awslabs.aws-pricing-mcp-server

v1.0.30 safe
2.0
Low Risk

An AWS Labs Model Context Protocol (MCP) server for official pricing of AWS services

🤖 AI Analysis

Final verdict: SAFE

The package shows low risk indicators with no suspicious network or shell activities. The minor obfuscation and credential risks are benign and commonly seen in legitimate software.

  • No network calls detected
  • Environment variables are used for configuration
Per-check LLM notes
  • Network: No network calls detected, which is typical for packages not requiring external communications.
  • Shell: No shell execution patterns detected, indicating the package does not execute system commands.
  • Obfuscation: The observed pattern is a common practice to extend package paths and does not indicate malicious obfuscation.
  • Credentials: Environment variable retrieval for configuration purposes appears standard and is likely used for legitimate operations rather than credential harvesting.
  • Metadata: The author has only one package, suggesting a new or less active account, but no other red flags are present.

📦 Package Quality Overall: Medium (6.6/10)

✦ High Test Suite 9.0

Test suite present — 10 test file(s) found

  • Test runner config found: conftest.py
  • Test runner config found: pyproject.toml
  • 10 test file(s) detected (e.g. __init__.py)
◈ Medium Documentation 7.0

Some documentation present

  • Documentation URL: "Documentation" -> https://awslabs.github.io/mcp/servers/aws-pricing-mcp-server
  • Detailed PyPI description (6556 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 52 type-annotated function signatures detected in source
✦ High Multiple Contributors 10.0

Active multi-contributor project

  • 42 unique contributor(s) across 100 commits in awslabs/mcp
  • Active community — 5 or more distinct contributors

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 2.0

Found 1 obfuscation pattern(s)

  • amespace packages. __path__ = __import__('pkgutil').extend_path(__path__, __name__) # Copyright Amazon.com, In
✓ Shell / Subprocess Execution

No shell execution patterns detected

⚠ Credential Harvesting score 5.0

Found 2 credential access pattern(s)

  • nment parameters AWS_REGION = os.environ.get('AWS_REGION', 'us-east-1') AWS_PROFILE = os.environ.get('AWS_PROF
  • ', 'us-east-1') AWS_PROFILE = os.environ.get('AWS_PROFILE') PRICING_ENDPOINT = os.environ.get('PRICING_ENDPOIN
✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: users.noreply.github.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository awslabs/mcp appears legitimate

⚠ Maintainer History score 2.0

1 maintainer concern(s) found

  • Author "Amazon Web Services" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with awslabs.aws-pricing-mcp-server 
Create a Python-based command-line tool that allows users to query and display the current pricing information for various AWS services. This tool will utilize the 'awslabs.aws-pricing-mcp-server' package to fetch pricing data from the AWS Model Context Protocol (MCP) server. Your application should include the following features:

1. **Service Selection**: Users should be able to select one or multiple AWS services for which they want to retrieve pricing information.
2. **Region Filtering**: Provide an option for users to filter pricing information based on specific AWS regions.
3. **Currency Conversion**: Implement currency conversion functionality so that users can view prices in their preferred currency.
4. **Pricing Details**: Display detailed pricing information such as On-Demand, Reserved Instances, Savings Plans, etc., if available.
5. **Output Formats**: Allow users to choose between different output formats like JSON, CSV, or plain text.
6. **Rate Limiting and Throttling**: Ensure your application handles rate limiting and throttling gracefully when querying the MCP server.
7. **Error Handling**: Implement robust error handling to manage network issues, invalid inputs, and other potential errors.

Your task is to design and implement this tool, ensuring it is user-friendly and efficient. Utilize the 'awslabs.aws-pricing-mcp-server' package to connect to the AWS MCP server and fetch the required pricing data. Document your code thoroughly and provide clear instructions on how to install and run your application.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!