Skip to content

AWS Agent Registry Attributes

Schema attributes for resources in the AWS Agent Registry dataset (aws:agent-registry).

The registry record is the catalog identity collected in this dataset. The registry container is an access boundary in AWS and isn't collected as a resource.

Resource Nodes

Resource name Resource type Resource ID Identity attribute Display attribute
AWS Agent Registry Agent std:agent aws:agent-registry-record-agent recordArn displayName
AWS Agent Registry MCP std:application aws:agent-registry-record-mcp recordArn displayName

AWS recordType AGENT maps to resource ID aws:agent-registry-record-agent, resource type std:agent, and subtype AGENT. AWS recordType MCP maps to resource ID aws:agent-registry-record-mcp and resource type std:application. MCP records don't include the type attribute. SKILL and CUSTOM record types aren't collected.

Note

The connector collects registry records only. It doesn't collect registry catalogs as resource nodes. It collects records in every lifecycle status, including DRAFT, PENDING_APPROVAL, and APPROVED. The approved-only discoverable view isn't used for inventory. discoverable is true only when status is APPROVED, and that value doesn't filter inventory.

AWS Agent Registry Agent and MCP

Both record types share the attributes below. The resource ID and resource type differ. The type attribute is set only on AGENT records.

Resource ID: aws:agent-registry-record-agent or aws:agent-registry-record-mcp

Resource type: std:agent or std:application

Identity attribute: recordArn

Display attribute: displayName

Attribute Type Description
identity string The registry record ARN.
recordArn string The native registry record ARN.
recordId string The short registry record identifier.
registryArn string The ARN of the containing registry. The connector stores this as an attribute on the record and doesn't collect the registry as a resource.
name string The customer-specified name unique within the registry.
displayName string The human-readable label. When AWS omits it, the connector uses name.
description string Free-text description.
spDescription string Record description, mirrored for SailPoint description promotion.
recordType string AWS semantic type when collected: AGENT or MCP. SKILL and CUSTOM aren't collected.
recordVersion string The customer version string.
status string The registry record lifecycle status. The connector collects records in every lifecycle status.
discoverable boolean true only when status is APPROVED. This attribute doesn't filter inventory.
descriptorKey string Populated primary descriptor: a2aAgentCard, mcpServer, agentSkillsDefinition, or custom.
descriptorData string The primary descriptor payload. The connector stores metadata only and never executes this payload.
descriptorDataSchemaVersion string The schema version declared by the primary descriptor.
tools string The MCP tool inventory payload for MCP records.
a2aSkills string The JSON array from A2A agent card skills for AGENT records.
syncSourceUrl string The registered descriptor synchronization URL.
syncCredentialProviderArn string The IAM or OAuth credential provider ARN used for synchronization.
syncCredentialProviderType string The non-secret credential provider type.
tags string The resource tags on the record.
createdAt string The creation time in ISO-8601 format.
updatedAt string The last modification time in ISO-8601 format.
awsRegion string The AWS region where the resource resides.
awsAccountId string The AWS account ID that owns the resource.
spBusinessApplication string The SailPoint business application. Always AWS Agent Registry.
type string Set only on AGENT records. The value is AGENT. MCP records don't include type.

Resource links are std:access links resolved by AWS aggregation. Native resource ARNs referenced by registry records, such as Bedrock agents, AgentCore resources, or IAM roles, and sync credential provider ARNs are external targets. The connector emits links only. It doesn't duplicate those native Bedrock, AgentCore, or IAM resources in this dataset. The syncs-using-credential link includes a syncCredentialProviderArn attribute.

Resource name Resource type Resource ID Identity form
AWS Agent Registry Record Describes Resource std:access aws:agent-registry-record-describes-resource aws:agent-registry-record-describes-resource#{Record ARN}#{Native Resource ARN}
AWS Agent Registry Record Syncs Using Credential std:access aws:agent-registry-record-syncs-using-credential aws:agent-registry-record-syncs-using-credential#{Record ARN}#{Credential Provider ARN}

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.