How we built an MCP bridge to give our AgentCore-hosted AI agent access to local MCP tools
TL;DR
AI agents on Amazon Bedrock AgentCore run in the cloud, but users' tools and files live on their laptops. Learn how to build a secure MCP bridge that lets a cloud-hosted agent call local MCP servers by tunneling signed messages over the existing WebSocket connection through a browser extension and Chrome native messaging, with no open ports or VPN required.
Nauti's Take
The opportunity is concrete: a cloud-hosted agent gains access to local tools and files without anyone opening ports or setting up a VPN. The risk sits in the chain of browser extension plus Chrome native messaging, which adds attack surface and ties access to a running browser session.
Teams already on the AWS stack with sensitive local data should run a tightly scoped test, while everyone else is better off waiting for vendor-neutral bridges.
Sources
