MCP

Give your agent AWS tools

Every AWS action is exposed as an MCP tool on Pipedream's remote server. Point a client at it with your end user's ID and Connect resolves that user's AWS account for each tool call — you store no tokens.

Pipedream Connect

// accessToken: mint a short-lived token with the Connect SDK — see the MCP guide
const transport = new StreamableHTTPClientTransport(
  new URL("https://remote.mcp.pipedream.net/v3"),
  {
    requestInit: {
      headers: {
        Authorization: `Bearer ${accessToken}`,
        "x-pd-project-id": "{project_id}",
        "x-pd-environment": "production",
        "x-pd-external-user-id": "{external_user_id}", // any stable ID for this user in your system
        "x-pd-app-slug": "aws",
      },
    },
  },
)

const mcp = new Client({ name: "my-agent", version: "1.0.0" })
await mcp.connect(transport)

const { tools } = await mcp.listTools()

// e.g. run CloudWatch Logs - Put Log Event:
const result = await mcp.callTool({
  name: "aws-cloudwatch-logs-put-log-event",
  arguments: {
    region: "AWS Region",
    logGroupName: "CloudWatch Log Groups",
  },
})

# access_token: mint a short-lived token with the Connect SDK — see the MCP guide
headers = {
    "Authorization": f"Bearer {access_token}",
    "x-pd-project-id": "{project_id}",
    "x-pd-environment": "production",
    "x-pd-external-user-id": "{external_user_id}",  # any stable ID for this user in your system
    "x-pd-app-slug": "aws",
}

async with streamablehttp_client("https://remote.mcp.pipedream.net/v3", headers=headers) as (read, write, _):
    async with ClientSession(read, write) as session:
        await session.initialize()
        tools = await session.list_tools()

        # e.g. run CloudWatch Logs - Put Log Event:
        result = await session.call_tool("aws-cloudwatch-logs-put-log-event", {
            "region": "AWS Region",
            "logGroupName": "CloudWatch Log Groups",
        })

MCP guide →

SDK

Run AWS actions from your backend

Connect a user's AWS account once, then run CloudWatch Logs - Put Log Event on their behalf from your own code — TypeScript, Python, or plain HTTP.

Pipedream Connect

import { PipedreamClient } from "@pipedream/sdk"

const pd = new PipedreamClient({
  projectId: process.env.PIPEDREAM_PROJECT_ID!,
  clientId: process.env.PIPEDREAM_CLIENT_ID!,
  clientSecret: process.env.PIPEDREAM_CLIENT_SECRET!,
  projectEnvironment: "production",
})

const result = await pd.actions.run({
  id: "aws-cloudwatch-logs-put-log-event",
  externalUserId: "{external_user_id}", // any stable ID for this user in your system
  configuredProps: {
    aws: { authProvisionId: "apn_xxxxxxx" },
    region: "AWS Region",
    logGroupName: "CloudWatch Log Groups",
  },
})

from pipedream import Pipedream

pd = Pipedream(
    client_id="{oauth_client_id}",
    client_secret="{oauth_client_secret}",
    project_id="{project_id}",
    project_environment="production",
)

result = pd.actions.run(
    id="aws-cloudwatch-logs-put-log-event",
    external_user_id="{external_user_id}",  # any stable ID for this user in your system
    configured_props={
        "aws": {"authProvisionId": "apn_xxxxxxx"},
        "region": "AWS Region",
        "logGroupName": "CloudWatch Log Groups",
    },
)

curl -X POST https://api.pipedream.com/v1/connect/{project_id}/actions/run \
  -H "Content-Type: application/json" \
  -H "X-PD-Environment: production" \
  -H "Authorization: Bearer {access_token}" \
  -d '{
    "external_user_id": "{external_user_id}",
    "id": "aws-cloudwatch-logs-put-log-event",
    "configured_props": {
      "aws": { "authProvisionId": "apn_xxxxxxx" },
      "region": "AWS Region",
      "logGroupName": "CloudWatch Log Groups"
    }
  }'