# Sample Multi Tenant Saas Mcp Server

> Multi-Tenant remote MCP server with Amazon Cognito and remote client with Amazon Bedrock hosted on AWS

- **Type:** MCP server
- **Install:** `agentstack add mcp-aws-samples-sample-multi-tenant-saas-mcp-server`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [aws-samples](https://agentstack.voostack.com/s/aws-samples)
- **Installs:** 0
- **Category:** [Cloud & Infrastructure](https://agentstack.voostack.com/c/cloud-infrastructure)
- **Latest version:** 0.1.0
- **License:** MIT-0
- **Upstream author:** [aws-samples](https://github.com/aws-samples)
- **Source:** https://github.com/aws-samples/sample-multi-tenant-saas-mcp-server

## Install

```sh
agentstack add mcp-aws-samples-sample-multi-tenant-saas-mcp-server
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Multi-Tenant (SaaS) MCP Server Sample

This repository contains a multi-tenant remote MCP server implementation using the Streamable HTTP transport written with the TypeScript SDK.

## MCP Server

A remote MCP server implementation for B2B travel booking with multi-tenant authentication and authorization via Amazon Cognito and OAuth 2.1.

- Node.js with Express and MCP SDK for tools, resources and prompts
- AWS services: ECS, DynamoDB, S3, Cognito
- Protected Metadata Resource handling (**RFC 9728**)
- Multi-tenant architecture with data isolation
- Dynamic client registration (**RFC 7591**)
- OpenID Configuration endpoint to advertise the registration endpoint (**RFC 8414**)

For a detailed architecture overview, see the [MCP Server README](./mcp_server/README.md).

## Deploy

```bash
cd mcp_server/infra
npm install
./deploy.sh
```

Note the output URL (`https://mc-xxx.ecs..on.aws`). Create a user with the manage-users script:

```bash
cd mcp_server/scripts
npm install
node manage-users.js create myuser you+tenantname@example.com
```

The `+tenantname` suffix becomes the tenant ID (see [User Management](./mcp_server/README.md#user-management)).

## Try it

Two ways to connect to the deployed server.

### 1. MCP Inspector

For protocol-level inspection — see tools/resources/prompts, invoke them manually, no LLM in the loop.

```bash
npx @modelcontextprotocol/inspector
```

Open the URL it prints, paste `https://mc-xxx.ecs..on.aws/mcp`, complete the OAuth flow, exercise tools.

### 2. Amazon Quick Suite

For end-to-end chat with the MCP tools. The Quick Suite MCP client handles OAuth 2.1 + PKCE + Dynamic Client Registration automatically.

1. Open Amazon Quick Suite → **Connections** → **Integrations** → **Actions**.
2. Choose **Model Context Protocol** → **+**.
3. **MCP server endpoint**: `https://mc-xxx.ecs..on.aws/mcp`
4. **Authentication**: User authentication (OAuth). Leave credentials blank — DCR will register Quick automatically.
5. Approve in the Cognito hosted UI when prompted.
6. Quick discovers all tools (`whoami`, `find_flights`, `book_flight`, `list_hotels`, `book_hotel`, `list_bookings`, `loyalty_info`).

Full setup reference: [Model Context Protocol (MCP) integration](https://docs.aws.amazon.com/quick/latest/userguide/mcp-integration.html).

## Disclaimer

This repository is for demonstration and reference purposes only. The code and configurations provided are not intended for production use without proper review, testing, and security considerations.

## Contributing

See [CONTRIBUTING](CONTRIBUTING.md#security-issue-notifications) for more information.

## License

This library is licensed under the MIT-0 License. See the LICENSE file.

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [aws-samples](https://github.com/aws-samples)
- **Source:** [aws-samples/sample-multi-tenant-saas-mcp-server](https://github.com/aws-samples/sample-multi-tenant-saas-mcp-server)
- **License:** MIT-0

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-aws-samples-sample-multi-tenant-saas-mcp-server
- Seller: https://agentstack.voostack.com/s/aws-samples
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.