Skip to main content

DynamoDB Integration

To connect MCP Express to Amazon DynamoDB, configure authentication, target table scope, and execution defaults before tool provisioning. This handshake verifies access and prepares metadata required for reliable request orchestration.

Connection Parameters

Configure the following fields using a dedicated IAM principal with only required DynamoDB actions and table scope.

ParameterTechnical DescriptionRequired
Table NamePrimary DynamoDB table bound to this integration instance.Yes
AWS Access Key IDAccess key identifier when static IAM credentials are used.Conditional
AWS Secret Access KeySecret key paired with the access key ID for signed requests.Conditional
AWS RegionAWS Region where the target DynamoDB table is hosted.Yes

Integration connection form

IAM Scope Requirements

Grant only dynamodb:GetItem and dynamodb:PutItem on approved tables unless broader operations are explicitly required. Avoid wildcard permissions on table resources and actions.

Prefer Role-Based Authentication

When running in cloud environments, use role-based credentials and secret managers instead of long-lived static keys.

Handshake & Capability Discovery

After connection is submitted, MCP Express executes a validation and preparation flow:

  • Credential Validation: Verifies AWS signing and confirms the principal can reach DynamoDB APIs in the selected region.
  • Table Access Check: Validates configured table scope and operation permissions for the integration principal.
  • Tool Schema Preparation: Initializes request/response mappings used by generated MCP tools for LLM execution.