Amazon Fast helps Mannequin Context Protocol (MCP) integrations for motion execution, knowledge entry, and AI agent integration. You possibly can expose your software’s capabilities as MCP instruments by internet hosting your individual MCP server and configuring an MCP integration in Amazon Fast. Amazon Fast acts as an MCP shopper and connects to your MCP server endpoint to entry the instruments you expose. After that connection is in place, Amazon Fast AI brokers and automations can invoke your instruments to retrieve knowledge and run actions in your product, utilizing the client’s authentication, authorization, and governance controls.
With an Amazon Fast and MCP integration you possibly can construct a repeatable integration contract: you outline instruments as soon as, publish a secure endpoint, and help the identical mannequin throughout prospects. You possibly can construct AI brokers and automations in Amazon Fast to research knowledge, search enterprise information, and run workflows throughout their enterprise. Your prospects get a manner to make use of your product inside Amazon Fast workflows, with out constructing customized connectors for each use case.
On this put up, you’ll use a six-step guidelines to construct a brand new MCP server or validate and modify an present MCP server for Amazon Fast integration. The Amazon Fast Consumer Information describes the MCP shopper conduct and constraints. This can be a “The way to” information for detailed implementation required by 3P companions to combine with Amazon Fast with MCP.
Answer overview
Amazon Fast contains an MCP shopper that you simply configure by way of an integration. That integration connects to a distant MCP server, discovers the instruments and knowledge sources the server exposes, and makes them obtainable to AI brokers and automations. MCP integrations in Amazon Fast help each motion execution and knowledge entry, together with information base creation.
Determine 1. exhibits how prospects use Amazon Fast to invoke software capabilities, uncovered as MCP instruments by ISVs, enterprise methods, or customized options by way of an MCP integration.
Determine 1. Amazon Fast MCP integration with an exterior MCP server that exposes software capabilities as MCP instruments.
Stipulations
- An Amazon Fast Skilled subscription.
- An Amazon Fast person with Creator or increased permissions to create motion connectors.
- A distant MCP server endpoint that’s reachable from the Amazon Fast.
- An authentication method that your MCP server helps person authentication, service authentication or no authentication.
- A small preliminary set of product capabilities as APIs to be uncovered as MCP instruments (begin with the operations your prospects use most).
Guidelines for Amazon Fast MCP integration readiness
Now let’s stroll by way of the 6 steps course of construct the combination with Amazon Fast utilizing MCP
- Step 1: Select your MCP server deployment mannequin.
- Step 2: Implement a distant MCP server appropriate with Amazon Fast.
- Step 3: Implement authentication and authorization.
- Step 4: Doc configuration for Amazon Fast prospects
- Step 5: Register the MCP integration in Amazon Fast.
- Step 6: Take a look at your actions and setup utilizing out-of-the-box take a look at motion APIs software in Amazon Fast.
Use the next steps to both construct an MCP server for Amazon Fast or validate an present server earlier than prospects join it. Steps 1–4 cowl server design, implementation, and documentation. Step 5 covers the Amazon Fast integration workflow prospects run. Step 6 covers operations.
Step 1: Select your MCP server deployment mannequin
Resolve how you’ll host your MCP endpoint and isolate tenants. Two frequent patterns work properly:
- Shared multi-tenant endpoint: One MCP endpoint serves a number of prospects. Your authentication and authorization layer maps every request to a tenant and person, and enforces tenant isolation on each software name.
- Devoted per-tenant endpoint: Every buyer will get a novel MCP endpoint or server occasion. You provision and function a secure URL and credentials for every tenant.
Select the mannequin that matches your SaaS structure and help mannequin. When you already run a multi-tenant API tier with tenant-aware authorization, a shared MCP endpoint matches. When you want stronger isolation boundaries or separate compliance controls, devoted endpoints scale back impression.
Step 2: Implement a distant MCP server appropriate with Amazon Fast
Your MCP server should conform to the MCP specification and align with Amazon Fast shopper constraints. Give attention to transport, software definitions, and operational limits.
Transport and connectivity necessities:
- Expose your MCP server over a public endpoint that’s reachable from Amazon Fast. Use HTTPS for manufacturing.
- Help a distant transport. Amazon Fast helps Server-Despatched Occasions (SSE) and streamable HTTP. HTTP streaming is most popular.
Instrument and useful resource necessities:
- Outline MCP instruments utilizing JSON schema so the Amazon Fast MCP shopper can uncover them and invoke them by way of
listToolsandcallTool. - Preserve software names constant and model software conduct deliberately. Amazon Fast treats the software checklist as static after registration; directors should reestablish the connection for the server facet to replicate the adjustments.
- In case your integration contains knowledge entry, expose knowledge sources and assets in order that Amazon Fast can use the sources to create information bases.
Amazon Fast MCP shopper limitations:
As of immediately, you will need to think about the next once you design.
- Every MCP operation has a set 300-second timeout. Operations that exceed this restrict fail with HTTP 424.
- Connector creation can fail if the Amazon Fast callback URI is just not allow-listed by your identification supplier or authorization server. See Step 3 for name again URIs particulars.
In case your functions and repair suppliers don’t have an MCP server, you possibly can:
For an end-to-end Amazon Fast instance that makes use of AgentCore Gateway because the MCP server endpoint, consult with Join Amazon Fast to enterprise apps and brokers with MCP. Equally consult with Construct your Customized MCP Server on Agentcore Runtime for a Code Pattern.
Step 3: Implement authentication and authorization
Amazon Fast MCP integrations help a number of authentication patterns. Select the sample that matches how your prospects need Amazon Fast to entry your product, then implement authorization on each software invocation.
Consumer authentication:
- Use OAuth 2.0 authorization code stream when Amazon Fast must act on behalf of particular person customers.
- Help OAuth Dynamic Shopper Registration (DCR) in order for you Amazon Fast to register the shopper mechanically. If you don’t help DCR, doc the shopper ID, shopper secret, token URL, authorization URL, and redirect URL that prospects should enter throughout integration setup.
- Situation entry tokens scoped to tenant and person, and implement user-level role-based entry management (RBAC) for each software name.
Service authentication (service-to-service):
- Use service-to-service authentication when Amazon Fast ought to name your MCP server as a machine shopper (for instance, shared service accounts or backend automation).
- Validate client-credential tokens on each request and implement tenant-scoped entry.
No authentication:
- Use no authentication just for public or demo MCP servers. For instance, the AWS Information MCP Server doesn’t require authentication (however it’s topic to fee limits).
When you entrance your instruments with Amazon Bedrock AgentCore Gateway, Gateway validates inbound requests utilizing OAuth-based authorization aligned with the MCP authorization specification. Gateway capabilities as an OAuth useful resource server and may work with identification suppliers comparable to Amazon Cognito, Okta, or Auth0. Gateway additionally helps outbound authentication to downstream APIs and safe credential storage. On this sample, Amazon Fast authenticates to the Gateway utilizing the authentication methodology you configure (for instance, service-to-service OAuth), and Gateway authenticates to your downstream APIs.
Allowlist necessities for OAuth redirects (required for some IdPs) Some identification suppliers block OAuth redirects except the redirect URI is explicitly allowlisted within the OAuth shopper configuration. In case your OAuth setup fails throughout integration creation, verify that your OAuth shopper app allowlists the Amazon Fast redirect URI for every AWS Area the place your prospects use Amazon Fast.
https://us-east-1.quicksight.aws.amazon.com/sn/oauthcallbackhttps://us-west-2.quicksight.aws.amazon.com/sn/oauthcallbackhttps://ap-southeast-2.quicksight.aws.amazon.com/sn/oauthcallbackhttps://eu-west-1.quicksight.aws.amazon.com/sn/oauthcallbackhttps://us-east-1-onebox.quicksight.aws.amazon.com/sn/oauthcallbackhttps://us-west-2-onebox.quicksight.aws.amazon.com/sn/oauthcallbackhttps://ap-southeast-2-onebox.quicksight.aws.amazon.com/sn/oauthcallbackhttps://eu-west-1-onebox.quicksight.aws.amazon.com/sn/oauthcallback
Step 4: Doc configuration for Amazon Fast prospects
Earlier than connecting to Amazon Fast, confirm your server’s baseline compatibility utilizing the MCP Inspector. This normal developer software acts as a generic MCP shopper, so you possibly can take a look at connectivity, browse your software catalog, and simulate software execution in a managed sandbox. In case your server works with the Inspector, it’s protocol-compliant and prepared for Amazon Fast integration.
Your integration succeeds once you’re capable of authenticate into your MCP Server and take a look at your actions utilizing the Take a look at APIs part and you’ll invoke these instruments by way of Chat Brokers and automations.
Add a Amazon Fast integration part to your product documentation that covers:
- MCP server endpoint: the precise URL prospects enter within the Amazon Fast MCP server endpoint discipline.
- Authentication methodology: Which Amazon Fast possibility to decide on (person authentication or service authentication or No Authentication), plus the fields and values required.
- OAuth particulars (if used): Required scopes, roles, and any conditions comparable to enable itemizing the Amazon Fast callback URI.
- Community and safety notes: Any allow-list necessities, knowledge residency constraints, or compliance implications.
- Instrument catalog: The instruments you expose, what every software does, required permissions, and error conduct.
Step 5: Register the MCP integration in Amazon Fast
After your server is prepared, your buyer can create an MCP integration within the Amazon Fast console. This process relies on Arrange MCP integration within the Amazon Fast Consumer Information.
- Register to the Amazon Fast console with a person that has Creator permissions or increased.
- Select Integrations.
- Select Add (+), after which select Mannequin Context Protocol (MCP).
- On the Create integration web page, enter a Title, an optionally available Description, and your MCP server endpoint URL. Select Subsequent.
- Choose the authentication methodology your server helps (person authentication or service authentication), after which enter the required configuration values. In case your MCP Server helps DCR, you may be skip the Authentication step and the shopper credentials change occurs throughout the sign-in step.
- Select Create and proceed. Assessment the found instruments and knowledge capabilities out of your MCP server, after which select Subsequent.
- If you would like different customers to make use of the combination, share it. When you’re completed, select Performed.
Amazon Fast doesn’t ballot for schema adjustments. When you modify software signatures or add new capabilities, you will need to advise your prospects to re-authenticate or refresh their integration settings to allow these updates.
Step 6: Function, monitor, and meter your MCP server
Deal with your MCP server as manufacturing API floor space. Add the operational controls you already use on your SaaS APIs, and make them tenant-aware.
- Logging and observability: Log every software invocation with tenant identifier, person identifier (when obtainable), software title, latency, standing, and error particulars.
- Throttling and quotas: Implement per-tenant fee limits to guard downstream methods and return clear throttling errors.
- Versioning: Coordinate software adjustments along with your documentation and your prospects’ refresh workflow. Deal with software names and schemas as a contract.
- Safety operations: Help credential rotation, token revocation, and audit trails for administrative actions.
- Metering (optionally available): Report utilization per tenant (for instance, software calls or knowledge quantity) to align along with your SaaS pricing or AWS Market metering.
Clear up
When you created a Amazon Fast MCP integration for testing, delete it once you now not want it.
To delete an integration, observe Integration workflows within the Amazon Fast Consumer Information. The high-level steps are:
- Within the Amazon Fast console, select Integrations.
- From the integrations desk, choose the combination you wish to take away.
- From the Actions menu (three-dot menu), select Delete integration.
- Within the affirmation dialog, overview the combination particulars and any dependent assets that might be affected.
- Select Delete to verify removing.
When you used OAuth for the combination, additionally revoke the Amazon Fast shopper in your authorization server and delete any take a look at credentials you created.
Conclusion
Amazon Fast MCP integrations give your prospects an ordinary approach to join AI brokers and automations to your product. While you expose your capabilities as MCP instruments on a distant MCP server, prospects can configure the connection within the Amazon Fast console and use your instruments throughout a number of workflows.
Begin with a small set of high-value instruments, design every software name to finish throughout the 300-second restrict, and doc the precise endpoint and authentication settings prospects should use. After you validate the combination workflow in Amazon Fast , increase your software catalog and add the operational controls you employ for any manufacturing API.
For subsequent steps, overview the Amazon Fast MCP documentation, then use the guidelines on this put up to validate your server. If you would like AWS choices to construct and host MCP servers, consult with the AgentCore documentation and Deploying mannequin context protocol servers on AWS.
Concerning the authors
