| Deployment model |
Self-hosted on Kubernetes (any cloud, on-prem, air-gapped) |
AWS-managed PaaS, 14 regions |
| Where MCP servers run |
Kubernetes pods in your cluster |
microVMs in AWS infrastructure |
| Cloud lock-in |
None Runs anywhere k8s runs |
AWS-native Tightly coupled to Bedrock and AWS services |
| Pricing model |
Software licensing. OSS Free up to 20 servers. Tiered pricing above. Fixed capacity. |
Consumption-based per service. Runtime at $0.0895/vCPU-hr + $0.00945/GB-hr. Twelve components billed independently. |
| Predictable at scale |
Yes Cost scales with cluster capacity, not request volume |
Conditional Favorable at low/moderate volume; crossover point exists for high-traffic workloads |
| Data sovereignty |
Full Servers, credentials, and traffic stay in your network |
Regional Data resides in selected AWS regions, subject to AWS compliance posture |
| Air-gapped deployment |
Supported |
Not applicable AgentCore is a managed cloud service |
| Time to first MCP server |
Hours. Install k3s, deploy Helm chart, register server. |
Minutes. Push a container, deploy. |
| Session isolation |
Pod-level isolation, namespace policy |
microVM per session Strong tenant isolation |
| Session length limit |
No fixed limit — runs as long as the pod runs |
Up to 8 hours per session |
| Auto-scale to zero |
Not built-in HPA scales replicas, minimums are configurable |
Yes Native to AgentCore Runtime |
| Auth and identity |
Bring your own OAuth/OIDC provider. JWT validation at the Envoy data plane. |
AgentCore Identity (Cognito or external OAuth). Federated identity for tool targets. |
| MCP discovery and inventory |
Roadmap Federation across config files, endpoint inspection, egress logs, and source repos |
Out of scope AgentCore manages what customers register; does not discover shadow MCP |
| Observability |
Standard Kubernetes telemetry: Prometheus, OpenTelemetry, your existing stack |
AgentCore Observability via CloudWatch, OpenTelemetry exports, Datadog/Dynatrace integrations |
| Memory, code interpreter, browser as services |
Out of scope |
Included Managed Memory, Code Interpreter, Browser services |
| Multi-cloud or hybrid |
Yes Same control plane across AWS, GCP, Azure, on-prem |
AWS only |
| Maturity |
Pre-1.0, active development by a small team |
GA since October 2025, mature core with new features still shipping |
| Vendor |
Magertron (independent startup) |
Amazon Web Services |