shonindocs

Use AWS

AI agents

Connect Claude Code, Kiro, Codex, Cursor and other MCP clients to Shonin. The agent signs in as you and can do what you can do in the portal, nothing more. It never gets AWS credentials, console links or codes.

#Add Shonin to your agent

The address is your Shonin org followed by /mcp:

https://<your Shonin org>.app.shonin.ai/mcp

In Claude Code:

claude mcp add --transport http shonin https://<your Shonin org>.app.shonin.ai/mcp

In other agents, add a remote MCP server (HTTP) with the same address.

The agent opens your browser. Sign in to Shonin with your second factor, check the agent and where it goes back, then choose Allow. The connection lasts 8 hours.

#What the agent can do

  • Everyone: read your AWS access (accounts and permission sets assigned to you), and get the shonin login command for one of them. You run the command yourself: see Command line and SDKs.
  • Administrators: manage people, groups, permission sets, assignments and delegations, as in the portal and the Assistant. These tools are off until a primary admin turns on Let administrators manage the Shonin org from AI agents in Org settings, panel AI agents.

Shonin does not use AI for these tools: the AI is the one of your agent.

#Disconnect an agent

In Personal settings, panel AI agents, choose Disconnect next to the agent. Its access ends at once.

#Event log

Connections, disconnections and every change an agent makes are in the Event log, with the agent that made them. Changes Shonin refused (for example after too many in one hour) are there too.

View as Markdown