{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["admonition"]},"type":"markdown"},"seo":{"title":"Celonis Agent Tools (MCP Server) to Amazon Bedrock AgentCore","description":"API documentation for Celonis APIs.","siteUrl":"https://developer.celonis.com","keywords":"celonis developer portal, celonis apis, celonis api reference docs","lang":"en-US","llmstxt":{"hide":false,"description":"Celonis API documentation","sections":[{"title":"API Docs","description":"Available Celonis API Docs","includeFiles":["**/*.md"]},{"title":"API Specs","description":"All Celonis API specifications","includeFiles":["**/openapi.yaml"]}]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"celonis-agent-tools-mcp-server-to-amazon-bedrock-agentcore","__idx":0},"children":["Celonis Agent Tools (MCP Server) to Amazon Bedrock AgentCore"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This topic provides step-by-step instructions for connecting Celonis Agent Tools (MCP Server) to an Amazon Bedrock AgentCore Runtime agent. This connection enables the agent to securely access Celonis process mining tools through ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://docs.celonis.com/en/using-oauth-2-0.html"},"children":["OAuth 2.0 authentication"]},"."]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"prerequisites","__idx":1},"children":["Prerequisites"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Before you begin, ensure that you have:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Administrative access to your Celonis environment"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["An AWS account with permissions to configure IAM, Cognito, ECR, and Bedrock AgentCore"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["AWS CLI installed and configured with credentials for your target account"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Python 3.11+ installed"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Docker is ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["not"]}," required (CodeBuild handles ARM64 container builds in the cloud)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["A Celonis knowledge model configured in Studio with an MCP Server asset deployed"]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"part-1-configure-celonis-platform","__idx":2},"children":["Part 1: Configure Celonis Platform"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-1-create-oauth-client","__idx":3},"children":["Step 1: Create OAuth client"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Admin & Settings → Applications"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Add New Application"]}," and select \"OAuth Client\"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Configure the OAuth client as follows:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Name:"]}," OAuthClientCelonis (or your preferred name)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Grant Type:"]}," Client Credentials"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Authentication Methods:"]}," Select both \"Client Secret Basic\" and \"Client Secret Post\" checkboxes"]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Define Scopes"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mcp-asset.tools:execute"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create"]},"."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"Important"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Copy and securely store these credentials as they are only displayed once:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Client ID"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Client Secret"]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-2-create-mcp-server-asset","__idx":4},"children":["Step 2: Create MCP Server asset"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Open ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Studio"]}," and navigate to your application."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["+ New Asset → Agent Tools (MCP)"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Configure the MCP Server:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Asset Name:"]}," MCP Server (or your preferred name)."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Knowledge Model:"]}," Select your target knowledge model."]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Configure available tools based on your requirements by clicking ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["+ Add Tools"]},". Available tools include:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["load_data"]}," — Retrieves data from the knowledge model based on KPI/metric IDs."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["get_knowledge_model"]}," — Returns the full knowledge model schema including all KPIs."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["search_data"]}," — Searches for relevant columns or instances from the knowledge model."]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Toggle on the tools you want to enable."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-3-configure-mcp-server-permissions","__idx":5},"children":["Step 3: Configure MCP Server permissions"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Package Settings → Permissions"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Search for your OAuth client application (e.g., \"OAuthClientCelonis\")."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Grant the ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Use"]}," permission to the OAuth client."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Save"]},"."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-4-deploy-the-mcp-server","__idx":6},"children":["Step 4: Deploy the MCP Server"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Deploy"]}," to publish the MCP Server."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["After deployment, copy the generated ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["MCP Server URL"]},". It will be in the following format:  ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://<your-environment>.celonis.cloud/studio-copilot/api/v1/mcp-servers/mcp/<server-id>"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Save this URL. You will need it in the AWS configuration steps below."]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"part-2-configure-aws","__idx":7},"children":["Part 2: Configure AWS"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-1-clone-the-repository-and-configure-the-environment","__idx":8},"children":["Step 1: Clone the repository and configure the environment"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Clone the integration repository:"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"header":{"controls":{"copy":{}}},"source":"git clone https://github.com/aws-samples/sample-celonis-bedrock-agentcore-integration\ncd sample-celonis-bedrock-agentcore-integration\n\n"},"children":[]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Create a Python virtual environment and install dependencies:"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"header":{"controls":{"copy":{}}},"source":"python -m venv .venv && source .venv/bin/activate\npip install -r requirements.txt\npip install bedrock-agentcore-starter-toolkit\n\n"},"children":[]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Copy ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":[".env.example"]}," to ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":[".env"]}," and complete the following values:"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"header":{"controls":{"copy":{}}},"source":"# Celonis MCP Server Configuration\nCELONIS_MCP_SERVER_URL=https://<your-environment>.celonis.cloud/studio-copilot/api/v1/mcp-servers/mcp/<server-id>\nCELONIS_TOKEN_URL=https://<your-environment>.celonis.cloud/oauth2/token\nCELONIS_CLIENT_ID=<client-id-from-step-1>\nCELONIS_CLIENT_SECRET=<client-secret-from-step-1>\nCELONIS_OAUTH_SCOPE=mcp-asset.tools:execute\n\n# AWS Configuration\nAWS_ACCOUNT_ID=<your-aws-account-id>\nAWS_REGION=<your-target-region>\n\n"},"children":[]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-2-provision-aws-backend","__idx":9},"children":["Step 2: Provision AWS backend"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Run the setup script to create all required AWS resources:"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"header":{"controls":{"copy":{}}},"source":"AWS_REGION=<your-region> python setupAWSbackend.py\n\n"},"children":[]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Resources created:"]}]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["IAM Role CelonisAgentCoreRuntime-<region>"]},": Execution role for the agent container."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["IAM Role CelonisAgentCoreGateway-<region>"]},": Role for the AgentCore Gateway."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["AgentCore Identity credential provider"]},": Stores Celonis OAuth credentials securely."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["AgentCore MCP Gateway"]},": Proxies MCP calls to Celonis."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Cognito User Pool CelonisAgentCorePool"]},": Issues JWT tokens for inbound authentication."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Cognito App Client celonis-caller"]},": Client credentials for callers."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-3-add-bedrock-converse-permission-to-execution-role","__idx":10},"children":["Step 3: Add Bedrock Converse permission to execution role"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Open the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://console.aws.amazon.com/iam/home#/roles"},"children":["IAM Console"]}," and find the ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["CelonisAgentCoreRuntime-<region\\>"]}," role."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Edit the inline policy named ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["BedrockInvokeModel"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Add the following actions to the existing Bedrock statement:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["bedrock:Converse"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["bedrock:ConverseStream "]}]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Save the policy."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-4-submit-anthropic-model-access","__idx":11},"children":["Step 4: Submit Anthropic model access"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The agent uses Claude via Amazon Bedrock:"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Open the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://console.aws.amazon.com/bedrock/home#/model-catalog"},"children":["Bedrock Model Catalog"]}," in your target region."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Search for \"Claude Sonnet 4.5\"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click the model and submit the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Request model access"]}," use case form."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-5-deploy-the-agent","__idx":12},"children":["Step 5: Deploy the agent"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"header":{"controls":{"copy":{}}},"source":"AWS_REGION=<your-region> agentcore launch\n\n"},"children":[]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["After deployment, copy the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Agent ID"]}," from ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":[".bedrock\\_agentcore.yaml"]}," and add it to ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":[".env"]},":"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["AGENTCORE_AGENT_ID=<agent-id-from-yaml>"]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"part-3-how-the-agent-works","__idx":13},"children":["Part 3: How the agent works"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"authentication-flow","__idx":14},"children":["Authentication flow"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Caller"]}," sends POST request with Cognito JWT."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["AgentCore Runtime"]}," fetches OAuth token from Celonis."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Agent"]}," connects to Celonis MCP Server with Bearer token."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Amazon Bedrock (Claude)"]}," processes data and returns response."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Agent"]}," optionally POSTs result to a ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["callback_url"]},"."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"payload-format","__idx":15},"children":["Payload format"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"header":{"controls":{"copy":{}}},"source":"{\n  \"prompt\": \"Are there any PR lines with contract leakage this week?\",\n  \"callback_url\": \"https://hooks.slack.com/triggers/...\"\n}\n\n"},"children":[]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"part-4-testing-the-integration","__idx":16},"children":["Part 4: Testing the integration"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-1-verify-celonis-mcp-connectivity-local","__idx":17},"children":["Step 1: Verify Celonis MCP connectivity (local)"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"header":{"controls":{"copy":{}}},"source":"source .venv/bin/activate\nAWS_REGION=<your-region> python test_local.py\n\n"},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-2-test-the-deployed-agent","__idx":18},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Step 2: Test the deployed agent"]}]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"header":{"controls":{"copy":{}}},"source":"AWS_REGION=<your-region> python test_remote.py \"Are there any PR lines with contract leakage?\"\n\n"},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-3-invoke-from-celonis-action-flow","__idx":19},"children":["Step 3: Invoke from Celonis Action Flow"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Configure an HTTP action in Celonis with:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["URL:"]}," ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://bedrock-agentcore.<region\\>.amazonaws.com/runtimes/<url-encoded-agent-arn>/invocations?qualifier=DEFAULT"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Headers:"]}," ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Authorization: Bearer <cognito-jwt>"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Body:"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"header":{"controls":{"copy":{}}},"source":"{  \n\"prompt\": \"{{your_celonis_variable}}\",  \n\"callback_url\": \"https://hooks.slack.com/triggers/...\"  \n}\n"},"children":[]}]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"troubleshooting","__idx":20},"children":["Troubleshooting"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Model Access Error:"]}," Ensure the Anthropic use case form is approved."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["AccessDeniedException:"]}," Double-check the IAM role has ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["bedrock:Converse"]}," permissions."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["401 Unauthorized:"]}," Check that the Celonis OAuth client has ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Use"]}," permission on the MCP asset."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["No tools discovered:"]}," Ensure the MCP Server is deployed in Celonis Studio."]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"security-notes","__idx":21},"children":["Security notes"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Store secrets in ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["AWS Secrets Manager"]}," for production environments."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Inbound authentication uses ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Cognito JWT tokens"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Outbound tokens to Celonis are short-lived (15 minutes)."]}]}]},"headings":[{"value":"Celonis Agent Tools (MCP Server) to Amazon Bedrock AgentCore","id":"celonis-agent-tools-mcp-server-to-amazon-bedrock-agentcore","depth":1},{"value":"Prerequisites","id":"prerequisites","depth":2},{"value":"Part 1: Configure Celonis Platform","id":"part-1-configure-celonis-platform","depth":2},{"value":"Step 1: Create OAuth client","id":"step-1-create-oauth-client","depth":3},{"value":"Step 2: Create MCP Server asset","id":"step-2-create-mcp-server-asset","depth":3},{"value":"Step 3: Configure MCP Server permissions","id":"step-3-configure-mcp-server-permissions","depth":3},{"value":"Step 4: Deploy the MCP Server","id":"step-4-deploy-the-mcp-server","depth":3},{"value":"Part 2: Configure AWS","id":"part-2-configure-aws","depth":2},{"value":"Step 1: Clone the repository and configure the environment","id":"step-1-clone-the-repository-and-configure-the-environment","depth":3},{"value":"Step 2: Provision AWS backend","id":"step-2-provision-aws-backend","depth":3},{"value":"Step 3: Add Bedrock Converse permission to execution role","id":"step-3-add-bedrock-converse-permission-to-execution-role","depth":3},{"value":"Step 4: Submit Anthropic model access","id":"step-4-submit-anthropic-model-access","depth":3},{"value":"Step 5: Deploy the agent","id":"step-5-deploy-the-agent","depth":3},{"value":"Part 3: How the agent works","id":"part-3-how-the-agent-works","depth":2},{"value":"Authentication flow","id":"authentication-flow","depth":3},{"value":"Payload format","id":"payload-format","depth":3},{"value":"Part 4: Testing the integration","id":"part-4-testing-the-integration","depth":2},{"value":"Step 1: Verify Celonis MCP connectivity (local)","id":"step-1-verify-celonis-mcp-connectivity-local","depth":3},{"value":"Step 2: Test the deployed agent","id":"step-2-test-the-deployed-agent","depth":3},{"value":"Step 3: Invoke from Celonis Action Flow","id":"step-3-invoke-from-celonis-action-flow","depth":3},{"value":"Troubleshooting","id":"troubleshooting","depth":2},{"value":"Security notes","id":"security-notes","depth":2}],"frontmatter":{"seo":{"title":"Celonis Agent Tools (MCP Server) to Amazon Bedrock AgentCore"}},"lastModified":"2026-09-28T20:51:30.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/mcp-server-asset/integrations/mcp-amazon-bedrock-agent-core","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}