Software
AWS Expands MCP Support for Amazon Bedrock AgentCore Gateway
AWS announced new capabilities for Amazon Bedrock AgentCore Gateway to enhance enterprise MCP deployments. The update supports dynamic listing, streaming, and OAuth 2.0 token exchange for secure, centralized access.
Image: AWS Machine Learning
AWS has announced new capabilities for Amazon Bedrock AgentCore Gateway to strengthen enterprise support for Model Context Protocol (MCP) deployments. The update introduces extended MCP tool schema support, MCP prompts and resources as first-class primitives, dynamic listing for runtime discovery of MCP servers, streaming and session management for stateful real-time interactions, elicitation for mid-execution input requests, and OAuth 2.0 on-behalf-of token exchange for delegated authentication. These enhancements aim to centralize credential management, observability, and secure connectivity into a single trusted entry point. For hands-on examples, developers can visit the GitHub samples repository. Without a centralized gateway, each MCP server must independently handle credentials, policy enforcement, and logging, leading to duplication and fragmented governance. AgentCore Gateway addresses this by acting as a single-entry point for MCP traffic, aggregating capabilities across different target types, including MCP servers, REST APIs, AWS Lambda functions, and more. Resource-based policies (RBP) and service control policies (SCPs) enable centralized governance, while AWS PrivateLink ensures network isolation within Amazon VPC boundaries. Integration with AgentCore Policy (Preview) provides agentic guardrails for deterministic policy enforcement. *Source: [awsml](https://aws.amazon.com/blogs/machine-learning/extending-mcp-support-for-amazon-bedrock-agentcore-gateway-2/)*
Key points
- AWS announced new capabilities for Amazon Bedrock AgentCore Gateway to enhance enterprise MCP deployments.
- The update supports dynamic listing, streaming, and OAuth 2.0 token exchange for secure, centralized access.
- AgentCore Gateway centralizes credential management, observability, and secure connectivity into a single trusted entry point.
- Resource-based policies (RBP) control who can invoke AgentCore Gateway, for example, restricting invocation to an Amazon Virtual Private Cloud (Amazon VPC).
- Service control policies (SCPs) govern how AgentCore Gateway is maintained within your AWS organization.
- AgentCore Gateway supports AWS PrivateLink for both control plane and data plane operations to ensure traffic stays within your Amazon VPC boundaries.
- Integration with AgentCore Policy (Preview) provides agentic guardrails for deterministic policy enforcement.