MCP OAuth on AgentCore Gateway + Cognito via APIGW Façade
May 19, 2026 · 18 min read · MCP Model Context Protocol AWS Bedrock AgentCore AgentCore Gateway Amazon Cognito API Gateway SST OAuth 2.1 RFC 9728 RFC 8414 RFC 7591 PKCE Claude Code ·
Introduction Amazon Bedrock AgentCore Gateway is the most pragmatic way to host a Model Context Protocol server on AWS today. Declare your tools as OpenAPI or as Lambda targets, get a managed multi-target MCP endpoint, and inherit AWS-native authentication via a customJwtAuthorizer. For machine-to-machine traffic that …
Read More about MCP OAuth on AgentCore Gateway + Cognito via APIGW FaçadeImplementing MCP OAuth 2.1 with Keycloak on AWS
Nov 21, 2025 · 25 min read · Keycloak MCP Model Context Protocol OAuth 2.1 RFC 8707 Dynamic Client Registration PKCE AWS Terraform Identity Provider ·
Introduction The Model Context Protocol (MCP) ecosystem mandates OAuth 2.1-compliant authorization servers to facilitate secure, federated access to AI model services. MCP clients, such as Claude Code, Cursor, and VS Code extensions, rely on modern OAuth specifications including Dynamic Client Registration (RFC 7591), …
Read More about Implementing MCP OAuth 2.1 with Keycloak on AWS