All news with #mcp tag

🔐 AWS Sign-In now supports OAuth for connecting agents to the AWS MCP Server, enabling browser-based and headless authentication that leverages existing IAM, IAM Identity Center, and federated sign-in methods. The update includes dynamic client registration, token introspection and revocation, new CloudTrail elements, global condition keys, and a headless OAuth API. Agents discover OAuth endpoints, register via DCR, and use authorization code or client credentials flows to obtain short-lived tokens. Administrators can govern OAuth access using standard IAM policies plus OAuth-specific condition keys and monitor activity via CloudTrail.

🔐 You can now connect AI agents directly to the AWS MCP Server using AWS Sign-In and industry-standard OAuth. Agents may authenticate without extra software and reuse existing AWS identities, sign-in methods, IAM permissions, and governance controls. Developers can authorize agents interactively via a browser or programmatically with headless flows, while administrators govern access with IAM policies and new OAuth features.

🔒 This post describes a reference implementation using Cedar on AWS to prevent silent privilege escalation in multi-agent AI delegation chains. It outlines a three-layer policy model—agent-to-tool, agent-to-agent delegation, and originating user authorization—using verified token claims and HMAC-signed context. The architecture uses an MCP adapter Lambda and a Cedar evaluator Lambda to enforce policies sequentially and halt on the first deny. It includes schema, entity registrations, policy examples, deployment steps, and end-to-end test scenarios demonstrating how the model enforces least privilege.

🛡️ AWS Security Agent (now part of AWS Continuum) is available in Asia Pacific (Mumbai), Asia Pacific (Singapore), and South America (São Paulo). Customers in these regions can access STRIDE-based threat modeling (preview), full-repo and PR-level code reviews (preview) across major source platforms, managed compliance packs, and custom security requirements. New IDE plugins and MCP integration enable triggering threat modeling, code reviews, and remediation from Kiro or Claude Code, while on-demand penetration testing and retesting provide validated findings and fixes; simulated validation remains only in US East (N. Virginia).

🖥️ Amazon WorkSpaces for agents is generally available, enabling AI agents to securely access and operate desktop applications inside managed WorkSpaces. The service lets agents interact with legacy ERP, CRM, mainframe, and proprietary tools without application modernization or custom integrations, while preserving identity controls, network isolation, and compliance boundaries. It supports any agent framework using the Model Context Protocol (MCP), and pricing is based on active session time.

🔗 The Gemini Enterprise Agent Platform remote MCP server lets external AI agents securely access Google Cloud Agent Platform resources. It acts as a standardized bridge so tools like Antigravity CLI or Claude Code can call models in Model Garden, manage Notebooks, and use shared prompts without leaving the IDE. Enable the API, configure your client, and use provided Toolset Endpoints to start integrating quickly while maintaining governance.

🔒 Kiro is now authorized for FedRAMP High and DoD CC SRG Impact Levels 4 and 5 within the AWS GovCloud (US) Regions. This enables federal agencies and public sector organizations with stringent compliance requirements to adopt Kiro for sensitive workloads. Kiro combines an IDE and CLI for agentic AI-driven, spec-driven development, translating prompts into code, documentation, and tests. It also supports native MCP integration to connect with documentation, databases, APIs, and enterprise resources.

🛡️ Cloudflare announced the Cloudflare One stack, a pair of agent skills designed to automate planning, deploying, migrating, and managing Zero Trust environments. The toolkit packages Cloudflare’s institutional migration expertise into two skill files — cloudflare-one and cloudflare-one-migration — to assist with VPN replacement, Gateway policies, connectivity, vendor-to-vendor translation, and troubleshooting. When paired with the Cloudflare code mode MCP server, agents gain typed, controlled access to the Cloudflare API for live inventory, configuration inspection, and curated change workflows.

🔍 Today AWS announced a preview of business context and semantic search for AWS Glue Data Catalog, enabling discovery of data by semantic meaning. You can enrich catalog tables with glossary terms, custom metadata fields, and add skills that provide agents with additional context. The new Glue Search API lets you find tables by both structure and attached business meaning, and MCP-compatible agents can use the aws-data-analytics plugin to integrate with minimal setup.

🔍 AWS Transform for mainframe now provides a connected, traceable reimagine workflow that takes organizations from portfolio assessment through code generation. The service identifies discrete business functions in z/OS COBOL and PL/I workloads, generates development-ready requirements, and produces traceable cloud-native code. Integrations with IDEs such as Kiro via MCP enable requirements and code to flow directly into developer environments with full auditability.

🤝 Today AWS announced general availability of onboarding agents for AWS Partner Central. The agent serves as an always-available advisor that guides new partners through profile setup, verifications, tax and payment setup, compliance, and preparing listings on Marketplace. Partners can interact with the agent in the AWS Partner Central console or programmatically via Model Context Protocol (MCP). The agent auto-populates partner profiles using company website data and provides a personalized roadmap to accelerate readiness to sell with AWS.

🛠️ AWS announces that DevOps Agent now supports custom SRE agents, bring-your-own sub-agents, and headless access via MCP and A2A protocols. These features let teams automate recurring SRE workflows, extend the agent by connecting external sub-agents, and invoke DevOps Agent from familiar tools such as Kiro and Claude. Additional updates include chat enhancements, incident-skip rules, enhanced knowledge with memories and Git-managed skills, human labeling, dashboards for task quality, and availability in five new Regions.

🤝 Amazon Quick now integrates with Snowflake Cortex AI via the Model Context Protocol (MCP), allowing teams to query Snowflake data and documents in natural language and automate multi-step workflows within Quick. After configuring Snowflake's managed MCP server with OAuth, users can query structured data with Cortex Analyst and unstructured documents with Cortex Search. The MCP connection is available across Quick features, including Quick Chat and Flows, and the integration is live in all AWS Regions where Amazon Quick is offered.

🛠️ Amazon OpenSearch Service now integrates MCP Apps to bring observability workflows into compatible agentic IDEs like Claude Desktop and VS Code. With this integration, local AI agents can investigate incidents using logs, traces, metrics, and alerts stored in OpenSearch domains, collections, and Amazon Managed Service for Prometheus. Each MCP App returns both a concise text summary for agent reasoning and an interactive visualization for human review within the same conversation thread.

🚀 Today AWS introduced cross-account and cross-role access for the AWS Model Context Protocol (MCP) Server, part of the Agent Toolkit for AWS. This update lets AI coding agents such as Kiro, Claude Code, or Codex operate across multiple AWS accounts and IAM roles within a single session without restarts. Previously, changing accounts required stopping the session, updating local credentials, and restarting the MCP server; now agents can specify a profile per command. The feature is intended to streamline multi-account workflows and reduce context-switch friction. The MCP Server is available in US East (N. Virginia) and Europe (Frankfurt).

🔧 Today AWS added an interactive wizard to the AWS Command Line Interface that installs and manages the Agent Toolkit for AWS across multiple coding agents. The toolkit provides an MCP server, 40+ agent skills, and plugins to give agents guidance and guardrails. Users can run aws configure agent-toolkit to detect installed agents, choose skills per agent, and search, install, or update skills via the CLI. The MCP Server is available in US East (N. Virginia) and Europe (Frankfurt).

🚀 Google Cloud Storage (GCS) is positioned as the preferred home for large-scale unstructured data and as a foundational component for production AI agents. This post highlights customer examples—Palo Alto Networks and Snap—using GCS as agent memory and analytics storage, and explains how the Model Context Protocol (MCP) enables secure, standardized access. Google offers two MCP server options: a fully managed Remote MCP server for easy, scalable deployments, and a self-managed Local MCP server for custom tooling and transformations, both integrated with Google Cloud security, observability, and tooling.

🔒 Amazon Quick now supports connecting privately hosted Model Context Protocol (MCP) servers via Amazon Virtual Private Cloud (VPC). This enables organizations to integrate proprietary MCP servers running on Amazon EC2, AWS Fargate, AWS Agentcore, or other private compute without exposing them to the public internet. During connector creation, choose your VPC and provide your MCP server URL so teams can interact with private MCPs in Quick while traffic remains routed securely through the VPC.

🛡️ The Remote Model Context Protocol (MCP) Server for AlloyDB is now generally available, providing a secure HTTP endpoint that lets AI agents access real-time operational data. This fully managed service simplifies production deployments by centralizing discovery, offering fine-grained IAM-based authorization, audit logging, and integration with Model Armor for prompt and response protection. Developers can join AlloyDB operational data with analytics in BigQuery and use built-in AI functions for low-latency agentic experiences.

🧭This post explains how A2UI, an open protocol for agent-driven user interfaces, enables agents to return structured JSON UI payloads instead of plain text or HTML. It outlines the four-layer stack (app shell, rendering, conversation pipeline, and cargo), the inline and decoupled patterns, and how Gemini Enterprise integrates a built-in A2UI renderer. The article points to a reference repo, demo, and implementation notes for registering an A2A agent with GE.