All writing
Deep Dive·December 14, 2025·9 min read

Building Secure MCP Servers for AI Agents

Giving agents real infrastructure through the Model Context Protocol, with OAuth 2.0, JWT validation, and scoped, auditable tools.

AIPlatformmcpfastmcpcognitosecurity

Identity first

An agent calling cloud APIs is just another client. It needs an identity, scopes, and an audit trail. MCP gives the interface, and Cognito plus JWT give the trust.

Referenced architecture
MCP Observability Gateway

An authenticated Model Context Protocol surface that lets AI agents query AWS CloudWatch safely, tied to an identity and logged.