AWS Publishes Guide for Connecting Claude Desktop to a Secure Managed Web Search Tool via AgentCore
In short: AWS released a step-by-step walkthrough showing how to give Claude Desktop (on Amazon Bedrock) live internet access through Amazon Bedrock AgentCore Gateway, closing the gap left by the model's training cutoff. The setup wires AWS IAM Identity Center SSO through Amazon Cognito as a SAML-to-OAuth federation layer, issuing JWTs that the AgentCore Gateway validates on every request. The Web Search capability itself is MCP-compatible and runs on an internal Amazon web index covering tens of billions of documents, so no query traffic leaves AWS and no third-party API key is needed. The feature is currently limited to three AWS Regions: us-east-1 (N. Virginia), eu-west-1 (Ireland), and ap-northeast-1 (Tokyo).
This summary was generated automatically by AI from AWS Machine Learning's publication. It is our own text, not a copy of the original — facts, figures and quotes belong to the source, linked above and below.
What changed?
- 1New managed, MCP-compatible Web Search tool available through AgentCore Gateway for Claude Desktop on Bedrock
- 2Authentication chain: IAM Identity Center (SAML/SSO) → Amazon Cognito (OAuth 2.0 federation) → JWT validated by AgentCore Gateway
- 3No external API keys required; all search traffic stays within AWS infrastructure
- 4Claude Desktop auto-discovers the tool via MCP tools/list and prompts for approval (Deny / Allow once / Allow for this task) before each web search call
- 5Available only in us-east-1, eu-west-1, and ap-northeast-1 at launch
Why it matters
This shows a concrete, production-grade pattern for giving an LLM agent secure, auditable access to external tools (here, web search) without handing out standalone API credentials — relevant to anyone building enterprise agents that need live data or custom backend connectors.
What it means for AI agents and contact centers
The AgentCore Gateway + JWT/OAuth pattern is a reusable blueprint your company could study for connecting your own voice agents or contact-center tools to MCP-based services securely, especially where enterprise SSO governance matters; it is not a voice/STT/TTS feature itself but a useful architectural reference for secure tool/function calling.
🧪 Worth Testing
Testing the gateway setup could help your company evaluate whether this JWT/MCP-based tool-access pattern reduces integration complexity and improves security compared to current API-key-based tool connections in your agent stack.
Amazon Bedrock AgentCore Gateway with Web Search (MCP connector)· New
Sources
- AWS Machine LearningOfficialPrimary sourceOriginal article →„Add secure Web Search to Claude Desktop with Amazon Bedrock AgentCore“2 Oct 2026, 18:46
- Published by source
- 2 Oct 2026, 18:46
- Found by our system
- 2 Oct 2026, 19:51
- Summary generated
- 2 Oct 2026, 22:57
This article was written by AI from the original source. Facts, numbers and prices come from the source; missing values are marked “Not specified”. Legal notice, copyright and privacy