Skip to main content
For an MCP server on AWS, such as one hosted on Amazon Bedrock AgentCore, the gateway signs each request with AWS Signature Version 4. Signing applies to MCP servers, not to APIs added as tools.

Settings

The server’s auth names the region, and optionally the service and credentials:
  • region is the AWS region to sign for.
  • service is the service to sign for, bedrock-agentcore unless set.
  • access_key_id and secret_access_key, with an optional session_token, are AWS keys. role_name is the ARN of a role for the gateway to assume instead.