Sysdig MCP server

If you don't have a Sysdig Secure account, contact us here: https://www.sysdig.com/contact-us 

Then, you will need to gather your API_TOKEN from your Sysdig Secure account, review more details here: https://github.com/sysdiglabs/sysdig-mcp-server?tab=readme-ov-file#configuration 

In order to the Sysdig MCP server to access Sysdig Secure data you need to configure specific environment variables for your AgentCore agent:

• SYSDIG_MCP_API_TOKEN=<SYSDIG-SECURE-TOKEN>
• SYSDIG_MCP_API_HOST= <SYSDIG-SECURE-INSTANCE> (e.g., https://us2.app.sysdig.com )

Note: The Sysdig MCP server requires internet connectivy to communicate with Sysdig Secure's backend.

This is an example in how to create it through the AWS CLI, please ensure you replace the correct placeholders for every command:

1 - Create the MCP server (you will need configured the environment variables mentioned previously).

aws bedrock-agentcore-control create-agent-runtime --region <YOUR_REGION>
--agent-runtime-name "sysdig_mcp_server" --description "Sysdig MCP Server"
--role-arn "<YOUR_AgentCore_Runtime_Service_ARN>"
--agent-runtime-artifact containerConfiguration={containerUri=709825985650.dkr.ecr.us-east-1.amazonaws.com/sysdig/sysdig-mcp-server:v1.0.6}
--protocol-configuration serverProtocol=MCP
--network-configuration networkMode=PUBLIC
--environment-variables SYSDIG_MCP_API_HOST="${SYSDIG_MCP_API_HOST}",SYSDIG_MCP_API_TOKEN="${SYSDIG_MCP_API_TOKEN}"

Note: Copy the agentRuntimeArn as it will be needed for the next steps.

2 - List that the agent is running and working as expected.

• Here you can gather the "agentRuntimeArn" value to be used later in step 3

aws bedrock-agentcore-control list-agent-runtimes

If you haven't done it already, use the previous command to gather the "agentRuntimeArn" value from the resource previously created.

3 - Verify the MCP is working by listing the available tools:

Recommended to use a tool like 'jq' to parse the JSON output in the last command.

PAYLOAD_BASE64=$(echo -n '{"jsonrpc": "2.0", "id": 1, "method": "tools/list", "params": {}}' | base64)

aws bedrock-agentcore invoke-agent-runtime
--agent-runtime-arn "${AGENT_ARN}"
--payload "${PAYLOAD_BASE64}"
--content-type "application/json"
--accept "application/json, text/event-stream"
--qualifier "DEFAULT" output.json && cat output.json | jq .

The output will contain information for all the tools available within the MCP.