io.github.giovanemartins/localstack
NPM · @GIOVANE.MARTINS/LOCALSTACK
MCP server for LocalStack AWS services, enabling AI agents to interact with local AWS infra.
Available components
Last scanned (1 hour ago)
Scores higher than 46% of npm servers
Category Cloud Infrastructure
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security81
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 30 of 136 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency32
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- License check failed: no license is declared. See how to fix → Fail
- Actively maintained (last published 241 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability78
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 3559 tokens (~48/item across 73 items; 73 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management87
- Stability observed for 26 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 20 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "s3_delete_bucket" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 73 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 −2
- Stability: pass → 0.87 functional
- 30 Oct 26 0
- Stability: 0.97 → pass security
- 29 Oct 26 0
- Stability: pass → 0.97 functional
- 24 Oct 26 −6
- CVE-2023-54404 affects this package: high ▼ security
- Known CVEs: pass → fail ▼ security
- 23 Oct 26 +1
- Stability: 0.97 → pass security
- 22 Oct 26 −1
- Stability: pass → 0.97 functional
- 16 Oct 26 +1
- Stability: 0.97 → pass security
- 14 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/@giovane.martins/localstack@1.1.5
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-mrhx-c7xc-m3w5 | CVE-2023-54404 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 136 packages
| Packages resolved | 136 |
|---|---|
| Stale | 30 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
dynamodb_create_table ~106
Create a new DynamoDB table in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| billingMode | string | – | Billing mode (default: PAY_PER_REQUEST) |
| partitionKey | string | yes | Partition key attribute name |
| partitionKeyType | string | yes | Partition key type: S (String), N (Number), B (Binary) |
| sortKey | string | – | Sort key attribute name |
| sortKeyType | string | – | Sort key type |
| tableName | string | yes | Table name |
No output schema declared.
No examples provided.
dynamodb_delete_item ~47
Delete an item from a DynamoDB table by its key in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| key | string | yes | Key as a JSON string |
| tableName | string | yes | Table name |
No output schema declared.
No examples provided.
dynamodb_delete_table ~29
Delete a DynamoDB table from LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| tableName | string | yes | Table name |
No output schema declared.
No examples provided.
dynamodb_describe_table ~30
Describe a DynamoDB table in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| tableName | string | yes | Table name |
No output schema declared.
No examples provided.
dynamodb_get_item ~56
Get an item from a DynamoDB table by its key in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| key | string | yes | Key as a JSON string (e.g. {"pk": "123"}) |
| tableName | string | yes | Table name |
No output schema declared.
No examples provided.
dynamodb_list_tables ~19
List all DynamoDB tables in LocalStack
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
dynamodb_put_item ~49
Put (create or replace) an item in a DynamoDB table in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| item | string | yes | Item as a JSON string |
| tableName | string | yes | Table name |
No output schema declared.
No examples provided.
dynamodb_query ~102
Query items in a DynamoDB table by key condition in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| expressionAttributeValues | string | yes | Expression attribute values as JSON string (e.g. {":pk": "123"}) |
| filterExpression | string | – | Additional filter expression |
| keyConditionExpression | string | yes | Key condition expression (e.g. pk = :pk) |
| limit | integer | – | Maximum number of items to return |
| tableName | string | yes | Table name |
No output schema declared.
No examples provided.
dynamodb_scan ~76
Scan all items in a DynamoDB table in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| expressionAttributeValues | string | – | Expression attribute values as JSON string |
| filterExpression | string | – | DynamoDB filter expression |
| limit | integer | – | Maximum number of items to return (default: 100) |
| tableName | string | yes | Table name |
No output schema declared.
No examples provided.
eventbridge_create_bus ~31
Create a new EventBridge event bus in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Event bus name |
No output schema declared.
No examples provided.
eventbridge_delete_bus ~30
Delete an EventBridge event bus from LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Event bus name |
No output schema declared.
No examples provided.
eventbridge_delete_rule ~44
Delete an EventBridge rule from LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| eventBusName | string | – | Event bus name (default: default) |
| name | string | yes | Rule name |
No output schema declared.
No examples provided.
eventbridge_describe_rule ~45
Describe an EventBridge rule in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| eventBusName | string | – | Event bus name (default: default) |
| name | string | yes | Rule name |
No output schema declared.
No examples provided.
eventbridge_disable_rule ~44
Disable an EventBridge rule in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| eventBusName | string | – | Event bus name (default: default) |
| name | string | yes | Rule name |
No output schema declared.
No examples provided.
eventbridge_enable_rule ~44
Enable an EventBridge rule in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| eventBusName | string | – | Event bus name (default: default) |
| name | string | yes | Rule name |
No output schema declared.
No examples provided.
eventbridge_list_buses ~33
List all EventBridge event buses in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| prefix | string | – | Filter buses by name prefix |
No output schema declared.
No examples provided.
eventbridge_list_rules ~46
List EventBridge rules in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| eventBusName | string | – | Event bus name (default: default) |
| prefix | string | – | Filter rules by name prefix |
No output schema declared.
No examples provided.
eventbridge_list_targets ~46
List targets for an EventBridge rule in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| eventBusName | string | – | Event bus name (default: default) |
| rule | string | yes | Rule name |
No output schema declared.
No examples provided.
eventbridge_put_events ~37
Put custom events onto an EventBridge event bus in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| entries | array | yes | Events to put (max 10) |
No output schema declared.
No examples provided.
eventbridge_put_rule ~100
Create or update an EventBridge rule in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| description | string | – | Rule description |
| eventBusName | string | – | Event bus name (default: default) |
| eventPattern | string | – | Event pattern as JSON string |
| name | string | yes | Rule name |
| scheduleExpression | string | – | Schedule expression (e.g. rate(5 minutes)) |
| state | string | – | Rule state (default: ENABLED) |
No output schema declared.
No examples provided.
eventbridge_put_targets ~58
Add or update targets for an EventBridge rule in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| eventBusName | string | – | Event bus name (default: default) |
| rule | string | yes | Rule name |
| targets | array | yes | List of targets |
No output schema declared.
No examples provided.
eventbridge_remove_targets ~59
Remove targets from an EventBridge rule in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| eventBusName | string | – | Event bus name (default: default) |
| ids | array | yes | List of target IDs to remove |
| rule | string | yes | Rule name |
No output schema declared.
No examples provided.
kinesis_create_stream ~45
Create a new Kinesis stream in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Stream name |
| shardCount | integer | – | Number of shards (default: 1) |
No output schema declared.
No examples provided.
kinesis_delete_stream ~28
Delete a Kinesis stream from LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Stream name |
No output schema declared.
No examples provided.
kinesis_describe_stream ~29
Describe a Kinesis stream in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Stream name |
No output schema declared.
No examples provided.
kinesis_get_records ~89
Get records from a Kinesis stream shard in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Max records to return (default: 10) |
| shardId | string | yes | Shard ID (e.g. shardId-000000000000) |
| shardIteratorType | string | – | Iterator type (default: TRIM_HORIZON) |
| streamName | string | yes | Stream name |
No output schema declared.
No examples provided.
kinesis_list_streams ~20
List all Kinesis streams in LocalStack
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
kinesis_put_record ~65
Put a single record onto a Kinesis stream in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| data | string | yes | Record data as a string (will be UTF-8 encoded) |
| partitionKey | string | yes | Partition key for the record |
| streamName | string | yes | Stream name |
No output schema declared.
No examples provided.
kinesis_put_records ~46
Put multiple records onto a Kinesis stream in LocalStack (max 500)
| Name | Type | Req | Description |
|---|---|---|---|
| records | array | yes | Records to put |
| streamName | string | yes | Stream name |
No output schema declared.
No examples provided.
lambda_create_function ~163
Create a Lambda function in LocalStack from a base64-encoded ZIP
| Name | Type | Req | Description |
|---|---|---|---|
| description | string | – | Function description |
| environment | object | – | Environment variables as a key-value object |
| functionName | string | yes | Function name |
| handler | string | yes | Handler in format file.function (e.g. index.handler) |
| memorySize | integer | – | Memory size in MB (default: 128) |
| roleArn | string | yes | IAM role ARN (use arn:aws:iam::000000000000:role/lambda-role for LocalStack) |
| runtime | string | yes | Runtime identifier |
| timeout | integer | – | Timeout in seconds (default: 30) |
| zipBase64 | string | yes | Base64-encoded ZIP file contents |
No output schema declared.
No examples provided.
lambda_delete_function ~29
Delete a Lambda function from LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| functionName | string | yes | Function name or ARN |
No output schema declared.
No examples provided.
lambda_get_function ~31
Get details of a Lambda function in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| functionName | string | yes | Function name or ARN |
No output schema declared.
No examples provided.
lambda_invoke ~61
Invoke a Lambda function in LocalStack and return its response
| Name | Type | Req | Description |
|---|---|---|---|
| functionName | string | yes | Function name or ARN |
| invocationType | string | – | Invocation type (default: RequestResponse) |
| payload | string | – | Invocation payload as a JSON string |
No output schema declared.
No examples provided.
lambda_list_functions ~17
List all Lambda functions in LocalStack
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
s3_create_bucket ~29
Create a new S3 bucket in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| bucket | string | yes | Bucket name |
No output schema declared.
No examples provided.
s3_delete_bucket ~28
Delete an S3 bucket from LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| bucket | string | yes | Bucket name |
No output schema declared.
No examples provided.
s3_delete_object ~42
Delete an object from an S3 bucket in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| bucket | string | yes | Bucket name |
| key | string | yes | Object key (path) |
No output schema declared.
No examples provided.
s3_get_object ~44
Download the content of an S3 object as text from LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| bucket | string | yes | Bucket name |
| key | string | yes | Object key (path) |
No output schema declared.
No examples provided.
s3_list_buckets ~20
List all S3 buckets in LocalStack
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
s3_list_objects ~61
List objects in an S3 bucket in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| bucket | string | yes | Bucket name |
| maxKeys | integer | – | Maximum number of objects to return (default: 100) |
| prefix | string | – | Filter objects by key prefix |
No output schema declared.
No examples provided.
s3_put_object ~73
Upload a text or JSON object to an S3 bucket in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| body | string | yes | Object content as a string |
| bucket | string | yes | Bucket name |
| contentType | string | – | Content-Type header (default: text/plain) |
| key | string | yes | Object key (path) |
No output schema declared.
No examples provided.
secretsmanager_create_secret ~55
Create a new secret in Secrets Manager in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| description | string | – | Secret description |
| name | string | yes | Secret name |
| secretString | string | – | Secret value as a string or JSON string |
No output schema declared.
No examples provided.
secretsmanager_delete_secret ~49
Delete a secret from Secrets Manager in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| forceDelete | boolean | – | Force delete without recovery window (default: false) |
| secretId | string | yes | Secret name or ARN |
No output schema declared.
No examples provided.
secretsmanager_describe_secret ~35
Describe a secret's metadata in Secrets Manager in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| secretId | string | yes | Secret name or ARN |
No output schema declared.
No examples provided.
secretsmanager_get_secret ~35
Retrieve the value of a secret from Secrets Manager in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| secretId | string | yes | Secret name or ARN |
No output schema declared.
No examples provided.
secretsmanager_list_secrets ~21
List all secrets in Secrets Manager in LocalStack
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
secretsmanager_restore_secret ~34
Restore a previously deleted secret in Secrets Manager in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| secretId | string | yes | Secret name or ARN |
No output schema declared.
No examples provided.
secretsmanager_update_secret ~53
Update the value of an existing secret in Secrets Manager in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| secretId | string | yes | Secret name or ARN |
| secretString | string | yes | New secret value as a string or JSON string |
No output schema declared.
No examples provided.
ses_delete_identity ~31
Delete an SES identity in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| identity | string | yes | Email address or domain name to delete |
No output schema declared.
No examples provided.
ses_get_identity_verification_attributes ~38
Get verification status for SES identities in LocalStack
| Name | Type | Req | Description |
|---|---|---|---|
| identities | array | yes | List of email addresses or domain names to check |
No output schema declared.
No examples provided.
How do I install the io.github.giovanemartins/localstack MCP server?
io.github.giovanemartins/localstack runs locally as an npm package, launched with npx -y @giovane.martins/localstack. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @giovane.martins/localstack
claude mcp add giovanemartins-localstack -- npx -y @giovane.martins/localstack
What is the io.github.giovanemartins/localstack MCP server?
io.github.giovanemartins/localstack is an MCP server listed in the public MCP registry as io.github.giovanemartins/localstack. MCP server for LocalStack AWS services, enabling AI agents to interact with local AWS infra. This page covers its npm package (@giovane.martins/localstack).
Is the io.github.giovanemartins/localstack MCP server safe to use?
io.github.giovanemartins/localstack scores 73 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.giovanemartins/localstack MCP server expose?
io.github.giovanemartins/localstack exposes 73 tools: s3_list_buckets, s3_create_bucket, s3_delete_bucket, s3_put_object, s3_get_object, and 68 more. Their descriptions and schemas cost roughly 3,559 tokens of context every time the server is loaded.
Is the io.github.giovanemartins/localstack MCP server still maintained?
io.github.giovanemartins/localstack is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.