Eon consolidated access to investigation tools across AWS, GCP and Azure through an authenticated AgentCore gateway, cutting engineer onboarding from two days to about two minutes.
Eon has consolidated access to its engineering investigation tools through a single Amazon Bedrock AgentCore gateway, replacing locally run Model Context Protocol (MCP) servers and separate credentials for individual tools. AWS published the implementation details on October 20, 2026. Eon says new engineers can now reach the tools in about two minutes, compared with roughly two days of setup previously.
The company investigates production incidents across AWS, Google Cloud Platform and Microsoft Azure, using systems such as Grafana, Kubernetes and GitHub. Its previous setup required developers to configure and maintain local MCP processes, while the autonomous site reliability engineering agent needed access to many of the same tools as people. Eon says that supporting more than 100 developers and approximately 10,000 sessions exposed operational challenges as the number of tools and users grew.
The new arrangement uses AgentCore Gateway as a central access point, with AgentCore Runtime hosting tool connections across multiple AWS accounts. Developers connect from tools including Claude Code, Cursor and OpenAI Codex; Eon’s agent connects with a separate identity. Corporate single sign-on and Amazon Cognito provide authentication. Cedar policies at the gateway determine which users and agents may call specific tools, with production systems restricted to read-only access. Limited write actions, such as commenting on a pull request or ticket, require explicit permissions.
The gateway routes approved requests to dozens of MCP targets that expose hundreds of tools. Eon uses cross-account IAM role assumption for connectivity, avoiding the need to configure VPC peering or PrivateLink for each account. The company also describes using two target-listing modes: one for smaller catalogs that need pre-indexed tool schemas, and a dynamic mode for larger catalogs that would otherwise contribute to policy-size limits. Eon notes that dynamic listing does not provide semantic tool search for those targets.
The system is intended to give engineers and the autonomous agent a shared route to investigation data without giving them identical permissions. AWS’s account describes Eon’s deployment and reported results; it does not establish that the same onboarding gains will apply to other organizations.