Amazon EKS MCP Server

Amazon Web Services's Amazon EKS MCP server provides AI agents with Kubernetes cluster management capabilities across Amazon Elastic Kubernetes Service. It enables agents to inspect cluster configurations, read pod logs and cluster events, examine Kubernetes workloads, and assist platform engineers with container orchestration.

Start for free

Benefits with Ory + Amazon EKS MCP Server

Amazon Web Services' Amazon EKS MCP server lets your agents inspect Amazon EKS clusters, read pod logs and Kubernetes events, troubleshoot workloads, and, when write access is enabled, create resources and apply manifests. Cluster changes can take production workloads offline. Ory Agent Security lets troubleshooting agents read logs and events while cluster changes stay with the deployment agents you approve.

View documentation

Use Cases

— 01 use case

Agent IAM

Troubleshooters read logs at Read, manifest drafters get Write, operators who apply changes hold Admin, and every agent outside the cluster team is set to Block.

Explore Agent IAM

Core Functionality

— 04 capabilities

Read, write, admin, or no access
Ory Agent Security classifies every tool on the Amazon EKS MCP server as read, write, or admin, so you can give each user, team, or agent type only the level it needs: read for troubleshooting agents, write for agents that draft manifests for review, admin for deployment agents, and no access for agents with no cluster responsibilities.
Enforced before execution
Ory Agent Security checks each tool call against the user, the agent acting for them, and any sub-agent inside the agent harness, so a denied manifest apply stops before it reaches your cluster, with nothing to roll back and no gateway to deploy.
Observe, then enforce
Observe mode shows which agents only read logs and which try to change the cluster without blocking anything, so you can apply Ory's pre-built policy for the Amazon EKS MCP server and enforce it on your own schedule.
Complete audit trail
Every allow and deny decision on the Amazon EKS MCP server streams to your SIEM through OpenTelemetry with the user, agent, and action attached, so you can show which agent applied a change to a cluster and for whom.