Amazon Bedrock AgentCore MCP Server: Setup for Claude, Cursor and Other Apps

• Creates an AgentCore runtime to host an agent or tool

  Creates a new AgentCore Runtime in your AWS account to host an agent or tool. This creates a billable AWS resource.

  Try: “Create an AgentCore runtime for my agent container image.”

  Write · create_agent_runtime

• Creates a custom endpoint for a runtime

  Creates a custom endpoint for an existing AgentCore Runtime.

  Try: “Create an endpoint called prod for my support-agent runtime.”

  Write · create_agent_runtime_endpoint

• Sends a request to an agent hosted on AgentCore

  Calls an agent hosted in AgentCore Runtime with the payload you give it and returns the reply.

  Try: “Ask my support-agent runtime how to reset a password.”

  Runs code · invoke_agent_runtime

• Lists the runtimes in your account

  Lists every AgentCore Runtime in the account. Use get_agent_runtime for the configuration of one.

  Try: “List my AgentCore runtimes.”

  Network · list_agent_runtimes

• Shows the details and settings of a runtime

  Returns one AgentCore Runtime with its configuration.

  Try: “Show me the configuration of my support-agent runtime.”

  Network · get_agent_runtime

• Updates a runtime and creates a new version

  Updates an AgentCore Runtime. Each update creates a new immutable version.

  Try: “Update my support-agent runtime to use the new container image.”

  Write · update_agent_runtime

• Stops a running session to free its microVM

  Stops a running runtime session so its microVM is released.

  Try: “Stop runtime session abc123 on my support-agent runtime.”

  Write · stop_runtime_session

• Deletes a runtime and all its versions

  Deletes an AgentCore Runtime and every version of it. This cannot be undone.

  Try: “Delete the old test-agent runtime.”

  Delete · delete_agent_runtime

• Lists the memory resources in your account

  Lists every AgentCore Memory resource in the account.

  Try: “List my AgentCore memories.”

  Network · memory_list

• Creates a new memory resource

  Creates an AgentCore Memory resource for an agent to store short-term events and long-term memories.

  Try: “Create a memory called support-bot-memory.”

  Write · memory_create

• Stores a conversation event in short-term memory

  Creates an event in an AgentCore Memory resource, which is its short-term memory.

  Try: “Save this exchange as an event in the support-bot memory.”

  Write · memory_create_event

• Finds stored memories by meaning

  Runs a semantic search for memory records in a memory resource, filtered by a namespace prefix.

  Try: “Search the support-bot memory for what this customer prefers.”

  Network · memory_retrieve_records

• Adds many memory records at once

  Creates several memory records in one call.

  Try: “Add these five customer notes to the support-bot memory.”

  Write · memory_batch_create_records

• Starts or restarts a memory extraction job

  Starts, or restarts, a job that extracts long-term memories from stored events.

  Try: “Restart extraction job job-42 on the support-bot memory.”

  Write · memory_start_extraction_job

• Deletes a memory resource

  Deletes an AgentCore Memory resource.

  Try: “Delete the test memory resource.”

  Delete · memory_delete

• Creates an identity for an agent workload

  Creates a new AgentCore workload identity.

  Try: “Create a workload identity for my support agent.”

  Write · identity_create_workload_identity

• Sets up an OAuth2 sign-in provider for agents

  Creates an OAuth2 credential provider in AgentCore Identity.

  Try: “Create an OAuth2 credential provider for our Slack app.”

  Write · identity_create_oauth2_provider

• Registers an API key provider for agents

  Creates an API key credential provider in AgentCore Identity. The README says tools that return live tokens or keys are left out.

  Try: “Create an API key provider for the weather service.”

  Write · identity_create_api_key_provider

• Shows details of the token vault

  Returns the details of an AgentCore Identity token vault.

  Try: “Show me my AgentCore token vault.”

  Network · identity_get_token_vault

• Sets the encryption key for the token vault

  Sets the customer master key (CMK) for an AgentCore Identity token vault.

  Try: “Use our KMS key for the token vault.”

  Write · identity_set_token_vault_cmk

• Creates a gateway that exposes APIs as agent tools

  Creates an AgentCore Gateway, which turns existing APIs into tools an agent can call.

  Try: “Create a gateway called orders-gateway.”

  Write · gateway_create

• Adds a target to a gateway

  Creates a gateway target to expose tools through a gateway. Targets can be Lambda functions, OpenAPI or Smithy APIs, or MCP servers.

  Try: “Add our orders Lambda as a target on orders-gateway.”

  Write · gateway_target_create

• Refreshes a gateway target's tool list

  Synchronizes gateway targets with their upstream tool catalog.

  Try: “Synchronize the targets on orders-gateway.”

  Write · gateway_target_synchronize

• Sets who can use a gateway

  Creates or updates a resource-based policy on a gateway.

  Try: “Allow our production account to call orders-gateway.”

  Write · gateway_resource_policy_put

• Deletes a gateway

  Deletes an AgentCore Gateway.

  Try: “Delete the test gateway.”

  Delete · gateway_delete

• Creates a policy engine

  Creates an AgentCore Policy Engine, which enforces access rules on agent actions.

  Try: “Create a policy engine for the orders agents.”

  Write · policy_engine_create

• Creates a Cedar policy in an engine

  Creates a Cedar policy inside an AgentCore Policy Engine.

  Try: “Add a policy that blocks refunds over 500 dollars.”

  Write · policy_create

• Drafts a Cedar policy from plain words

  Starts an AI-powered Cedar policy generation from a natural-language description.

  Try: “Generate a policy that lets support agents read but not edit orders.”

  Write · policy_generation_start

• Opens a cloud browser session

  Starts a cloud browser session through AgentCore. Sessions run in AWS and incur charges until stopped.

  Try: “Start a cloud browser session.”

  Runs code · start_browser_session

• Opens a web address in the cloud browser

  Navigates to a URL in the cloud browser session.

  Try: “Open example.com in the cloud browser.”

  Runs code · browser_navigate

• Reads the page the browser is showing

  Captures an accessibility-tree snapshot of the current page.

  Try: “Take a snapshot of the page.”

  Network · browser_snapshot

• Clicks an element on the page

  Clicks an element identified by its accessibility reference.

  Try: “Click the Sign in button.”

  Runs code · browser_click

• Runs JavaScript in the page

  Executes a JavaScript expression in the page context of the cloud browser.

  Try: “List all link addresses on the page.”

  Runs code · browser_evaluate

• Takes a picture of the page

  Captures a visual screenshot of the page.

  Try: “Take a screenshot of the page.”

  Network · browser_take_screenshot

• Closes the cloud browser session

  Stops a browser session and releases its resources.

  Try: “Stop the browser session.”

  Runs code · stop_browser_session

• Starts a sandboxed code session

  Starts a new sandboxed code interpreter session in AWS. Sessions incur charges until stopped.

  Try: “Start a code interpreter session.”

  Runs code · start_code_interpreter_session

• Runs code in the sandbox

  Executes code in a sandboxed code interpreter session.

  Try: “Run a Python script that sums the numbers in my data file.”

  Runs code · execute_code

• Runs a shell command in the sandbox

  Executes a shell command in the sandboxed session.

  Try: “List the files in the sandbox with a shell command.”

  Runs code · execute_command

• Installs Python packages in the sandbox

  Installs Python packages in the sandboxed session, with an option to upgrade.

  Try: “Install pandas in the sandbox.”

  Runs code · install_packages

• Sends a file into the sandbox

  Uploads a file to the sandboxed session.

  Try: “Upload this CSV to the sandbox.”

  Write · upload_file

• Gets a file out of the sandbox

  Downloads a file from the sandboxed session.

  Try: “Download results.csv from the sandbox.”

  Network · download_file

• Lists the files in the sandbox

  Lists files in the sandboxed session.

  Try: “What files are in the sandbox?”

  Network · list_files

• Searches the AgentCore documentation

  Searches AgentCore documentation and returns ranked results with snippets. It is always on.

  Try: “How do AgentCore memory namespaces work?”

  Network · search_agentcore_docs

• Fetches one AgentCore documentation page

  Retrieves the full content of an AgentCore document by URL. It is always on.

  Try: “Fetch the page you just found and summarize it.”

  Network · fetch_agentcore_doc

• Used by the assistant behind the scenes

  Returns a built-in guide to AgentCore Runtime

  Returns a reference guide with CLI commands, the config schema, session lifecycle, IAM permissions and cost tiers. Each other area has its own guide tool.

  Try: “Show me the AgentCore Runtime guide.”

  Read · get_runtime_guide

Watch out for

• It can delete runtimes, gateways and memories

  Delete tools exist for runtimes, endpoints, memories, gateways, identities and policies, and they cannot be undone. Use an AWS role without delete permissions. github.com

• Some tools start billable AWS sessions

  Creating resources, invoking agents and running browser or code sessions incur AWS charges. Stop sessions when you finish. github.com

• It can run code and drive a web browser

  The code sandbox runs code and shell commands, and the cloud browser can open pages and run JavaScript. Turn both off if you do not need them. github.com

• Retrieved content may carry hidden instructions

  The README says memory records and gateway responses should be treated as untrusted input. Review what the assistant plans to do after reading them. github.com

• Calls that return secrets are left out

  The README says token retrieval and gateway invocation are excluded so live credentials do not pass through the assistant. github.com

Security advisories