Amazon DynamoDB MCP Server

Amazon Web Services's Amazon DynamoDB MCP server allows AI agents to manage NoSQL DynamoDB tables, execute queries, inspect partition key schemas, and run item-level CRUD operations. It empowers agents to inspect table throughput, analyze query indexes, and interact with distributed document datastores.

Start for free

Benefits with Ory + Amazon DynamoDB MCP Server

Amazon Web Services' Amazon DynamoDB MCP server helps your agents design and work with Amazon DynamoDB, from modeling access patterns to understanding existing tables. Data models planned here shape how your application stores and retrieves information. Ory Agent Security records each tool call with the user and agent behind it and lets you decide which agents can use the server and at what level.

View documentation

Use Cases

— 01 use case

Agent IAM

Modelers and reviewers at Read, app agents adding items at Write, deletes and restores at Admin, and Block wherever an agent never needs your tables.

Explore Agent IAM

Core Functionality

— 04 capabilities

Read, write, admin, or no access
Ory Agent Security classifies every tool on the Amazon DynamoDB MCP server as read, write, or admin, so you can give each user, team, or agent type only the level it needs: read for agents exploring tables and data models, write for application agents that add and update data, admin for database owners' agents, and no access for agents that shouldn't reach your tables.
Enforced before execution
Ory Agent Security checks each tool call against the user, the agent acting for them, and any sub-agent inside the agent harness, so a denied table deletion stops before it reaches DynamoDB, with nothing to roll back and no gateway to deploy.
Observe, then enforce
Observe mode shows which agents write or delete data and for whom without blocking anything, so you can apply Ory's pre-built policy for the Amazon DynamoDB MCP server and enforce it on your own schedule.
Complete audit trail
Every allow and deny decision on the Amazon DynamoDB MCP server streams to your SIEM through OpenTelemetry with the user, agent, and action attached, so you can show which agent changed or removed data and on whose behalf.