Mercek is a desktop app for working with Amazon ECS. It uses the AWS credentials already on your machine and shows your services across every account and region. It talks to AWS directly and collects no telemetry.
Uses your existing ~/.aws profiles. Read-only until you approve a change.
Talks to AWS directly. Nothing runs inside your account.
Mercek reads the profiles in your ~/.aws config, including SSO, assume-role, and MFA setups. Pick the accounts and regions you want to work with and it lists their clusters, services, and tasks in a single tree. Accounts you don't pick are never read.
Mercek shows the current rollout state, the deployment circuit breaker, and how many tasks have failed. If a deploy goes wrong, you can roll back to an earlier task definition from the same screen. You can also compare a service to the same one in another environment.
CPU and memory come from Container Insights, with a fallback to AWS/ECS metrics when Insights is turned off. For load-balanced services you also get request count, latency, and 5xx, on the same screen as the service.
Mercek estimates the monthly Fargate cost of a service from its requested CPU and memory and how many tasks it runs. It compares that against peak usage and tells you whether the service looks over- or under-provisioned.
Open a service to tail its latest task's CloudWatch logs in the bottom panel. You can also read a task's full environment, with secrets shown as ARNs instead of values, and its network details: the ENI, IP addresses, security groups, subnet, and VPC.
Mercek builds a dependency graph from data that's already in AWS. It maps the path from the internet through your load balancer to each service, and it infers links between services from the environment variables in their task definitions.
You can connect a coding agent such as Claude Code through the Agent Client Protocol. It can read your ECS state, explain what it finds, and open screens in the app. It cannot change anything in AWS. If it suggests a change, Mercek shows that change as a diff for you to approve.
While Mercek is open, it checks your services in the background and raises an observation when something looks off. You can hand any observation to the agent to look into it. There's nothing to set up.
Smaller things that keep you out of the AWS console.
Open any cluster, service, or task from the keyboard with ⌘K.
Scaling, deploys, and stops show what will change before they run.
Healthy, unhealthy, and draining targets per service.
Scalable targets, policies, and capacity providers in one place.
Diff a service against the same one in another account or region.
Saved table columns and CSV export come along too.
Mercek is a desktop app, not a hosted service. It connects to AWS from your computer with credentials you already have, so there's no extra system that needs access to your account.
Mercek calls AWS from your machine. There's no backend that sees your data.
It has no analytics and doesn't phone home. It connects to AWS and nothing else.
Credentials come from your existing chain. Resolved secrets show as ARNs and aren't written to disk.
Mercek runs on macOS, on both Apple Silicon and Intel. Download it, open it, choose the AWS profiles you want, and your clusters show up.
Uses the AWS credentials already in your ~/.aws config.
Mercek is open source. View it on GitHub →
They stay on your machine. Mercek uses the same ~/.aws profiles and SSO sessions as the AWS CLI. There's no account to create and no server in between, and Mercek doesn't write your credentials or resolved secrets to disk.
Only when you ask, and only after you confirm. Reading is automatic. Any write, like scaling, deploying, stopping a task, or updating a service, shows you a diff first and waits for your approval.
You connect your own coding agent, such as Claude Code. It can read your ECS state, explain it, and open screens in the app. It cannot change anything in AWS. If it suggests a change, that change opens the same diff dialog you'd use by hand, so you decide whether to apply it.
No. It has no telemetry and no analytics. The only thing it connects to is AWS.
macOS for now. Linux and Windows are planned.