Integrate Agents with Amazon Bedrock AgentCore

Integrate Amazon Bedrock AgentCore with JumpCloud to give AI agents a secure, centrally managed identity and controlled access to enterprise application MCP tools. JumpCloud Agent Identities provide the authentication credentials and access assignments AgentCore uses to connect through the JumpCloud AI Gateway. This lets organizations extend AgentCore agents to enterprise resources while maintaining centralized control over agent identity, authentication, and authorization.

Creating an Agent in JumpCloud

First, you must create an agent in JumpCloud. The following section overviews agent creation and configuration. See Get Started: Agents and Get Started: Agent Identities to learn more.

1. Create the Agent. See Creating an Agent to learn more.
2. Configure Agent Authentication. See Configuring Agent Authentication to learn more.

3. Assign the Agent to Applications. See Assigning an Agent to Applications to learn more.
4. Connect the Agent to AI Gateway MCP Servers. See Connecting an Agent to AI Gateway MCP Servers to learn more.

Creating an Outbound Credential Provider in Amazon Bedrock AgentCore

1. In the AWS Console, go to Amazon Bedrock AgentCore > Identity.
2. Click Add Outbound Auth.
3. Click Add OAuth Client.
4. Enter a name for the client.
5. Select Custom provider and enter the following configuration:
   1. Configuration type: Manual config
   2. Client authentication method: Client secret basic
   3. Issuer: https://ai.jumpcloud.com
   4. Authorization endpoint: https://ai.jumpcloud.com/mcp/oauth/authorize
   5. Token endpoint: https://ai.jumpcloud.com/mcp/oauth/token
   6. Client ID: Enter the JumpCloud Agent’s client ID from Step 2 in the previous section
   7. Client secret: Enter the JumpCloud Agent’s client secret from Step 2 in the previous section
6. Click Add OAuth Client to save the configuration.

See Amazon’s Amazon Bedrock AgentCore documentation to learn more. 

Adding the JumpCloud AI Gateway as an AgentCore Gateway Target

1. In the AWS Console, go to Amazon Bedrock AgentCore > Gateways.
2. Select your agent gateway.
3. Go to Targets, then click Add.
4. Enter the following Target configuration:
   1. Target protocol: MCP target
   2. Target name: Enter a name for the target. For example, JumpCloudAIGateway
   3. Passthrough: Do not use passthrough - default aggregated
   4. Target type: MCP server
   5. MCP endpoint: https://ai.jumpcloud.com/mcp
   6. MCP listing mode: Default
   7. Outbound Auth configurations: OAuth client
   8. OAuth client: Enter the outbound credential created in Amazon Bedrock AgentCore > Identity in the previous section
      • Expand the Additional configurations section and enter the following configuration:
        • Auth grant type: Client credentials grant (2LO)
        • Scopes: mcp:connect
   9. Click Add Target to save the configuration.

See Amazon’s Amazon Bedrock AgentCore documentation to learn more.