=true.
      --log-level=LOG-LEVEL    Set the logging level.
      --retries=RETRIES        Number of retries when calling endpoint MCP.
                               Defaults to 3; 0 disables retries.
      --timeout=TIMEOUT        Total timeout in seconds when connecting to
                               endpoint.
      --connect-timeout=CONNECT-TIMEOUT
                               Connection timeout in seconds.
      --read-timeout=READ-TIMEOUT
                               Read timeout in seconds.
      --write-timeout=WRITE-TIMEOUT
                               Write timeout in seconds.
      --tool-timeout=TOOL-TIMEOUT
                               Maximum seconds a tool call may take before
                               cancellation.
      --disable-telemetry      Disable client telemetry in outbound user-agent
                               data.
      --skip-auth              Send unsigned requests without loading AWS
                               credentials.
      --optional-auth          Sign requests when credentials are available and
                               otherwise send them unsigned.