MCP Client Setup

Connecting is a direct streamable-HTTP connection with native OAuth — no mcp-remote proxy needed.

1. Get the gateway URL

The AgentCore Gateway URL is a Tofu output of the mcp stack:

cd infrastructure/resources/aws/lkwiz/mcp
tofu output lkwiz_mcp_gateway_url

2. Add lk-wiz to Claude Code

claude mcp add --transport http lkwiz <gateway-url>

3. Authenticate

In Claude Code, run /mcp, select lkwiz, and choose Authenticate. A browser opens the Cognito Hosted UI where you log in with Google or email/password. Claude Code handles the OAuth flow natively (RFC 9728 discovery + MCP OAuth 2.1).

Once authenticated, the tools become available — ask Claude to "list my lk-wiz workspaces" or "show the post pipeline for workspace X" to confirm the connection.

Claude Desktop

Claude Desktop follows the same model: add the gateway URL as a streamable-HTTP MCP server and authenticate through the browser when prompted.

Requirements

• Your lk-wiz account must be approved (approved: true). Unapproved users can authenticate but every tool call is rejected — see MCP Authentication.
• The tools you can use depend on your role in each workspace.