mashagua · Oct 25, 2026 · Oct 25, 2026 · Oct 25, 2026
diff --git a/entries/aws-mcp/catalog-metadata.v1.json b/entries/aws-mcp/catalog-metadata.v1.json
@@ -0,0 +1,118 @@
+{
+  "$schema": "../../schemas/catalog-metadata.v1.schema.json",
+  "schemaVersion": 1,
+  "identity": {
+    "kind": "service",
+    "id": "aws-mcp"
+  },
+  "presentation": {
+    "defaultLocale": "zh-CN",
+    "i18n": {
+      "zh-CN": {
+        "name": "AWS MCP",
+        "summary": "AWS 托管 MCP 服务的本地代理入口：固定代理 1.7.0，需 Python 3.10–3.14、uv/uvx 与自行配置的 AWS 凭据和 IAM 权限；默认只读，云资源费用另计。",
+        "description": "通过 AWS 官方 MCP Proxy 的本地 stdio 进程连接 AWS 托管 MCP 服务，远端使用 HTTPS 与 SigV4。条目的 1.7.0 是代理包版本，不是托管服务版本，也不固定远端工具清单；未填写工具数量。CLI 包及实际代理代码包均固定到发布 wheel 的 HTTPS URL 和 SHA-256。其余依赖遵循 CLI 包内的精确版本约束，这不是全部依赖的逐字节安全认证。\n\n需自行准备 Python >=3.10,<3.15、uv/uvx、网络和所选 AWS 身份的有效凭据、最小 IAM 权限；使用 AWS CLI 登录流程时还需相应 CLI。安装不会登录 AWS、创建账户、授予权限、安装配套技能或接入其他宿主。启动前由用户在私有配置中确认账户、Profile 与操作区域；不收集或公开密钥。缺工具、凭据、权限或连接时说明阻碍，在相应外部调用前停止，不能编造成功结果。\n\n默认连接 us-east-1 MCP 端点，操作默认区域也显式设为 us-east-1；端点区域和资源操作区域是两件事，均须用户确认。默认启用代理 --read-only，只保留远端标注 readOnlyHint=true 的工具并限制相应调用；写入或未标注的工具、以及包含混合操作的 API 工具可能不可用。这不是 IAM 安全边界，也不保证读操作没有费用。默认关闭代理可选遥测，不关闭向 AWS 发送工具参数、认证及 AWS 审计日志。\n\n本条目选择 SigV4 代理方案；AWS 同时提供的直接 OAuth 连接不是本条目默认安装流程。公开文档和服务信息可匿名访问，不代表能操作账户资源；未经用户授权，不切到匿名 --skip-auth、申请更高权限或移除只读模式来绕过错误。创建/删除资源、改 IAM、上传数据、发消息、切流和付费操作须先明确授权、范围及成本。请求参数与被访问数据按 AWS 服务条款和组织的数据处理要求进入 AWS。\n\n代理源码为 Apache-2.0；AWS 托管服务与资源适用独立条款。AWS 文档称工具包/MCP 服务本身无额外费用，所访问或创建的云资源、模型、存储、流量、日志及第三方服务仍可能计费。社区独立收录，维护者未验证，无上游背书。平台列表来自上游 OS Independent 声明和通用 Python wheel，不代表本轮跨平台实测。已在 macOS 隔离环境运行固定 Python 代理：默认签名模式在空凭据下明确返回缺凭据错误；另行授权的匿名只读测试变体完成 MCP 握手、发现 6 个工具并实际检索和读取公开文档。DesireCore 10.0.187 已验证目录展示和接入入口，并通过正常配置 API 将单独匿名变体接入测试 Agent，实际发现 6 个工具；真实对话经工具审批调用文档检索成功。默认签名接入未完成，停止安装任务后资源卡片仍将 installing 记录标为“已安装”的显示问题未修复；不代表账户业务验收。未读取真实 AWS 凭据、登录、调用账户业务、创建资源或进行 Windows/Linux 实测。"
+      },
+      "en-US": {
+        "name": "AWS MCP",
+        "summary": "Local proxy entry for the managed AWS MCP Server, pinned to proxy 1.7.0. Requires Python 3.10–3.14, uv/uvx and separately configured AWS credentials/IAM access; read-only by default, with separate cloud resource charges.",
+        "description": "Connect to the managed AWS MCP Server through the official AWS MCP Proxy as a local stdio process, using HTTPS and SigV4 upstream. Version 1.7.0 refers to the proxy packages, not the managed service or its evolving tool inventory. No tool count is claimed. Both the CLI wrapper and implementation wheels are pinned by HTTPS URL and SHA-256. Other dependencies follow the wrapper’s exact version constraints; this is not a byte-level security certification of the full dependency closure.\n\nSeparately provide Python >=3.10,<3.15, uv/uvx, network access, valid credentials for the selected AWS identity and least-privilege IAM permissions. An AWS CLI sign-in workflow also needs its compatible CLI. Installation does not sign in, create accounts, grant permissions, install companion skills or configure other hosts. Before starting, have the user confirm the account, profile and operational Region in private configuration; never collect or publish keys. Report missing tools, credentials, permissions or connectivity and stop before the affected external call rather than fabricating success.\n\nThe default MCP endpoint and explicit operational Region are both us-east-1; these are separate settings requiring user confirmation. Default --read-only keeps tools annotated readOnlyHint=true and restricts corresponding calls. Write-capable, unannotated or mixed-operation API tools may therefore be unavailable. This does not replace IAM or guarantee cost-free reads. Optional proxy telemetry is disabled; AWS request data, authentication and audit logging are not disabled.\n\nThis listing selects the SigV4 proxy route, not AWS’s separate direct OAuth connection. Anonymous documentation/service lookup does not establish permission to operate on account resources. Do not switch to --skip-auth, elevate permissions or remove read-only mode to work around a failure without authorization. Resource creation/deletion, IAM changes, uploads, messaging, traffic changes and paid operations require explicit scope and cost authorization. Request parameters and accessed data are subject to AWS terms and organizational data-handling requirements.\n\nThe proxy source is Apache-2.0; AWS services and resources have separate terms. AWS documents no additional charge for the toolkit/MCP service itself, while resources, models, storage, traffic, logs and third-party providers may still incur charges. Independent community listing, unverified maintainers, no upstream endorsement. Platform metadata reflects upstream OS Independent classification and universal wheels, not cross-platform testing. An isolated macOS run executed the pinned Python proxy: default signed mode failed explicitly without credentials; a separately authorized anonymous read-only variant initialized MCP, discovered six tools and searched/read public documentation. DesireCore 10.0.187 catalog and task entry points were exercised; a separate public variant was registered to a test Agent through the normal configuration API, exposing six tools, and its real chat invoked documentation search through normal approval. Default signed installation remains incomplete. A resource-card label still describes an installing record as installed after task cancellation; that UI issue is not fixed. AWS account readiness is not established. No real AWS credentials, sign-in, account operation, resource creation or Windows/Linux execution was used."
+      }
+    },
+    "tags": [
+      "aws",
+      "mcp",
+      "cloud",
+      "sigv4",
+      "documentation"
+    ]
+  },
+  "release": {
+    "state": "known",
+    "version": "1.7.0",
+    "versionScheme": "semver"
+  },
+  "timestamps": {
+    "catalogUpdatedAt": {
+      "state": "known",
+      "value": "2026-10-25",
+      "precision": "day"
+    },
+    "releasePublishedAt": {
+      "state": "known",
+      "value": "2026-09-15T11:20:51Z",
+      "precision": "second"
+    },
+    "reviewedAt": {
+      "state": "known",
+      "value": "2026-10-25",
+      "precision": "day"
+    },
+    "upstreamObservedAt": {
+      "state": "known",
+      "value": "2026-10-25",
+      "precision": "day"
+    }
+  },
+  "provenance": {
+    "content": {
+      "kind": "package",
+      "url": "https://pypi.org/project/mcp-proxy-for-aws-cli/",
+      "ref": "1.7.0",
+      "sha256": "75f990fc5cab688bba31b67fb6a01832b64f7f097c94503877012c6595f0836e"
+    }
+  },
+  "governance": {
+    "availability": "installable",
+    "stewardship": "community",
+    "license": {
+      "state": "known",
+      "value": "Apache-2.0",
+      "evidencePath": "mcp_proxy_for_aws_cli-1.7.0.dist-info/licenses/LICENSE"
+    },
+    "redistribution": "allowed",
+    "listingMaintainer": {
+      "name": "mashagua",
+      "url": "https://github.com/mashagua",
+      "verified": false
+    },
+    "upstreamMaintainer": {
+      "name": "Amazon Web Services",
+      "url": "https://github.com/aws/mcp-proxy-for-aws",
+      "verified": false
+    },
+    "branding": {
+      "relationship": "independent-listing",
+      "nameUsage": "nominative",
+      "logoStatus": "not-used"
+    },
+    "compliance": {
+      "licenseEvidencePath": "mcp_proxy_for_aws_cli-1.7.0.dist-info/licenses/LICENSE",
+      "noticePath": "mcp_proxy_for_aws_cli-1.7.0.dist-info/licenses/NOTICE",
+      "reviewedRef": "1.7.0",
+      "reviewedAt": "2026-10-25",
+      "reviewedBy": "mashagua",
+      "upstreamEndorsed": false
+    }
+  },
+  "compatibility": {
+    "platforms": {
+      "state": "known",
+      "values": [
+        "macos",
+        "windows",
+        "linux"
+      ]
+    }
+  },
+  "spec": {
+    "kind": "service",
+    "protocol": "mcp",
+    "authType": "unknown",
+    "capabilities": [
+      "aws_documentation",
+      "aws_service_reference",
+      "iam_authenticated_access"
+    ]
+  }
+}
diff --git a/entries/aws-mcp/install.md b/entries/aws-mcp/install.md
@@ -0,0 +1,49 @@
+# AWS MCP 安装 / Installation
+
+这是 AWS 托管 MCP 服务的 **SigV4 本地代理**入口，不是把 AWS 服务部署到本机。`1.7.0` 指 `mcp-proxy-for-aws-cli` 和 `mcp-proxy-for-aws` 的代理版本，远端服务不由此固定版本。配套 [AWS 技能合集 PR](https://github.com/desirecore/market/pull/226) 单独安装，不是本服务的硬依赖。
+
+This entry connects to the managed AWS MCP Server through a local SigV4 proxy. Version `1.7.0` identifies the two proxy distributions, not the remote service. The companion skill collection is optional and acquired separately.
+
+## 安装前确认 / Before installation
+
+- 自行准备 Python `>=3.10,<3.15`、uv/uvx 和兼容 stdio 的 DesireCore 客户端；首次获取依赖需要访问 PyPI 与 files.pythonhosted.org，运行需要访问选定 AWS HTTPS 端点。不要自动升级 Python、uv 或客户端。
+- 请求用户在本机私有配置中选择 AWS 身份、Profile、账户与资源操作区域。优先使用现有 SSO/临时凭据和最小权限角色，不申请 root/AdministratorAccess，也不索取密钥、会话 token、凭据文件或完整身份输出到对话。已有凭据不代表用户授权此次使用。
+- 本条目不自动安装 AWS CLI 或发起登录。若用户选择 `aws login`，该流程另需 AWS CLI >=2.32.0；已有 SSO 流程无需因此更换。登录、刷新会话或附加 IAM 策略必须先取得相应授权，不能把命令写成隐含安装步骤。
+- 默认连接 `https://aws-mcp.us-east-1.api.aws/mcp`，资源操作默认区域通过 `AWS_REGION=us-east-1` 元数据明确指定。端点所在区域不等于资源所在区域；开始前说明并确认二者，按官方区域清单调整用户私有连接配置。
+- AWS 的直接远端 OAuth 接入是另一条方案；本条目不宣称已验证 DesireCore 的 AWS OAuth 联调，不在安装中改写其他客户端配置。
+
+Provide Python 3.10–3.14, uv/uvx, a compatible stdio host and network access. Have the user select the identity, profile, account and operational Region privately before using existing credentials. Prefer temporary/SSO credentials and least privilege; never request credential files or keys in chat. Do not automatically install/upgrade tools, sign in, refresh sessions, alter IAM or replace unrelated configurations. The optional `aws login` workflow requires AWS CLI >=2.32.0. Endpoint and operational Regions are distinct. Direct OAuth is not the selected or tested flow here.
+
+## 固定制品 / Pinned artifacts
+
+| 发布包 / Distribution | 文件 / File | SHA-256 |
+| --- | --- | --- |
+| `mcp-proxy-for-aws-cli==1.7.0` | `mcp_proxy_for_aws_cli-1.7.0-py3-none-any.whl`（7321 字节 / bytes） | `75f990fc5cab688bba31b67fb6a01832b64f7f097c94503877012c6595f0836e` |
+| `mcp-proxy-for-aws==1.7.0` | `mcp_proxy_for_aws-1.7.0-py3-none-any.whl`（45971 字节 / bytes） | `d7e6c8f45ef89303cb48822e25f91c0234bb28ee987ebb56615cd16a5d044a1b` |
+
+下载 URL 与带摘要的默认参数见 [usage.md](usage.md) 和 manifest；默认使用 `uvx --from <CLI wheel + hash> --with <implementation wheel + hash> mcp-proxy-for-aws-cli ...`。CLI 只是元数据包装包；`--with` 同时固定实际代码包，不能只校验包装包后就声称代码也已校验。
+
+`uvx` 在隔离的缓存环境中准备依赖，不是系统级安装。`#sha256=` 是交给 uv 的下载校验信息；摘要不匹配必须失败，不改用无摘要 URL、浮动版本或 `latest`。若宿主或 uv 不支持本条目参数，停止并报告兼容性问题，不静默改写受治理的定义。CLI 的其余 84 条运行依赖声明使用精确版本及条件标记；本记录没有逐个审核它们的所有平台制品或证明无漏洞。
+
+The launch definition pins both the metadata-only CLI wrapper and actual implementation wheels by URL and SHA-256. uv prepares an isolated cached environment and checks the URL hashes. A mismatch or unsupported launch contract must stop installation, with no unhashed/latest fallback. The wrapper declares 84 exact-version runtime requirements with environment markers; this review is not a byte-level audit or vulnerability certification of all platform-specific dependency artifacts.
+
+## 登记与连接验证 / Registration and verification
+
+1. 通过当前 DesireCore 提供的受治理服务安装/连接流程，使用本次操作携带的精确目录来源与快照。读取该快照的 manifest、sidecar、本说明与 usage，不替换整个 MCP 配置，也不凭裸 `aws-mcp` ID 吸收其他来源的安装。
+2. 先确认 uvx/Python 可用、用户批准的凭据配置已就绪，以及账户、操作区域、只读范围与费用边界。缺失时说明缺失项并停止；不要通过读取或上传凭据来“验证”。若客户端需要定位 uvx，使用本机解析出的真实绝对路径，不把本机路径写回公共目录。
+3. 使用 manifest 中完全一致的 command/args 启动；默认保留 `--read-only` 与 `--disable-telemetry`，没有 `--skip-auth`。不要在验证连接时调用资源创建、删除、上传、发消息或费用相关工具。
+4. 由 MCP 宿主完成 `initialize`、`notifications/initialized`、`tools/list`（包括分页），检查实际响应、错误和断开清理。工具数量以本次真实返回为准，不预填或伪造。依赖准备完成、进程已启动、握手完成及某项业务可用是不同事实；只按实际结果登记当前客户端支持的安装/连接回执，不预写“已安装/就绪”。
+5. 版本信息按已核验发行包元数据确认，不假设代理提供 `--version` 命令。此版本的 argparse 没有通用 `--version` 开关，不能用不存在的参数判定安装失败。真实账户工具调用需另有对应任务与授权，不能用创建资源作为连通性探针。
+
+Use DesireCore’s governed service workflow with the exact source and snapshot. Confirm tools and privately approved credentials before launch. Keep the catalog definition intact and preserve unrelated connections. Verify MCP initialization and the complete tool list, then record only observations actually made; preparing dependencies or starting a process is not readiness. No tool count is predeclared. Read package metadata for version confirmation rather than assuming a nonexistent `--version` option. A business operation needs its own authorized task.
+
+## 升级与卸载 / Update and removal
+
+- 升级需重新核对两个发布包及适用依赖、摘要、许可证、参数和兼容性，再更新目录；不自动跟随远端或包的 latest，也不把托管服务更新冒充本地代理升级。
+- 卸载先停止并移除这一来源/服务的受治理连接，再按客户端支持的流程移除本条目拥有的安装记录或独立环境。不要删除共享 uv 缓存、AWS CLI、其他宿主连接、`~/.aws`、SSO 会话或用户云资源；凭据撤销和云资源清理是需单独授权的操作。
+
+Updates require a fresh review of both artifacts, dependencies and launch compatibility. Removal stops this exact connection and handles only its owned records/environment. Preserve shared caches, other hosts, credentials and cloud resources; revocation and cloud cleanup require separate authorization.
+
+代理为 Apache-2.0；AWS 账户、API、资源及第三方依赖的条款与费用独立，详见 usage。**macOS 补测已运行固定代理，完成独立公开模式握手、工具发现和文档检索/读取，并检查 DesireCore 目录与接入入口；完整集成和账户业务不在这些通过项内，详见 review.md。**
+
+The proxy is Apache-2.0; AWS and third-party terms/charges are separate. The macOS follow-up executed the pinned proxy for independent public-mode initialization, tool discovery and document search/read, and checked DesireCore catalog/task entry points. Complete client integration and AWS account operations are separate, unverified claims; see review.md.
diff --git a/entries/aws-mcp/manifest.json b/entries/aws-mcp/manifest.json
@@ -0,0 +1,59 @@
+{
+  "id": "aws-mcp",
+  "name": "AWS MCP",
+  "type": "mcp",
+  "version": "1.7.0",
+  "author": "Amazon Web Services",
+  "description": "AWS 托管 MCP 服务的本地代理入口：固定代理 1.7.0，需 Python 3.10–3.14、uv/uvx 与自行配置的 AWS 凭据和 IAM 权限；默认只读，云资源费用另计。",
+  "tags": [
+    "aws",
+    "mcp",
+    "cloud",
+    "sigv4",
+    "documentation"
+  ],
+  "icon": "cloud",
+  "platformSupport": [
+    "macos",
+    "windows",
+    "linux"
+  ],
+  "capabilities": [
+    "aws_documentation",
+    "aws_service_reference",
+    "iam_authenticated_access"
+  ],
+  "install": {
+    "method": "uvx",
+    "packageName": "mcp-proxy-for-aws-cli",
+    "command": "uvx",
+    "args": [
+      "--from",
+      "mcp-proxy-for-aws-cli @ https://files.pythonhosted.org/packages/5d/ec/2faa62a1c8186966d73b4d3069d7098f08e1891b2f5141dd7bcf135c3561/mcp_proxy_for_aws_cli-1.7.0-py3-none-any.whl#sha256=75f990fc5cab688bba31b67fb6a01832b64f7f097c94503877012c6595f0836e",
+      "--with",
+      "mcp-proxy-for-aws @ https://files.pythonhosted.org/packages/73/df/04a7dba8d3ed744daff2783b220e9239969f0e0714266c52f0ced8d4ebf2/mcp_proxy_for_aws-1.7.0-py3-none-any.whl#sha256=d7e6c8f45ef89303cb48822e25f91c0234bb28ee987ebb56615cd16a5d044a1b",
+      "mcp-proxy-for-aws-cli",
+      "https://aws-mcp.us-east-1.api.aws/mcp",
+      "--read-only",
+      "--disable-telemetry",
+      "--metadata",
+      "AWS_REGION=us-east-1"
+    ]
+  },
+  "connection": {
+    "transport": "stdio",
+    "command": "uvx",
+    "args": [
+      "--from",
+      "mcp-proxy-for-aws-cli @ https://files.pythonhosted.org/packages/5d/ec/2faa62a1c8186966d73b4d3069d7098f08e1891b2f5141dd7bcf135c3561/mcp_proxy_for_aws_cli-1.7.0-py3-none-any.whl#sha256=75f990fc5cab688bba31b67fb6a01832b64f7f097c94503877012c6595f0836e",
+      "--with",
+      "mcp-proxy-for-aws @ https://files.pythonhosted.org/packages/73/df/04a7dba8d3ed744daff2783b220e9239969f0e0714266c52f0ced8d4ebf2/mcp_proxy_for_aws-1.7.0-py3-none-any.whl#sha256=d7e6c8f45ef89303cb48822e25f91c0234bb28ee987ebb56615cd16a5d044a1b",
+      "mcp-proxy-for-aws-cli",
+      "https://aws-mcp.us-east-1.api.aws/mcp",
+      "--read-only",
+      "--disable-telemetry",
+      "--metadata",
+      "AWS_REGION=us-east-1"
+    ]
+  }
+}