Fetching from the wire…
01
02
03
04
05
06
07
08
Infra2026-09-15 · source-backed
AgentCore Identity added a Consent portal and a session binding endpoint for AgentCore Gateway on September 14, so teams building three-legged OAuth flows no longer host their own session binding infrastructure (AWS). Users authenticate once against a corporate IdP, then grant per-service consent to providers like GitHub and Slack without returning to the IDE; any OAuth 2.0 provider configured as a gateway target works. End-user delegated consent has been one of the messier parts of shipping agents against third-party APIs.
Each link below shares sources, entities, or timing with this story.
Hudson Rock got hold of the archive and counted it. 433,909 files. 118,829 CI runner dumps traced to 2,488 corporate domains. AWS keys, Salesforce client secrets, Slack signing secrets, Azure environment variables, and AI provider API keys belonging to NVIDIA, Volkswagen, Micr...
The walkthrough covers implementing MCP tools, wiring authentication, and deploying with AWS CDK against Bedrock AgentCore and Mistral AI Studio. Steal the two-layer JWT pattern: agent identity and end-user identity as separate token layers. Most MCP server tutorials hand-wave...
Bugbot now finds ~10% more bugs per review (0.62 vs 0.56) at ~22% lower cost per run. A new /review flow runs Bugbot and Security Review before push, dedups against the eventual PR, and supports incremental "only what's new" review. Cursor also added always-on Automations with...
AgentCore Runtime provides the serverless, session-isolated MCP host and AgentCore Gateway exposes it behind one secure endpoint any MCP Apps-compatible host can reach. The sample, Unicorn Rentals, backs its widgets with Lambda and DynamoDB and renders identically in ChatGPT o...
The companion post reports that across all Claude Code usage, sessions now run 9x longer between interruptions than under the previous default, and at Gusto roughly 10% of session transcripts contained at least one auto-mode denial. The classifier fires without stalling legiti...
AWS's September 11 walkthrough pairs its DevOps Agent with AgentCore Evaluations, aimed at a specific gap: "an agent can successfully invoke Amazon Bedrock, call every tool without errors, and return a response while completely misunderstanding what the user needs." Thirteen L...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.