Sandbox Studio MCP Server

List all registered sandbox accounts with pagination. Results are paginated — if the response contains a nextPageIdentifier, inform the user that more results are available and offer to fetch the next page.

Import AWS accounts into the sandbox pool

Eject AWS accounts from the sandbox pool

List AWS accounts available in the organization but not yet registered in the sandbox pool. Results are paginated — if the response contains a nextPageIdentifier, inform the user that more results are available and offer to fetch the next page.

Get details of a specific sandbox account by AWS account ID

Get lease history for a specific sandbox account. Results are paginated — if the response contains a nextPageIdentifier, inform the user that more results are available and offer to fetch the next page.

Retry cleanup for a sandbox account that failed its previous cleanup attempt

Get cleanup logs for a specific sandbox account

Get resources that failed cleanup for a specific sandbox account

List pending lease approval requests. Results are paginated — if the response contains a nextPageIdentifier, inform the user that more results are available and offer to fetch the next page.

List sandbox events with optional status filtering. Results are paginated — if the response contains a nextPageIdentifier, inform the user that more results are available and offer to fetch the next page.

Create a new sandbox event with provisioned accounts and team assignments

Get details of a specific event

Update an existing event's configuration

Get teams for a specific event

Add teams to an event

Terminate an event and all its associated leases

Start a provisioned event, granting access to teams

Provision accounts for an event

Assign an owner to a team within an event

Get lease cost reporting data with optional grouping and filtering

Trigger an on-demand drift detection job across sandbox accounts

Trigger an on-demand lease monitoring job to check budgets and durations

List leases with optional filtering by status, user, date, and pagination. Results are paginated — if the response contains a nextPageIdentifier, inform the user that more results are available and offer to fetch the next page.

Get details of a specific lease by ID

Request a new lease from a template. May require approval depending on template configuration.

Update an existing lease's budget, duration, or expiration settings

Suspend an active lease

Resume a suspended lease

Approve or deny a pending lease request

Terminate an active lease and begin cleanup. ⚠️ WARNING: When terminating multiple leases, ALWAYS confirm with the user: - Clearly list which leases will be terminated (showing owner name, template name, and lease ID) - Distinguish between the user's OWN leases and OTHER users' leases - If the requ…

Withdraw a pending lease request before it is approved

Get the team members who have access to a shared lease

Share a lease with additional users

Remove users from a shared lease

Get the setup/activity logs for a lease

Get the build output secrets (credentials) for a lease

Get the account cleanup (nuke) configuration

Update the account cleanup (nuke) configuration

Get a cleanup hook script by type

Update a cleanup hook script

Get email notification template settings

Update email notification template settings

Send a test email to verify email/SMTP configuration

Get SMTP configuration for outbound email

Update SMTP configuration for outbound email

Get platform-wide global configuration

Update platform-wide global configuration. IMPORTANT: When updating lease settings: - If changing 'maxBudget', ask the user if they also want to enable 'requireMaxBudget' (which forces all templates to have a budget set). Otherwise the max budget only acts as an upper cap for templates that already…

Get the runtime configuration for the current Sandbox Studio deployment

List public account templates available for lease requests. Results are paginated — if the response contains a nextPageIdentifier, inform the user that more results are available and offer to fetch the next page.

Get full details of an account template by ID

Get basic details (name, description, icon, colour) of a template

List templates managed by the current user. Results are paginated — if the response contains a nextPageIdentifier, inform the user that more results are available and offer to fetch the next page.

Create a new account template. Before creating a template, ask the user if they would like to: - Add tags for categorisation (e.g., "ai", "development", "training", "data-science") - Set a custom icon and colour - Specify who should manage or approve leases When providing a launchSetupScript or la…

Delete an account template

Update basic details of a template (name, description, icon, colour)

Get leases associated with a template. Results are paginated — if the response contains a nextPageIdentifier, inform the user that more results are available and offer to fetch the next page.

Get the IAM permission configuration for a template

Update the IAM permission configuration for a template

Get launch/setup settings for a template

Update launch/setup settings for a template. IMPORTANT: When writing launch setup scripts or run scripts, use 'set-sandbox-output' to expose variables to the lease owner instead of using 'echo'. This command registers outputs in the Sandbox Studio UI. Usage: set-sandbox-output --name <name> --va…

Update budget settings for a template

Update duration settings for a template

Update managers and approval settings for a template

Update sharing settings for a template

Update tags for a template. Tags are key-value pairs with a name and value.

List users from the connected identity provider. Results are paginated — if the response contains a nextPageIdentifier, inform the user that more results are available and offer to fetch the next page.

List groups from the connected identity provider. Results are paginated — if the response contains a nextPageIdentifier, inform the user that more results are available and offer to fetch the next page.

Validate that user IDs exist in the identity provider

Update the current user's preferences

List all OAuth API clients (admin endpoint)

List OAuth API clients owned by the current user

Create a new OAuth API client for machine-to-machine integrations

Delete an OAuth API client

Update an OAuth API client's description

Get the latest published terms of service

List all published terms of service versions

Get a specific terms of service version

Publish a new terms of service version

Get all unique tags defined across account templates

Validate that an S3 path exists and is accessible