Automating AWS Agent Registry updates with push-based architecture

This post describes an event-driven pipeline using AWS CloudTrail, Amazon EventBridge, and AWS Lambda that detects Amazon Bedrock AgentCore UpdateAgentRuntime events and syncs MCP server tool schemas into AWS Agent Registry records, supporting both single- and multi-account setups. The Lambda extracts the runtime ARN, obtains an OAuth bearer token via AgentCore Identity, calls the MCP server's initialize and tools/list methods, then updates the matching APPROVED registry record only when normalized tool definitions differ. Updated records revert to Draft status and require curator approval before becoming discoverable, and the post notes limitations such as no automatic registration of new servers and no retry on cold starts.