- Newest
- Most votes
- Most comments
I was able to resolve this.
The issue was with the JWT inbound authentication audience configured on the Bedrock AgentCore Gateway.
The Amazon Connect MCP integration was associated successfully, and the gateway target was created successfully, but the tool namespace did not appear in Amazon Connect AI Agent Designer → Add Tool because the gateway JWT audience did not match what Amazon Connect expected.
In this setup, the allowed audience must be the AgentCore Gateway ID.
Based on the troubleshooting steps for agentic self-service issues in Amazon Connect, there are several potential causes for MCP tools not appearing in the AI Agent Designer:
Security Profile Permissions First, verify that the AI agent has the appropriate security profile permissions to access the required MCP tools. Without proper permissions configured in the security profile, the tools won't be visible even if the integration is properly associated.
Gateway Configuration and Discovery URL Confirm that the Amazon Bedrock AgentCore Gateway is correctly configured and that the discovery URL is valid. The gateway must be properly set up for tools to be discoverable through the Model Context Protocol.
Inbound Authentication Verify that the inbound authentication audiences are set to the gateway ID. This is a critical configuration step that can prevent tool discovery if not properly configured.
Gateway Status Check the gateway status in the AgentCore console to ensure it's operational and ready to serve tool requests.
Backend Service Verification Verify that the backend Lambda function behind the MCP tool is running and responding correctly. Check CloudWatch Logs for any errors that might indicate issues with the Lambda function or its configuration.
IAM Role Permissions Ensure the required IAM roles have appropriate permissions:
- The Amazon Bedrock AgentCore Gateway's execution role must have permission to invoke the Lambda function
- The Amazon Connect service-linked role must have permission to invoke the Amazon Bedrock AgentCore Gateway
Any missing permissions in these roles would prevent the MCP tool from being accessible to Amazon Connect, even though the integration association appears successful in CloudTrail.
I recommend systematically checking each of these areas, particularly the security profile permissions and IAM role configurations, as these are common causes of tools not appearing in the AI Agent Designer interface.
Sources
Troubleshoot agentic self-service issues - Amazon Connect
Use an AgentCore gateway - Amazon Bedrock AgentCore
Relevant content
- asked 3 months ago
- asked 4 months ago
