Why limit the agent to a single Log Group?

To enforce zero-trust architecture. An autonomous agent debugging a specific lambda function shouldn't have access to your organization's central VPC Flow Logs or RDS audit logs.

Can the agent delete logs?

No. This tool provides strict read-only access using only the `FilterLogEvents` API.

What is a filter pattern?

It's a syntax provided by AWS CloudWatch to search for specific terms or JSON properties. For example, 'ERROR' will return only lines containing the word ERROR.

Amazon CloudWatch Log Group MCP Connector for Claude

A+

This MCP does exactly one thing: it queries logs from a single CloudWatch Log Group. That's its only function, and nothing else. Incredible for giving your AI secure observability.

1 tools Official Updated Oct 1, 2026 Official Vinkius Partner

More Details Connect to Claude

This server strips away dangerous global AWS permissions. It gives your AI agent one surgical superpower: the ability to run Insights queries on one specific CloudWatch Log Group.

By strictly scoping access, your AI can safely troubleshoot application errors, analyze traffic spikes, and monitor infrastructure without ever gaining access to sensitive audit trails in other log groups.

The Superpowers

Absolute Containment: The agent is locked to a single log group. It cannot search across all AWS logs.
Native Insights Querying: Supports full CloudWatch Insights syntax, allowing the AI to filter, parse JSON, and aggregate log data.
Plug & Play Troubleshooting: Instantly gives your agent the eyes and ears it needs to debug production issues autonomously.

awscloud-logginginfrastructure-monitoringlog-analysissecurity-scopingdevops

Connect to Claude

Subscribe on Vinkius, then add this connector to Claude.ai or Claude Code.

① Claude.ai (web app)

Go to Settings → Connectors → Add custom connector
Paste the MCP endpoint URL below

https://edge.vinkius.com/vk_preview_BfV9nj0spaNXUtgeLPe1LJiwTfYsjgKtxLFUXKh7/mcp

② Claude Code (terminal)

claude mcp add --transport http amazon-cloudwatch-log-group https://edge.vinkius.com/vk_preview_BfV9nj0spaNXUtgeLPe1LJiwTfYsjgKtxLFUXKh7/mcp

③ Claude Desktop

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "amazon-cloudwatch-log-group": {
      "url": "https://edge.vinkius.com/vk_preview_BfV9nj0spaNXUtgeLPe1LJiwTfYsjgKtxLFUXKh7/mcp"
    }
  }
}

Get full access on Vinkius

The preview token above works for testing. Powered by Vinkius.