Integration

AWS Cognito integration

AWS Cognito User Pools API for user authentication and management. Create and manage user pools, handle user sign-up/sign-in, manage user attributes, configure MFA, and administer user accounts for secure application authentication.

Connect AWS Cognito How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in AWS Cognito.Built from the 40 AWS Cognito tools below, on the connection you add once.

Common AWS Cognito use cases

Revoke admin access
Remove obsolete groups
Enable MFA on a user pool
Remove departed employees
Search for users by email
Restore suspended accounts
Update user email or phone
View all permission groups
Grant admin access to a user
Look up user account details

What you can do with AWS Cognito

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

User, 17 operations

admin_confirm_sign_upAdmin confirm sign upPOSTConfirms a user's sign-up without a confirmation code.
admin_create_userAdmin create userPOSTCreates a new user in the user pool as an administrator.
admin_delete_userAdmin delete userPOSTPermanently deletes a user from the user pool.
admin_disable_userAdmin disable userPOSTDisables a user account in the user pool.
admin_enable_userAdmin enable userPOSTRe-enables a disabled user account.
admin_get_userAdmin get userPOSTRetrieves detailed information about a specific user.
admin_reset_user_passwordAdmin reset user passwordPOSTResets a user's password and sends a confirmation code.
admin_set_user_passwordAdmin set user passwordPOSTSets a user's password directly as an administrator.
admin_update_user_attributesAdmin update user attributesPOSTUpdates attributes for a user in the user pool.
change_passwordChange passwordPOSTChange the password of the currently authenticated user by providing the old and new passwords.
confirm_forgot_passwordConfirm forgot passwordPOSTComplete the forgot password flow by confirming the reset code and setting a new password.
confirm_sign_upConfirm sign upPOSTConfirm a newly registered user with the verification code sent to their email or phone.
forgot_passwordForgot passwordPOSTInitiate the forgot password flow, sending a reset code to the user's email or phone.
get_userGet userPOSTGet the profile and MFA settings of the currently authenticated user via their access token.
list_usersList usersPOSTLists users in a user pool with optional filtering.
list_users_in_groupList users in groupPOSTList all users who are members of a specific group.
sign_upSign upPOSTRegister a new user in the user pool using username, password, and optional attributes.

Auth, 6 operations

admin_initiate_authAdmin initiate authPOSTInitiates an admin authentication flow for a user.
admin_user_global_sign_outAdmin user global sign outPOSTAdministratively sign out a user from all devices, revoking all their tokens.
global_sign_outGlobal sign outPOSTSign out the currently authenticated user from all devices by revoking all tokens.
initiate_authInitiate authPOSTInitiate a client-side user authentication flow (password, SRP, or refresh token).
respond_to_auth_challengeRespond to auth challengePOSTRespond to an authentication challenge such as MFA or new password requirement.
revoke_tokenRevoke tokenPOSTRevoke a refresh token and all access tokens generated from it.

Group, 6 operations

admin_add_user_to_groupAdmin add user to groupPOSTAdds a user to a group in the user pool.
admin_list_groups_for_userAdmin list groups for userPOSTLists all groups that a user belongs to.
admin_remove_user_from_groupAdmin remove user from groupPOSTRemoves a user from a group in the user pool.
create_groupCreate groupPOSTCreates a new group in the user pool.
delete_groupDelete groupPOSTDeletes a group from the user pool.
list_groupsList groupsPOSTLists all groups in the user pool.

User pool, 5 operations

create_user_poolCreate user poolPOSTCreates a new Cognito user pool with specified settings.
delete_user_poolDelete user poolPOSTPermanently deletes a Cognito user pool.
describe_user_poolDescribe user poolPOSTRetrieves detailed configuration of a user pool.
list_user_poolsList user poolsPOSTLists all user pools in the AWS account.
update_user_poolUpdate user poolPOSTUpdates the configuration of an existing user pool.

User pool client, 5 operations

create_user_pool_clientCreate user pool clientPOSTCreates an app client for a user pool.
delete_user_pool_clientDelete user pool clientPOSTDelete an app client from the user pool, revoking its ability to authenticate.
describe_user_pool_clientDescribe user pool clientPOSTRetrieves configuration details for a user pool app client.
list_user_pool_clientsList user pool clientsPOSTLists all app clients for a user pool.
update_user_pool_clientUpdate user pool clientPOSTUpdate the configuration of an existing user pool app client.

User pool domain, 1 operation

create_user_pool_domainCreate user pool domainPOSTCreate a hosted UI domain for the user pool to enable OAuth2/OIDC login pages.

Use AWS Cognito from Claude Code, Cursor or Codex

Connect AWS Cognito in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its AWS Cognito operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect AWS Cognito

Create your workspace
Sign up free. Nothing to install.
Connect AWS Cognito once
Add your AWS Cognito connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.

AWS Cognito integration FAQ

What can you do with the AWS Cognito integration?

LiveContext exposes 40 operations on AWS Cognito, covering user, auth, group and user pool. Common uses include Revoke admin access, Remove obsolete groups and Enable MFA on a user pool.