MCP server for managing AWS VPC Lattice resources and providing source documentation with prompt templates
Server has 5 tools with explicit schemas and descriptions, but quality is inconsistent. Four tools (list_sources, get_source_prompts, list_amazon_vpc_lattice_prompts, get_amazon_vpc_lattice_prompts) are simple metadata/discovery tools with minimal descriptions (34-50 chars, below the 50-200 char LLM-optimized baseline). The critical vpc_lattice_cli tool accepts arbitrary AWS CLI commands via enum constraint, but lacks parameter descriptions for 'args' (generic 'Command arguments as key-value pairs' is insufficient), missing guidance on format, validation, or error recovery. No output schemas documented. Error handling exists but is minimal, McpError responses lack recovery guidance. Tool naming follows verb_noun convention (good), but descriptions are too terse to guide LLM selection effectively.
Get details of a specific prompt template
Get sample prompts for a specific source
List all available prompt templates
List all available sources with their URLs and sample prompts
Execute AWS CLI VPC Lattice commands
Metadata tool descriptions are too terse (34-50 chars vs 50-200 baseline). LLMs cannot distinguish when to call list_sources vs get_source_prompts, or list_amazon_vpc_lattice_prompts vs get_amazon_vpc_lattice_prompts without richer context.
vpc_lattice_cli 'args' parameter lacks actionable description. Current text 'Command arguments as key-value pairs' does not explain format (camelCase vs kebab-case conversion), validation rules, or which arguments are required vs optional for each command.
No output schemas documented for any tool. LLMs cannot plan downstream calls or extract required fields (e.g., source URLs, prompt templates, AWS CLI JSON response structure).
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | C | 60 | 2026-07-28+ | v2 |
Error messages lack recovery guidance. McpError responses (e.g., 'Source not found: X', 'AWS CLI command failed: Y') do not suggest next steps or available alternatives.
vpc_lattice_cli accepts arbitrary 'args' object with additionalProperties:true, enabling command injection risk. No input sanitization visible for camelCase-to-kebab-case conversion or shell escaping.