Client-side MCP proxy that injects OAuth bearer tokens or API keys (via Amazon Bedrock AgentCore Identity or static credentials) for MCP servers using OAuth or API-key authentication, such as AgentCore Gateway inbound authorization.
About the project
mcp-identity-proxy-for-aws is a local proxy that adds OAuth bearer tokens or API-key headers to requests sent from MCP clients to authenticated MCP servers. It obtains and refreshes credentials through Amazon Bedrock AgentCore Identity or uses supplied static values, helping clients connect to OAuth- or API-key-protected services.
MCP server "mcp-identity-proxy-for-aws" as configured in aws-samples/sample-mcp-identity-proxy-for-aws. Runs locally from the mcp-identity-proxy-for-aws Python package.