About workspaces-euc-mcp-server
workspaces-euc-mcp-server is an MCP server in the Browser category: mCP server for administering the Amazon WorkSpaces family of End User Computing services (Personal, Pools, Applications, Secure Browser, Core).
Install
uvx
uvx workspaces-euc-mcp-serverpip
pip install workspaces-euc-mcp-serverThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (30)
analyze_workspace_utilizationClassifies WorkSpaces Personal desktops as unused / idle / active from the `UserConnected` metric (Tier 1).
Parameters not published.
audit_application_imagesAudits WorkSpaces Applications (AppStream 2.0) **images, image builders, and app-block builders** — stale base images, pinned/old agents, errored/SHARED images, and **builders left RUNNING**, each with its **actual regional $/hr and $/month list rate** (Tier 0; rates need Tier 1).
Parameters not published.
audit_security_postureCross-service: flags unencrypted WorkSpace volumes, directories without IP access control groups, **0.0.0.0/0 rules inside IP groups**, Secure Browser portals **without IP restrictions or session logging**, portals/stacks that allow **data egress**, and Applications usage reporting disabled (Tier 0).
Parameters not published.
audit_workspace_imagesAudits **WorkSpaces Personal custom images** — ERROR states, aging images worth refreshing, and **cross-account sharing** (which accounts each image is shared with) (Tier 0).
Parameters not published.
check_directory_healthRegistration state, AWS Directory Service stage, and **registration properties** (target **OU**, custom security group, local-admin / internet-access / maintenance-mode flags) for one or all WorkSpaces-registered directories.
Parameters not published.
compare_euc_costs**"Why did my cost change?"** — compares two windows (defaults to the preceding equal-length window), returning totals, per-service deltas, and the top **usage-type-level drivers** of the change, with WorkSpaces usage bucketed into Personal/Pools/Core (Tier 1).
Parameters not published.
diagnose_application_fleetA WorkSpaces Applications fleet's health and capacity — fleet state, fleet errors, compute capacity, auto-scaling activity, and insufficient-capacity errors.
Parameters not published.
diagnose_poolA WorkSpaces Pool's health — state, pool errors, user-session capacity, backing directory health, session-utilization, and **live session count right now**.
Parameters not published.
diagnose_workspace_connectivityWhy a WorkSpaces Personal desktop may be unreachable — correlates WorkSpace state, connection status, directory health, and CloudWatch connection metrics into a ranked diagnosis.
Parameters not published.
export_inventory_report_csv**Full inventory to a local CSV** (no cap) for large estates / Excel — returns the file path and row count; reads AWS only, writes nothing anywhere but the local file (Tier 0).
Parameters not published.
Show all 30 tools
generate_euc_health_report**One-call estate health report** — inventory, firing alarms, 30-day cost + forecast + AutoStop savings, security posture, image/builder findings, and quota headroom collected concurrently, returned as structured sections **plus ready-to-send markdown** — ideal for scheduled/weekly reports (Tier 1 for the cost sections).
Parameters not published.
generate_inventory_reportDetailed per-resource inventory (desktops **with assigned user / computer name / IP / bundle name**, pools, fleets, **stacks + their associated fleets**, portals) with key attributes; optional `include_tags` adds resource tags. **Large-estate aware**: each section is capped (`max_resources_per_service`, default 100) with `total_count`/`truncated` markers, and a `services` filter narrows scope (Tier 0).
Parameters not published.
get_application_fleet_usageA WorkSpaces Applications fleet's **live sessions right now** (who is streaming, via DescribeSessions) plus AWS/AppStream capacity/utilization **history** over a window (Tier 0).
Parameters not published.
get_euc_account_postureAccount-level WorkSpaces configuration — **dedicated tenancy (BYOL)** status + management CIDR, recent account modifications, per-directory **client properties**, and **cross-region connection aliases** (Tier 0).
Parameters not published.
get_euc_active_alarms**CloudWatch alarms currently firing** on EUC resources (AWS/WorkSpaces, AWS/AppStream, AWS/WorkSpacesWeb namespaces) — metric, dimensions, reason, and since-when; auto-scaling policy alarms are flagged as expected rather than incidents (Tier 0).
Parameters not published.
get_euc_audit_trail**"Who changed what"** — recent EUC management events from CloudTrail (last 90 days, no trail required); mutations-only by default, flags destructive actions and errors (e.g. AccessDenied). Single-service queries also scan **curated mutation event names across the full window** (immune to account write-noise), and every response reports **honest window coverage** (`window_fully_covered` / `scanned_back_to`) (Tier 0).
Parameters not published.
get_euc_cost_forecast**Forecast upcoming EUC spend** via Cost Explorer's forecasting model — mean total + per-period values with an 80% prediction interval, filtered to the EUC services discovered in recent actual spend. Reports the recent vs trailing daily run-rate and **flags when a hot week (e.g. running image builders) is inflating the forecast** (Tier 1).
Parameters not published.
get_euc_cost_summaryEUC spend by service over a window (or an explicit `start_date`/`end_date` calendar month) via Cost Explorer, account-wide. Services are matched by keyword so naming variants (e.g. AppStream 2.0) aren't dropped. Cost Explorer bills WorkSpaces Personal/Pools/Core as one "Amazon WorkSpaces" line, so the tool **splits it into Personal / Pools / Core via USAGE_TYPE** (`workspaces_breakdown`); also returns a daily/monthly time series (`by_period`) for charts (Tier 1).
Parameters not published.
get_euc_inventory_summaryCross-service inventory for a region (incl. **WorkSpaces Core Managed Instances**): per-service counts by state, grand total, and any per-service collection errors.
Parameters not published.
get_euc_service_prices**Authoritative AWS list prices** for any EUC resource in a region (AWS Price List): Applications $/hr by instance type/function/**license model (BYOL-aware)**, Secure Browser $/monthly-active-user by tier, Core managed-instance fee SKUs (one per billing option), and Personal bundle rates — with a **near-miss listing of the storage pairings AWS does price** when the exact configuration has no SKU — so cost answers never come from model memory. Applications pricing includes the **On-Demand stopped-instance fee** and per-fleet-type billing guidance (Always-On bills 24/7; On-Demand bills only streaming hours + ~$0.025/hr idle), and accepts a **`fleet_name`** to auto-resolve instance type, capacity, and the platform from the fleet's image (**BYOL-aware** — catches Windows 10/11 fleets that the fleet API doesn't label) with idle/provisioned monthly estimates. Personal bundle pricing is **license-aware** (Windows 10/11 = BYOL; Amazon Linux/Ubuntu/RHEL/Rocky all resolve with their real license models), covers **every storage variant** (the suffixed variant bundles AWS hides them in) and all bundle families incl. Graphics/GeneralPurpose, and includes the **AutoStop-vs-AlwaysOn break-even hours/month**. Also prices **WorkSpaces Pools** (streaming $/hr Included vs BYOL + stopped fee + user fee) and surfaces the **Microsoft user fees** (RDS SAL) that Included-license Windows fleets add. The full empirical model of the Price List for EUC is documented in [`docs/pricing-api.md`](docs/pricing-api.md). Supports **multi-region comparison** in one call (`regions`), and every no-match/partial-match response lists the **valid alternatives AWS does price** (storage pairings, OS variants) instead of bare nulls (Tier 1).
Parameters not published.
get_euc_service_quotas**Service-quota limits + usage headroom** per EUC service; pairs limits with current usage (where AWS publishes a usage metric) to flag quotas approaching their limit — capacity planning (Tier 0).
Parameters not published.
get_pool_session_historyA WorkSpaces Pool's **live sessions right now** (who is connected) plus user-session capacity **history**; flags idle pool capacity (Tier 0).
Parameters not published.
get_secure_browser_portal_detailsResolves a Secure Browser portal's user settings (clipboard/print/download + timeouts), network, the **Chrome browser policy with per-policy values** (size-guarded; incl. URL allow/block lists, proxy, force-installed extensions), **IP access ranges**, **identity providers**, **session-logging status**, and the **data-protection redaction config** (Tier 0).
Parameters not published.
get_secure_browser_portal_usageA Secure Browser portal's **current active sessions** (live, via `ListSessions` — same as the console) plus **historic** `AWS/WorkSpacesWeb` metrics over a window (CloudWatch is historic-only; idle portals publish none) (Tier 0).
Parameters not published.
get_workspace_connection_historyA desktop's connection/session **history** (UserConnected + connection attempts/failures) over a window, with a summary (Tier 0).
Parameters not published.
get_workspace_performanceNative CPU / memory / disk / GPU / latency / uptime metrics per desktop from `AWS/WorkSpaces` — no CloudWatch agent (Tier 0).
Parameters not published.
list_unused_resourcesUnused WorkSpaces desktops and stopped/zero-capacity fleets worth reclaiming (Tier 0).
Parameters not published.
recommend_bundle_rightsizingSuggests smaller/larger compute types from CPU & memory headroom (general families; graphics excluded) (Tier 0).
Parameters not published.
recommend_running_modeFlags AlwaysOn desktops with low usage as AutoStop candidates, with an **estimated $/mo saving** where the bundle price can be matched (Tier 1).
Parameters not published.
review_application_access**Access review** for WorkSpaces Applications — user-pool users (status/enabled) and **which users are assigned to each stack** (SAML-federated users noted as IdP-managed) (Tier 0).
Parameters not published.
Ask AI
✦
Ask AI about workspaces-euc-mcp-server
Powered by Claude · Grounded in docs
I know everything about workspaces-euc-mcp-server. Ask me about installation, configuration, usage, or troubleshooting.
Security checks
6 checks have not been run yet.