Skip to content
⧖MCP-Bridge
Cloud Infrastructure

AWS SSO Identity Store MCP Config

<p>The Identity Store service used by AWS IAM Identity Center (successor to AWS Single Sign-On) provides a single place to retrieve all of your identities (users and groups). For more information, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity C

Config URL

Use this URL in any MCP-compatible client to fetch the config automatically.

https://mcp-bridge.pages.dev/config/amazonaws-com-identitystore.json
Download JSONClaude Desktop Setup

Configuration JSON

Use curl https://mcp-bridge.pages.dev/config/amazonaws-com-identitystore.json to fetch programmatically.

{
  "mcpServers": {
    "amazonaws-com-identitystore": {
      "command": "npx",
      "args": ["-y","@mcp/amazonaws-com-identitystore"],
      "env": {
      "AWS_SSO_IDENTITY_STORE_API_KEY": "your_aws_sso_identity_store_api_key"
}
    }
  }
}

How to Use

Claude Desktop

Paste the config JSON into your claude_desktop_config.json.

Full instructions →

Cursor

Go to Cursor Settings → MCP Servers → Add with the JSON above.

CLI / curl

Fetch the config programmatically:

curl https://mcp-bridge.pages.dev/config/amazonaws-com-identitystore.json

Environment Variables

AWS_SSO_IDENTITY_STORE_API_KEY

Replace your_aws_sso_identity_store_api_key with your actual aws sso identity store api key

Endpoints

POST/#X-Amz-Target=AWSIdentityStore.CreateGroup

CreateGroup

POST/#X-Amz-Target=AWSIdentityStore.CreateGroupMembership

CreateGroupMembership

POST/#X-Amz-Target=AWSIdentityStore.CreateUser

CreateUser

POST/#X-Amz-Target=AWSIdentityStore.DeleteGroup

DeleteGroup

POST/#X-Amz-Target=AWSIdentityStore.DeleteGroupMembership

DeleteGroupMembership

POST/#X-Amz-Target=AWSIdentityStore.DeleteUser

DeleteUser

POST/#X-Amz-Target=AWSIdentityStore.DescribeGroup

DescribeGroup

POST/#X-Amz-Target=AWSIdentityStore.DescribeGroupMembership

DescribeGroupMembership

POST/#X-Amz-Target=AWSIdentityStore.DescribeUser

DescribeUser

POST/#X-Amz-Target=AWSIdentityStore.GetGroupId

GetGroupId

AWS SSO Identity StoreMCP Server Details →API Documentation →