Amazon
AWS
AWS Control Tower MCP server
AWS Control Tower MCP server
AWS Control Tower MCP server
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
AWS Control Tower MCP server
AWS Control Tower MCP server
AWS Control Tower MCP server
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
Expose AWS Control Tower to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesn’t ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.
Expose AWS Control Tower to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesn’t ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.
25
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.
Other services from this vendor:
Amazon Account
Amazon Alexa for Business
Amazon API Gateway Management
Amazon AppConfig Data
Amazon AppFlow
Amazon AppIntegrations
Amazon AppStream
Amazon Augmented AI Runtime
Amazon AWS App Runner
Amazon AWS Chatbot
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon AppIntegrations
Amazon AppStream
Amazon Augmented AI Runtime
Amazon AWS App Runner
Amazon AWS Chatbot
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon CloudSearch
Amazon CloudWatch Events
Amazon CloudWatch Evidently
Amazon CloudWatch Logs
Amazon CloudWatch Observability Access Manager
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon CloudSearch
Amazon CloudWatch Events
Amazon CloudWatch Evidently
Amazon CloudWatch Logs
Amazon CloudWatch Observability Access Manager
Amazon Cognito Sync
Amazon Connect Campaign Service
Amazon Connect Contact Lens
Amazon Connect Wisdom
Amazon Database Migration Service
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon CloudSearch
Amazon CloudWatch Events
Amazon CloudWatch Evidently
Amazon CloudWatch Logs
Amazon CloudWatch Observability Access Manager
Amazon Cognito Sync
Amazon Connect Campaign Service
Amazon Connect Contact Lens
Amazon Connect Wisdom
Amazon Database Migration Service
Amazon DataSync
Amazon DevOps Guru
Amazon DocumentDB Elastic Clusters
Amazon DocumentDB with MongoDB Compatibility
Amazon EC2 Container Registry
Other services from this portfolio:
Amazon Account
Amazon Alexa for Business
Amazon API Gateway Management
Amazon AppConfig Data
Amazon AppFlow
Amazon AppIntegrations
Amazon AppStream
Amazon Augmented AI Runtime
Amazon AWS App Runner
Amazon AWS Chatbot
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon AppIntegrations
Amazon AppStream
Amazon Augmented AI Runtime
Amazon AWS App Runner
Amazon AWS Chatbot
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon CloudSearch
Amazon CloudWatch Events
Amazon CloudWatch Evidently
Amazon CloudWatch Logs
Amazon CloudWatch Observability Access Manager
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon CloudSearch
Amazon CloudWatch Events
Amazon CloudWatch Evidently
Amazon CloudWatch Logs
Amazon CloudWatch Observability Access Manager
Amazon Cognito Sync
Amazon Connect Campaign Service
Amazon Connect Contact Lens
Amazon Connect Wisdom
Amazon Database Migration Service
Route 53 Recovery Readiness
Route 53 Domains
Route 53
OpenSearch Service Serverless
Marketplace Entitlement Service
Marketplace Deployment
Marketplace Catalog
Forecast Query Service
EventBridge Pipes
Elasticsearch Service
Elastic Transcoder
Elastic Load Balancing
Elastic Disaster Recovery Service
DynamoDB Streams
DynamoDB Accelerator
DynamoDB
CloudWatch RUM
CloudWatch Internet Monitoring
CloudWatch Application Insights
Chime Identity
AWS X-Ray
AWS WorkSpaces Web
AWS WorkSpaces Thin Client
AWS WorkSpaces
AWS WorkMail Message Flow
AWS WorkMail
AWS WorkLink
AWS WorkDocs
AWS Well-Architected Tool
AWS WAFV2
25
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.
Other services from this vendor:
Amazon Account
Amazon Alexa for Business
Amazon API Gateway Management
Amazon AppConfig Data
Amazon AppFlow
Amazon AppIntegrations
Amazon AppStream
Amazon Augmented AI Runtime
Amazon AWS App Runner
Amazon AWS Chatbot
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon AppIntegrations
Amazon AppStream
Amazon Augmented AI Runtime
Amazon AWS App Runner
Amazon AWS Chatbot
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon CloudSearch
Amazon CloudWatch Events
Amazon CloudWatch Evidently
Amazon CloudWatch Logs
Amazon CloudWatch Observability Access Manager
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon CloudSearch
Amazon CloudWatch Events
Amazon CloudWatch Evidently
Amazon CloudWatch Logs
Amazon CloudWatch Observability Access Manager
Amazon Cognito Sync
Amazon Connect Campaign Service
Amazon Connect Contact Lens
Amazon Connect Wisdom
Amazon Database Migration Service
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon CloudSearch
Amazon CloudWatch Events
Amazon CloudWatch Evidently
Amazon CloudWatch Logs
Amazon CloudWatch Observability Access Manager
Amazon Cognito Sync
Amazon Connect Campaign Service
Amazon Connect Contact Lens
Amazon Connect Wisdom
Amazon Database Migration Service
Amazon DataSync
Amazon DevOps Guru
Amazon DocumentDB Elastic Clusters
Amazon DocumentDB with MongoDB Compatibility
Amazon EC2 Container Registry
Other services from this portfolio:
Amazon Account
Amazon Alexa for Business
Amazon API Gateway Management
Amazon AppConfig Data
Amazon AppFlow
Amazon AppIntegrations
Amazon AppStream
Amazon Augmented AI Runtime
Amazon AWS App Runner
Amazon AWS Chatbot
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon AppIntegrations
Amazon AppStream
Amazon Augmented AI Runtime
Amazon AWS App Runner
Amazon AWS Chatbot
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon CloudSearch
Amazon CloudWatch Events
Amazon CloudWatch Evidently
Amazon CloudWatch Logs
Amazon CloudWatch Observability Access Manager
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon CloudSearch
Amazon CloudWatch Events
Amazon CloudWatch Evidently
Amazon CloudWatch Logs
Amazon CloudWatch Observability Access Manager
Amazon Cognito Sync
Amazon Connect Campaign Service
Amazon Connect Contact Lens
Amazon Connect Wisdom
Amazon Database Migration Service
Route 53 Recovery Readiness
Route 53 Domains
Route 53
OpenSearch Service Serverless
Marketplace Entitlement Service
Marketplace Deployment
Marketplace Catalog
Forecast Query Service
EventBridge Pipes
Elasticsearch Service
Elastic Transcoder
Elastic Load Balancing
Elastic Disaster Recovery Service
DynamoDB Streams
DynamoDB Accelerator
DynamoDB
CloudWatch RUM
CloudWatch Internet Monitoring
CloudWatch Application Insights
Chime Identity
AWS X-Ray
AWS WorkSpaces Web
AWS WorkSpaces Thin Client
AWS WorkSpaces
AWS WorkMail Message Flow
AWS WorkMail
AWS WorkLink
AWS WorkDocs
AWS Well-Architected Tool
AWS WAFV2
25
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.
Other services from this vendor:
Amazon Account
Amazon Alexa for Business
Amazon API Gateway Management
Amazon AppConfig Data
Amazon AppFlow
Amazon AppIntegrations
Amazon AppStream
Amazon Augmented AI Runtime
Amazon AWS App Runner
Amazon AWS Chatbot
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon AppIntegrations
Amazon AppStream
Amazon Augmented AI Runtime
Amazon AWS App Runner
Amazon AWS Chatbot
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon CloudSearch
Amazon CloudWatch Events
Amazon CloudWatch Evidently
Amazon CloudWatch Logs
Amazon CloudWatch Observability Access Manager
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon CloudSearch
Amazon CloudWatch Events
Amazon CloudWatch Evidently
Amazon CloudWatch Logs
Amazon CloudWatch Observability Access Manager
Amazon Cognito Sync
Amazon Connect Campaign Service
Amazon Connect Contact Lens
Amazon Connect Wisdom
Amazon Database Migration Service
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon CloudSearch
Amazon CloudWatch Events
Amazon CloudWatch Evidently
Amazon CloudWatch Logs
Amazon CloudWatch Observability Access Manager
Amazon Cognito Sync
Amazon Connect Campaign Service
Amazon Connect Contact Lens
Amazon Connect Wisdom
Amazon Database Migration Service
Amazon DataSync
Amazon DevOps Guru
Amazon DocumentDB Elastic Clusters
Amazon DocumentDB with MongoDB Compatibility
Amazon EC2 Container Registry
Other services from this portfolio:
Amazon Account
Amazon Alexa for Business
Amazon API Gateway Management
Amazon AppConfig Data
Amazon AppFlow
Amazon AppIntegrations
Amazon AppStream
Amazon Augmented AI Runtime
Amazon AWS App Runner
Amazon AWS Chatbot
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon AppIntegrations
Amazon AppStream
Amazon Augmented AI Runtime
Amazon AWS App Runner
Amazon AWS Chatbot
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon CloudSearch
Amazon CloudWatch Events
Amazon CloudWatch Evidently
Amazon CloudWatch Logs
Amazon CloudWatch Observability Access Manager
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup Storage
Amazon Billing and Cost Management Data Exports
Amazon Chime
Amazon Chime Messaging
Amazon Chime Voice
Amazon CloudFront
Amazon CloudFront KeyValueStore
Amazon CloudSearch
Amazon CloudWatch Events
Amazon CloudWatch Evidently
Amazon CloudWatch Logs
Amazon CloudWatch Observability Access Manager
Amazon Cognito Sync
Amazon Connect Campaign Service
Amazon Connect Contact Lens
Amazon Connect Wisdom
Amazon Database Migration Service
Route 53 Recovery Readiness
Route 53 Domains
Route 53
OpenSearch Service Serverless
Marketplace Entitlement Service
Marketplace Deployment
Marketplace Catalog
Forecast Query Service
EventBridge Pipes
Elasticsearch Service
Elastic Transcoder
Elastic Load Balancing
Elastic Disaster Recovery Service
DynamoDB Streams
DynamoDB Accelerator
DynamoDB
CloudWatch RUM
CloudWatch Internet Monitoring
CloudWatch Application Insights
Chime Identity
AWS X-Ray
AWS WorkSpaces Web
AWS WorkSpaces Thin Client
AWS WorkSpaces
AWS WorkMail Message Flow
AWS WorkMail
AWS WorkLink
AWS WorkDocs
AWS Well-Architected Tool
AWS WAFV2
Our customers scale automation with security built in.
Tools exposed by this MCP server
Every AWS Control Tower operation, as an MCP tool
Every AWS Control Tower operation, as an MCP tool
Each API operation becomes a tool your AI client can call. You decide which ones: allow reads, require approval before sensitive writes and block the rest. A few of the most used:
AWS Control Tower
AWS Control Tower
Create landing zone
Create landing zone
AWS Control Tower
AWS Control Tower
Delete landing zone
Delete landing zone
AWS Control Tower
AWS Control Tower
Disable baseline on target
Disable baseline on target
AWS Control Tower
AWS Control Tower
Enable baseline on target
Enable baseline on target
AWS Control Tower
AWS Control Tower
Enable control
Enable control
AWS Control Tower
AWS Control Tower
Get baseline operation status
Get baseline operation status
AWS Control Tower
AWS Control Tower
Get landing zone operation status
Get landing zone operation status
AWS Control Tower
AWS Control Tower
List baselines
List baselines
AWS Control Tower
AWS Control Tower
List enabled baselines
List enabled baselines
AWS Control Tower
AWS Control Tower
List enabled controls for organizational unit
List enabled controls for organizational unit
AWS Control Tower
AWS Control Tower
List landing zones
List landing zones
AWS Control Tower
AWS Control Tower
Retrieve baseline details
Retrieve baseline details
AWS Control Tower
AWS Control Tower
Retrieve enabled baseline details
Retrieve enabled baseline details
AWS Control Tower
AWS Control Tower
Retrieve enabled control details
Retrieve enabled control details
AWS Control Tower
AWS Control Tower
Retrieve landing zone details
Retrieve landing zone details
AWS Control Tower
AWS Control Tower
Update landing zone
Update landing zone
AWS Control Tower
Create landing zone
AWS Control Tower
Delete landing zone
AWS Control Tower
Disable baseline on target
AWS Control Tower
Enable baseline on target
AWS Control Tower
Enable control
AWS Control Tower
Get baseline operation status
AWS Control Tower
Get landing zone operation status
AWS Control Tower
List baselines
AWS Control Tower
List enabled baselines
AWS Control Tower
List enabled controls for organizational unit
AWS Control Tower
List landing zones
AWS Control Tower
Retrieve baseline details
AWS Control Tower
Retrieve enabled baseline details
AWS Control Tower
Retrieve enabled control details
AWS Control Tower
Retrieve landing zone details
AWS Control Tower
Update landing zone
AWS Control Tower
AWS Control Tower
Update landing zone
Update landing zone
AWS Control Tower
AWS Control Tower
Retrieve landing zone details
Retrieve landing zone details
AWS Control Tower
AWS Control Tower
Retrieve enabled control details
Retrieve enabled control details
AWS Control Tower
AWS Control Tower
Retrieve enabled baseline details
Retrieve enabled baseline details
AWS Control Tower
AWS Control Tower
Retrieve baseline details
Retrieve baseline details
AWS Control Tower
AWS Control Tower
List landing zones
List landing zones
AWS Control Tower
AWS Control Tower
List enabled controls for organizational unit
List enabled controls for organizational unit
AWS Control Tower
AWS Control Tower
List enabled baselines
List enabled baselines
AWS Control Tower
AWS Control Tower
List baselines
List baselines
AWS Control Tower
AWS Control Tower
Get landing zone operation status
Get landing zone operation status
AWS Control Tower
AWS Control Tower
Get baseline operation status
Get baseline operation status
AWS Control Tower
AWS Control Tower
Enable control
Enable control
AWS Control Tower
AWS Control Tower
Enable baseline on target
Enable baseline on target
AWS Control Tower
AWS Control Tower
Disable baseline on target
Disable baseline on target
AWS Control Tower
AWS Control Tower
Delete landing zone
Delete landing zone
AWS Control Tower
AWS Control Tower
Create landing zone
Create landing zone
AWS Control Tower
Update landing zone
AWS Control Tower
Retrieve landing zone details
AWS Control Tower
Retrieve enabled control details
AWS Control Tower
Retrieve enabled baseline details
AWS Control Tower
Retrieve baseline details
AWS Control Tower
List landing zones
AWS Control Tower
List enabled controls for organizational unit
AWS Control Tower
List enabled baselines
AWS Control Tower
List baselines
AWS Control Tower
Get landing zone operation status
AWS Control Tower
Get baseline operation status
AWS Control Tower
Enable control
AWS Control Tower
Enable baseline on target
AWS Control Tower
Disable baseline on target
AWS Control Tower
Delete landing zone
AWS Control Tower
Create landing zone
Connect AWS Control Tower to your AI client in three steps.
01
Connect the service
Add AWS Control Tower in Mindflow with its credentials. They stay in Mindflow and never reach the AI client.
02
Choose the tools
Pick the operations each AI client may call. Allow reads, require approval before sensitive writes and block the rest.
03
Connect your AI client
Point Claude, ChatGPT, Cursor or your own agent to your MCP Gateway endpoint, then check real calls in the audit log.
Use cases
Use cases
What your AI agents can do with AWS Control Tower
What your AI agents can do with AWS Control Tower
AI clients
Mindflow
AWS Control Tower
→ Automate cloud governance policy enforcement by scheduling baseline updates and controls activation, ensuring organizational units consistently comply with company standards through programmatic use of EnableBaseline and EnableControl operations. → Streamline lifecycle management of landing zones by orchestrating environment creation, updates, and decommissioning via CreateLandingZone, UpdateLandingZone, and DeleteLandingZone API calls, reducing manual configuration overhead. → Centralize tagging and resource metadata management by automatically applying and removing tags on Control Tower resources with TagResource and UntagResource API actions to maintain accurate asset inventories.
→ Automate cloud governance policy enforcement by scheduling baseline updates and controls activation, ensuring organizational units consistently comply with company standards through programmatic use of EnableBaseline and EnableControl operations. → Streamline lifecycle management of landing zones by orchestrating environment creation, updates, and decommissioning via CreateLandingZone, UpdateLandingZone, and DeleteLandingZone API calls, reducing manual configuration overhead. → Centralize tagging and resource metadata management by automatically applying and removing tags on Control Tower resources with TagResource and UntagResource API actions to maintain accurate asset inventories.
More
More
Amazon
Amazon
AWS
AWS
MCP servers:
MCP servers:
Amazon Account
Amazon Account
Amazon Account
Amazon Alexa for Business
Amazon Alexa for Business
Amazon Alexa for Business
Amazon API Gateway Management
Amazon API Gateway Management
Amazon API Gateway Management
Amazon AppConfig Data
Amazon AppConfig Data
Amazon AppConfig Data
Amazon AppFlow
Amazon AppFlow
Amazon AppFlow
Amazon AppIntegrations
Amazon AppIntegrations
Amazon AppIntegrations
Amazon AppStream
Amazon AppStream
Amazon AppStream
Amazon Augmented AI Runtime
Amazon Augmented AI Runtime
Amazon Augmented AI Runtime
Amazon AWS App Runner
Amazon AWS App Runner
Amazon AWS App Runner
Amazon AWS Chatbot
Amazon AWS Chatbot
Amazon AWS Chatbot
Amazon AWS CodeStar Connections
Amazon AWS CodeStar Connections
Amazon AWS CodeStar Connections
Amazon AWS Connect Service
Amazon AWS Connect Service
Amazon AWS Connect Service
Amazon AWS Direct Connect
Amazon AWS Direct Connect
Amazon AWS Direct Connect
Amazon AWS Firewall Management Service
Amazon AWS Firewall Management Service
Amazon AWS Firewall Management Service
Amazon AWS GameLift
Amazon AWS GameLift
Amazon AWS GameLift
Amazon AWS Marketplace Metering
Amazon AWS Marketplace Metering
Amazon AWS Marketplace Metering
Amazon AWS Outposts
Amazon AWS Outposts
Amazon AWS Outposts
Amazon AWS Personalize
Amazon AWS Personalize
Amazon AWS Personalize
Amazon AWS Security Token Service
Amazon AWS Security Token Service
Amazon AWS Security Token Service
Amazon AWS Serverless Application Repository
Amazon AWS Serverless Application Repository
Amazon AWS Serverless Application Repository
Amazon AWS Service Catalog App Registry
Amazon AWS Service Catalog App Registry
Amazon AWS Service Catalog App Registry
Amazon AWS Storage Gateway
Amazon AWS Storage Gateway
Amazon AWS Storage Gateway
Amazon Backup
Amazon Backup
Amazon Backup
Amazon Backup Storage
Amazon Backup Storage
Amazon Backup Storage
Load More
Every call goes through one governed endpoint.
Every call goes through one governed endpoint.
Your AI clients get access. You keep control.
Your AI clients get access. You keep control.
Every call to AWS Control Tower goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.
Every call to AWS Control Tower goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.
AWS Control Tower MCP server
Live
RBAC · SecOps
Scoped credentials
Audit log
Create landing zone
Allowed
Delete landing zone
Allowed
Disable baseline on target
Needs approval
Enable baseline on target
Blocked
Every call logged · Export to SIEM
Questions about the AWS Control Tower MCP server
Clear answers before you connect an AI client.
Questions about the AWS Control Tower MCP server
Clear answers before you connect an AI client.
Explore more MCP servers in our catalog of 4,000+ services.
Put this MCP server to work.
Bring one AI client and the tools it needs. We’ll show you the setup in Mindflow, from scoped access to the audit log.
Put this MCP server to work.
Bring one AI client and the tools it needs. We’ll show you the setup in Mindflow, from scoped access to the audit log.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research — straight to your inbox. No spam, unsubscribe anytime.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research — straight to your inbox. No spam, unsubscribe anytime.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research — straight to your inbox. No spam, unsubscribe anytime.