Skip to main content
Amazon Bedrock AgentCore includes AgentCore Payments, a managed flow for agent-side x402 microtransactions, and AgentCore Gateway, which exposes tools to agents over Model Context Protocol (MCP). AWS developers can use Coinbase x402 Bazaar as an AgentCore Gateway target for discovery and paid tool calls, and can use AgentCore Payments with CDP Wallets so agents can make payments on behalf of users. This page summarizes how to use CDP through the Amazon Bedrock AgentCore integration, and points you to AWS for console, CLI, and API steps.

​
What you can build

With the Coinbase integration on AgentCore you can:
  1. Provision and sign with CDP user wallets — End users get CDP-backed wallets; agents use AgentCore Payments to complete x402 payment flows on their behalf (subject to user-configured permissions, and your budgets and policies on the AWS side).
  2. Discover and pay for x402-enabled services — On AgentCore Gateway, select the pre-populated Coinbase x402 Bazaar integration so agents can search the same catalog documented in x402 Bazaar (Discovery Layer).
CDP remains the source of truth for facilitator URLs, Bazaar behavior, and wallet concepts. AWS controls Gateway wiring, credential storage in AgentCore Identity, IAM, and runtime configuration.

​
Prerequisites on the CDP side

Use this section only when you configure AgentCore Payments to use CDP Wallets. You do not need these steps solely to add the Coinbase x402 Bazaar Gateway target for discovery. AgentCore’s Coinbase payment connector expects CDP API credentials and wallet policies that allow the signing model AWS describes.
  1. Create or select a CDP project and generate API credentials as described in CDP API authentication (API key and Wallet Secret).
  2. In the CDP Portal, under Project > Wallet > Embedded Wallets > Policies, enable Delegated signing so AgentCore can sign on behalf of users within the constraints AWS enforces. For how delegations work in CDP, see Delegated signing.
Store the values only in AWS systems designed for secrets (for example AgentCore Identity PaymentCredentialProvider), not in agent source code. Full credential fields and rotation guidance are in AWS’s prerequisites guide (linked below).

​
Bazaar MCP URL for AgentCore Gateway

In the AWS console flow, the Coinbase x402 Bazaar target is available as a pre-populated integration option. For CLI/API workflows, use this same MCP endpoint: 
https://api.cdp.coinbase.com/platform/v2/x402/discovery/mcp
AWS documents console, agentcore CLI, and control-plane API setup paths for this target. Outbound authentication is No Authorization by default. For behavior of search_resources and proxy_tool_call, see Bazaar MCP Server and the MCP server guide. On AWS (setup and operations) On CDP (protocol and APIs)