Amazon Bedrock AgentCore

Amazon Bedrock AgentCore is a managed platform for deploying and operating AI agents on AWS. For x402 and CDP, the relevant pieces are AgentCore Payments (agent-side microtransaction orchestration), AgentCore Gateway (MCP tool ingress and outbound targets), and AgentCore Identity (credential storage for payment providers). AWS developers can connect Coinbase x402 Bazaar as an AgentCore Gateway target for discovery and paid tool calls, and can use AgentCore Payments with CDP Wallets so agents complete x402 payment flows on behalf of users.

AgentCore payments is currently available as an AWS preview. Features and APIs may change before general availability.

What you can build

With the Coinbase integration on AgentCore you can:

Provision and sign with CDP user wallets — End users authenticate and grant agent permissions through a wallet UI; agents use AgentCore Payments to complete x402 payment flows on their behalf (subject to user-configured permissions, and your budgets and policies on the AWS side).
Discover and pay for x402-enabled services — Add the Coinbase x402 Bazaar target to AgentCore Gateway so agents can search the same catalog documented in x402 Bazaar (Discovery Layer).

CDP remains the source of truth for facilitator URLs, Bazaar behavior, and wallet concepts. AWS controls Gateway wiring, credential storage in AgentCore Identity, IAM, and runtime configuration.

Bedrock AgentCore products in this integration

Product	Role with CDP
AgentCore Payments	Orchestrates x402 payment flows on the agent side — receives HTTP 402 responses, signs transactions through your configured wallet provider, and returns payment proof to merchants.
AgentCore Gateway	Exposes MCP tools to your agents. Add the Bazaar MCP server as an outbound target so agents can call `search_resources` and `proxy_tool_call` through your Gateway URL.
AgentCore Identity	Stores Coinbase CDP API credentials as a PaymentCredentialProvider so agents can sign without embedding secrets in code.

Typical setup order: configure CDP credentials in AgentCore Identity → give end users a wallet UI to sign in and grant delegation → create a Payment Manager and Connector in AgentCore Payments → add the Bazaar target to AgentCore Gateway → wire the Gateway MCP URL and payments plugin into your agent runtime. For a guided, automated setup in coding harnesses (Claude Code, Codex, and similar), use the AgentCore Payments skill instead of running each step manually.

AgentCore Payments skill

The AgentCore Payments skill automates payments setup through an interactive, guided experience in AI coding agents. It provisions the AWS-side resources and wires a framework-agnostic payment tool into your agent so it works with Strands, LangGraph, OpenAI Agents SDK, or any Python framework. The skill provisions:

Resource	Purpose
PaymentCredentialProvider	Stores CDP (or other provider) credentials in AgentCore Identity
Payment Manager	Top-level resource that coordinates payment operations
Payment Connector	Links the manager to your credentials via the AgentCore CLI
Payment Instrument	Crypto wallet the agent uses to pay merchants on behalf of a user
Payment Session	Time-bounded context with spending limits

Install the Agent Toolkit for AWS

Install the aws-agents plugin in your coding harness, then ask the agent to set up payments.

Claude Code
Codex

/plugin marketplace add aws/agent-toolkit-for-aws
/plugin install aws-agents@agent-toolkit-for-aws

codex plugin marketplace add aws/agent-toolkit-for-aws
codex plugin install aws-agents@agent-toolkit-for-aws

Invoke the skill

The payments skill is part of the agents-build skill in the Agent Toolkit for AWS. Describe your intent in the coding agent — for example:

“Add payments to my agent using agents-build skill in aws-agents plugin”
“Set up microtransactions for my agent using agents-build skill in aws-agents plugin”
“Wire my agent to pay for x402-protected APIs using agents-build skill in aws-agents plugin”

The skill pauses when you need to provide CDP credentials (agentcore add payment-connector) and again when you authorize the wallet (delegation) and fund it. Before you start, complete the CDP prerequisites below (API credentials and Delegated signing enabled). Full walkthrough: AgentCore payments quick start — Using the AgentCore Payments skill.

User-facing wallet UI

AgentCore Payments signs on behalf of end users only after they authenticate and grant a time-bound delegation. You need a frontend where users sign in, fund wallets (optional), and approve agent access. Choose one of two paths:

AgentCore template (recommended)
Build your own

The CDP + AgentCore template is a reference Next.js app for AgentCore + CDP integrations. Fork it when you need a customizable wallet dashboard that demonstrates the full flow:

Email and social sign-in with CDP user wallets
Per-wallet account-scoped delegation grants (multi-select, expiry, revoke)
Balance views, onramp/offramp, and a live delegation signing test
Server routes that verify CDP JWTs and call cdp.endUser.* with your API key

AWS references this template in the AgentCore payments prerequisites guide as the reference frontend for onramping funds and granting agent permissions.

Build a custom frontend with @coinbase/cdp-react, @coinbase/cdp-hooks, and @coinbase/cdp-sdk. Your app must:

Authenticate end users and create user wallets
Call createDelegation or createDelegationForAccount so users grant agent access
Pass the resulting CDP user identity to AgentCore Payments (via Payment Manager / session configuration)

See Delegated signing for grant, sign, and revoke flows, and the Implementation Guide for auth UI patterns.

Coinbase also offers a hosted wallet UI (Wallet Hub) for AgentCore integrations where developers prefer not to build a frontend. Wallet Hub is currently available in a limited preview for AgentCore use cases — contact your AWS or Coinbase integration point for access. General availability for all CDP developers is planned separately.

Prerequisites on the CDP side

Use this section when you configure AgentCore Payments to use CDP Wallets. You do not need these steps solely to add the Coinbase x402 Bazaar Gateway target for discovery.

Create or select a CDP project and generate API credentials as described in CDP API authentication (API key ID, API key secret, and Wallet Secret).
In the CDP Portal, go to Wallets → Non-custodial Wallet → Security and enable Delegated signing.
Provide a user-facing wallet UI so end users can sign in and grant delegation before your agent signs on their behalf.

Store CDP credentials only in AWS systems designed for secrets (for example AgentCore Identity PaymentCredentialProvider), not in agent source code. Credential fields and rotation guidance are in AWS’s prerequisites for AgentCore payments.

Configure Bazaar in AgentCore Gateway

Add the Coinbase x402 Bazaar as an outbound target so agents connected to your Gateway can discover and call paid x402 endpoints.

Target configuration

Field	Value
Target type	Integrations → Coinbase x402 Bazaar (console) or `mcp-server` (CLI/API)
MCP endpoint	`https://api.cdp.coinbase.com/platform/v2/x402/discovery/mcp`
Outbound authentication	No Authorization (only supported option)
Tools exposed	`search_resources` (semantic catalog search), `proxy_tool_call` (invoke a discovered paid endpoint)

Agents connect to your Gateway’s MCP URL (for example https://<gateway-id>.gateway.bedrock-agentcore.<region>.amazonaws.com/mcp), not directly to the Bazaar endpoint above. The Gateway forwards tool calls to the Bazaar target. For tool behavior and client-side payment handling, see Bazaar MCP Server and the MCP server guide.

Setup paths on AWS

Choose one path to register the target. AWS documents each in Coinbase Bazaar via AgentCore Gateway:

AWS console (Bedrock AgentCore)

In the Amazon Bedrock console, open AgentCore > your Gateway > Targets:

Choose Add target
For Target type, select Integrations
Select Coinbase x402 Bazaar (pre-populated — no manual endpoint entry needed)
Leave Outbound authentication as No Authorization
Deploy the Gateway and note the Gateway MCP URL for your agent runtime

AgentCore CLI

agentcore add gateway-target \
  --name CoinbaseTarget \
  --type mcp-server \
  --endpoint https://api.cdp.coinbase.com/platform/v2/x402/discovery/mcp \
  --gateway MyGateway

agentcore deploy

Control-plane API (Boto3)

Use bedrock-agentcore-control create_gateway_target with an mcpServer endpoint pointing at the Bazaar MCP URL. See the full request shape in AWS’s Coinbase Bazaar via AgentCore Gateway guide.

Once the target is live, configure AgentCore Payments (Payment Manager, Connector, and payments plugin) so agents can automatically settle HTTP 402 responses from Bazaar-discovered endpoints. See AWS’s Process a payment guide.

GET STARTED

WALLETS

PAYMENTS

STABLECOINS

TRADING

ONCHAIN TOOLS

CUSTOMERS

WEBHOOKS

CONSUMER APIS

BUSINESS APIS

INSTITUTIONAL APIS

What you can build

Bedrock AgentCore products in this integration

AgentCore Payments skill

Install the Agent Toolkit for AWS

Invoke the skill

User-facing wallet UI

Prerequisites on the CDP side

Configure Bazaar in AgentCore Gateway

Target configuration

Setup paths on AWS

What to read next

​What you can build

​Bedrock AgentCore products in this integration

​AgentCore Payments skill

​Install the Agent Toolkit for AWS

​Invoke the skill

​User-facing wallet UI

​Prerequisites on the CDP side

​Configure Bazaar in AgentCore Gateway

​Target configuration

​Setup paths on AWS

​What to read next

What you can build

Bedrock AgentCore products in this integration

AgentCore Payments skill

Install the Agent Toolkit for AWS

Invoke the skill

User-facing wallet UI

Prerequisites on the CDP side

Configure Bazaar in AgentCore Gateway

Target configuration

Setup paths on AWS

What to read next