server.json

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "io.github.localstack/localstack-mcp-server",
  "description": "A LocalStack MCP Server providing essential tools for local cloud development & testing with AWS, Snowflake and Azure",
  "status": "active",
  "repository": {
    "url": "https://github.com/localstack/localstack-mcp-server",
    "source": "github"
  },
  "version": "0.6.0",
  "icons": [
    {
      "src": "https://raw.githubusercontent.com/localstack/localstack-mcp-server/main/icon.png",
      "mimeType": "image/png",
      "sizes": ["256x256"]
    }
  ],
  "packages": [
    {
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "identifier": "@localstack/localstack-mcp-server",
      "version": "0.6.0",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "description": "LocalStack Auth Token (required for all LocalStack MCP tools)",
          "isRequired": true,
          "format": "string",
          "isSecret": true,
          "name": "LOCALSTACK_AUTH_TOKEN"
        },
        {
          "description": "Source AWS access key used by AWS Replicator to read external AWS resources",
          "isRequired": false,
          "format": "string",
          "isSecret": true,
          "name": "AWS_ACCESS_KEY_ID"
        },
        {
          "description": "Source AWS secret access key used by AWS Replicator to read external AWS resources",
          "isRequired": false,
          "format": "string",
          "isSecret": true,
          "name": "AWS_SECRET_ACCESS_KEY"
        },
        {
          "description": "Optional source AWS session token used by AWS Replicator for temporary credentials",
          "isRequired": false,
          "format": "string",
          "isSecret": true,
          "name": "AWS_SESSION_TOKEN"
        },
        {
          "description": "Source AWS region used by AWS Replicator",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "AWS_DEFAULT_REGION"
        },
        {
          "description": "Optional Replicator-specific source AWS access key. Use this instead of AWS_ACCESS_KEY_ID when the Replicator source account should be isolated from generic AWS config.",
          "isRequired": false,
          "format": "string",
          "isSecret": true,
          "name": "AWS_REPLICATOR_SOURCE_AWS_ACCESS_KEY_ID"
        },
        {
          "description": "Optional Replicator-specific source AWS secret access key. Use with AWS_REPLICATOR_SOURCE_AWS_ACCESS_KEY_ID.",
          "isRequired": false,
          "format": "string",
          "isSecret": true,
          "name": "AWS_REPLICATOR_SOURCE_AWS_SECRET_ACCESS_KEY"
        },
        {
          "description": "Optional Replicator-specific source AWS session token for temporary credentials.",
          "isRequired": false,
          "format": "string",
          "isSecret": true,
          "name": "AWS_REPLICATOR_SOURCE_AWS_SESSION_TOKEN"
        },
        {
          "description": "Optional Replicator-specific source AWS region. Use with the AWS_REPLICATOR_SOURCE_* credential group.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "AWS_REPLICATOR_SOURCE_REGION_NAME"
        },
        {
          "description": "Optional Replicator-specific source AWS endpoint URL for advanced source-account scenarios.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "AWS_REPLICATOR_SOURCE_ENDPOINT_URL"
        },
        {
          "description": "Set to 1 in the LocalStack container environment to enable App Inspector by default across restarts. The MCP tool can also toggle App Inspector at runtime.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "APP_INSPECTOR"
        },
        {
          "description": "Docker image the management start action launches for the AWS stack (LOCALSTACK_IMAGE_NAME wins over IMAGE_NAME). Defaults to localstack/localstack-pro:latest.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_IMAGE_NAME"
        },
        {
          "description": "Host directory mounted at /var/lib/localstack in the LocalStack container. Defaults to the per-OS cache path the LocalStack CLI used; inside Docker it defaults to the localstack-mcp named volume.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_VOLUME_DIR"
        },
        {
          "description": "Override the gateway port bindings for the start action (comma-separated [host]:port entries). When set, the implicit 443 binding is skipped.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "GATEWAY_LISTEN"
        },
        {
          "description": "Explicit LocalStack container name for Docker-based tools and the container created by start. Defaults to localstack-main (auto-detection covers common names).",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "MAIN_CONTAINER_NAME"
        },
        {
          "description": "Docker daemon endpoint used for all container operations (unix://, npipe://, tcp://). Defaults to the platform's standard socket.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "DOCKER_HOST"
        },
        {
          "description": "Host path of the Docker socket mounted into the LocalStack container (Lambda needs it). Validated to exist when set explicitly. Defaults to /var/run/docker.sock.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "DOCKER_SOCK"
        },
        {
          "description": "Inclusive start of the host port range published for external LocalStack services on start (default 4510).",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "EXTERNAL_SERVICE_PORTS_START"
        },
        {
          "description": "Inclusive end of the host port range published for external LocalStack services on start (default 4560).",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "EXTERNAL_SERVICE_PORTS_END"
        },
        {
          "description": "Gateway port of the LocalStack Azure emulator used by localstack-azure-client (defaults to LOCALSTACK_PORT, then 4566).",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZURE_PORT"
        },
        {
          "description": "ARM endpoint override for localstack-azure-client. Must use a local name (localhost.localstack.cloud or a subdomain, localhost, 127.0.0.1, ::1). Defaults to https://azure.localhost.localstack.cloud:<port>.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZURE_ENDPOINT"
        },
        {
          "description": "Docker image the management start action launches for service: azure. Defaults to localstack/localstack-azure:latest.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZURE_IMAGE_NAME"
        },
        {
          "description": "Explicit path to the Azure CLI launcher (az, az.cmd) or its Python. Defaults to a PATH lookup.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZ_PATH"
        },
        {
          "description": "The Azure tool's isolated Azure CLI config dir, never your ~/.azure. Defaults to ~/.localstack/azure/mcp-config-<port>.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZ_CONFIG_DIR"
        },
        {
          "description": "Azure CLI extension dir for the Azure tool. Defaults to ~/.localstack/azure/mcp-extensions (/opt/az-extensions in the Docker image).",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZ_EXTENSION_DIR"
        },
        {
          "description": "Explicit Bicep binary for .bicep templates: an absolute path to a file named bicep or bicep.exe. Otherwise ~/.localstack/azure/bin, then PATH (never ~/.azure/bin).",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZ_BICEP_PATH"
        },
        {
          "description": "Comma-separated server environment variables a .bicepparam may read with readEnvironmentVariable(). Nothing else reaches Bicep; the auth token and AZURE_*, ARM_*, BICEP_*, proxy and path variables are never passed.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZ_BICEP_ENV"
        },
        {
          "description": "Per-command timeout of the Azure tool, 5-3600 (default 300).",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZ_TIMEOUT_SECONDS"
        },
        {
          "description": "Azure tool stdout truncation limit (default 30000).",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZ_MAX_OUTPUT_CHARS"
        },
        {
          "description": "Azure tool help-page limit after re-flow (default 30000).",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZ_MAX_HELP_CHARS"
        },
        {
          "description": "Directory the Azure tool's file arguments must stay inside, and az's working directory. Defaults to the server's working directory.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZ_WORKDIR"
        },
        {
          "description": "Set to 0 to turn off the Azure tool's egress guard (debugging only; every response then says so). Default 1.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZ_EGRESS_GUARD"
        },
        {
          "description": "File of extra az command prefixes the Azure tool refuses, one per line (# comments allowed).",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZ_DENYLIST_FILE"
        },
        {
          "description": "Bytecode cache dir for Azure CLI installs without .pyc files (the Docker image sets it).",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZ_PYCACHE_DIR"
        },
        {
          "description": "host (default) runs a fresh Azure CLI process per command; worker (experimental) runs commands in warm Azure CLI processes, with the same isolation.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZ_RUNNER"
        },
        {
          "description": "Docker image only: the host the loopback forwarder relays the Azure emulator's ports to. Defaults to host.docker.internal, then the emulator container's IP.",
          "isRequired": false,
          "format": "string",
          "isSecret": false,
          "name": "LOCALSTACK_AZURE_FORWARD_TARGET"
        }
      ]
    }
  ]
}