> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cdp.coinbase.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Amazon Bedrock AgentCore

> Use CDP wallets and the x402 Bazaar with Amazon Bedrock AgentCore Payments and AgentCore Gateway.

[Amazon Bedrock AgentCore](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/what-is-bedrock-agentcore.html) is a managed platform for deploying and operating AI agents on AWS. For x402 and CDP, the relevant pieces are **AgentCore Payments** (agent-side microtransaction orchestration), **AgentCore Gateway** (MCP tool ingress and outbound targets), and **AgentCore Identity** (credential storage for payment providers).

AWS developers can connect **Coinbase x402 Bazaar** as an AgentCore Gateway target for discovery and paid tool calls, and can use **AgentCore Payments** with **CDP Wallets** so agents complete x402 payment flows on behalf of users.

<Note>
  AgentCore payments is currently available as an AWS preview. Features and APIs may change before general availability.
</Note>

## What you can build

With the Coinbase integration on AgentCore you can:

1. **Provision and sign with CDP user wallets** — End users authenticate and grant agent permissions through a wallet UI; agents use AgentCore Payments to complete x402 payment flows on their behalf (subject to user-configured permissions, and your budgets and policies on the AWS side).
2. **Discover and pay for x402-enabled services** — Add the **Coinbase x402 Bazaar** target to AgentCore Gateway so agents can search the same catalog documented in [x402 Bazaar (Discovery Layer)](/x402/bazaar).

CDP remains the source of truth for [facilitator URLs](/x402/network-support), [Bazaar behavior](/x402/bazaar), and [wallet concepts](/x402/core-concepts/wallet). AWS controls Gateway wiring, credential storage in AgentCore Identity, IAM, and runtime configuration.

## Bedrock AgentCore products in this integration

| Product                                                                                               | Role with CDP                                                                                                                                                                        |
| ----------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| [**AgentCore Payments**](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/payments.html) | Orchestrates x402 payment flows on the agent side — receives HTTP 402 responses, signs transactions through your configured wallet provider, and returns payment proof to merchants. |
| [**AgentCore Gateway**](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway.html)   | Exposes MCP tools to your agents. Add the Bazaar MCP server as an outbound **target** so agents can call `search_resources` and `proxy_tool_call` through your Gateway URL.          |
| [**AgentCore Identity**](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/identity.html) | Stores Coinbase CDP API credentials as a **PaymentCredentialProvider** so agents can sign without embedding secrets in code.                                                         |

Typical setup order: configure CDP credentials in AgentCore Identity → give end users a wallet UI to sign in and grant delegation → create a Payment Manager and Connector in AgentCore Payments → add the Bazaar target to AgentCore Gateway → wire the Gateway MCP URL and payments plugin into your agent runtime.

## User-facing wallet UI

AgentCore Payments signs on behalf of end users only after they authenticate and grant a time-bound [delegation](/wallets/using-wallets/delegated-signing). You need a frontend where users sign in, fund wallets (optional), and approve agent access. Choose one of two paths:

<Tabs>
  <Tab title="AgentCore template (recommended)">
    The **[CDP + AgentCore template](https://github.com/coinbase/cdp-agentcore-template)** is a reference Next.js app for AgentCore + CDP integrations. Fork it when you need a customizable wallet dashboard that demonstrates the full flow:

    * Email and social sign-in with CDP embedded wallets
    * Per-wallet account-scoped delegation grants (multi-select, expiry, revoke)
    * Balance views, onramp/offramp, and a live delegation signing test
    * Server routes that verify CDP JWTs and call `cdp.endUser.*` with your API key

    AWS references this template in the [AgentCore payments prerequisites](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/payments-prerequisites.html) guide as the reference frontend for onramping funds and granting agent permissions.
  </Tab>

  <Tab title="Build your own">
    Build a custom frontend with `@coinbase/cdp-react`, `@coinbase/cdp-hooks`, and `@coinbase/cdp-sdk`. Your app must:

    1. Authenticate end users and create embedded wallets
    2. Call `createDelegation` or `createDelegationForAccount` so users grant agent access
    3. Pass the resulting CDP user identity to AgentCore Payments (via Payment Manager / session configuration)

    See [Delegated signing](/wallets/using-wallets/delegated-signing) for grant, sign, and revoke flows, and the [Implementation Guide](/wallets/authentication/implementation-guide) for auth UI patterns.
  </Tab>
</Tabs>

<Note>
  Coinbase also offers a hosted wallet UI (**Wallet Hub**) for AgentCore integrations where developers prefer not to build a frontend. Wallet Hub is currently available in a limited preview for AgentCore use cases — contact your AWS or Coinbase integration point for access. General availability for all CDP developers is planned separately.
</Note>

## Prerequisites on the CDP side

Use this section when you configure **AgentCore Payments** to use CDP Wallets. You do **not** need these steps solely to add the **Coinbase x402 Bazaar** Gateway target for discovery.

1. Create or select a CDP project and generate API credentials as described in [CDP API authentication](/api-reference/v2/authentication) (API key ID, API key secret, and Wallet Secret).
2. In the CDP Portal, under **Products** > **Non-custodial Wallet** > **Security**, enable **Delegated signing**.
3. Provide a [user-facing wallet UI](#user-facing-wallet-ui) so end users can sign in and grant delegation before your agent signs on their behalf.

Store CDP credentials only in AWS systems designed for secrets (for example AgentCore Identity **PaymentCredentialProvider**), not in agent source code. Credential fields and rotation guidance are in AWS's [prerequisites for AgentCore payments](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/payments-prerequisites.html).

## Configure Bazaar in AgentCore Gateway

Add the Coinbase x402 Bazaar as an outbound target so agents connected to your Gateway can discover and call paid x402 endpoints.

### Target configuration

| Field                       | Value                                                                                               |
| --------------------------- | --------------------------------------------------------------------------------------------------- |
| **Target type**             | Integrations → **Coinbase x402 Bazaar** (console) or `mcp-server` (CLI/API)                         |
| **MCP endpoint**            | `https://api.cdp.coinbase.com/platform/v2/x402/discovery/mcp`                                       |
| **Outbound authentication** | **No Authorization** (only supported option)                                                        |
| **Tools exposed**           | `search_resources` (semantic catalog search), `proxy_tool_call` (invoke a discovered paid endpoint) |

Agents connect to your Gateway's MCP URL (for example `https://<gateway-id>.gateway.bedrock-agentcore.<region>.amazonaws.com/mcp`), not directly to the Bazaar endpoint above. The Gateway forwards tool calls to the Bazaar target.

For tool behavior and client-side payment handling, see [Bazaar MCP Server](/api-reference/v2/rest-api/x402-facilitator/handle-mcp-json-rpc-request) and the [MCP server guide](/x402/mcp-server).

### Setup paths on AWS

Choose one path to register the target. AWS documents each in [Coinbase Bazaar via AgentCore Gateway](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/payments-connect-bazaar.html):

<AccordionGroup>
  <Accordion title="AWS console (Bedrock AgentCore)">
    In the **Amazon Bedrock** console, open **AgentCore** > your **Gateway** > **Targets**:

    1. Choose **Add target**
    2. For **Target type**, select **Integrations**
    3. Select **Coinbase x402 Bazaar** (pre-populated — no manual endpoint entry needed)
    4. Leave **Outbound authentication** as **No Authorization**
    5. Deploy the Gateway and note the Gateway MCP URL for your agent runtime
  </Accordion>

  <Accordion title="AgentCore CLI">
    ```bash theme={null}
    agentcore add gateway-target \
      --name CoinbaseTarget \
      --type mcp-server \
      --endpoint https://api.cdp.coinbase.com/platform/v2/x402/discovery/mcp \
      --gateway MyGateway

    agentcore deploy
    ```
  </Accordion>

  <Accordion title="Control-plane API (Boto3)">
    Use `bedrock-agentcore-control` `create_gateway_target` with an `mcpServer` endpoint pointing at the Bazaar MCP URL. See the full request shape in AWS's [Coinbase Bazaar via AgentCore Gateway](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/payments-connect-bazaar.html) guide.
  </Accordion>
</AccordionGroup>

Once the target is live, configure AgentCore Payments (Payment Manager, Connector, and payments plugin) so agents can automatically settle HTTP 402 responses from Bazaar-discovered endpoints. See AWS's [Process a payment](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/payments-process-payment.html) guide.

## What to read next

**AWS setup and operations**

* [AgentCore payments overview](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/payments.html) — Product overview, use cases, and key features.
* [Prerequisites for AgentCore payments](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/payments-prerequisites.html) — AWS CLI, SDKs, CDP and optional Privy credentials, Cognito/JWT notes.
* [Coinbase Bazaar via AgentCore Gateway](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/payments-connect-bazaar.html) — Full console, CLI, and Boto3 examples for adding the Bazaar target.
* [AgentCore Gateway](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway.html) — Ingress auth, targets, and Gateway MCP URL format.
* [Create a Payment Manager and Connector](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/payments-create-manager.html) — Wire CDP credentials from AgentCore Identity into a payments flow.

**CDP protocol, wallets, and templates**

* [x402 Bazaar (Discovery Layer)](/x402/bazaar) — Catalog, search, and MCP semantics.
* [Delegated signing](/wallets/using-wallets/delegated-signing) — How end-user delegation grants work (required for AgentCore Payments with CDP).
* [CDP + AgentCore template](https://github.com/coinbase/cdp-agentcore-template) — Forkable Next.js reference app for sign-in, funding, and per-wallet delegation.
* [Quickstart for buyers](/x402/quickstart-for-buyers) — Paying for x402 resources outside AgentCore.
* [Network support](/x402/network-support) — Chains and facilitator base URL for verify/settle.