🤖 Agent0

Demo:

Disconnected

Configuration

AWS Bedrock

Region:

Model:

MCP Servers

Available Tools

Actions

Welcome to Agent0

Configure your AWS settings and connect to MCP servers to get started.

🔧 Connect to multiple MCP servers

💬 Chat with Claude via AWS Bedrock

🛠️ Use tools from connected servers

Claude is thinking...

Conversation History

Enter Demo Name

Please enter a demo name to continue. This identifies your Okta tenant.

Redirecting to Okta

Please wait while we redirect you to authenticate...

Connecting to MCP Server

Please wait while we establish the connection...

🔍 Cross-App Access Token Flow Inspector

OIDC Authentication

User authenticates via Agent0 auth server, receives ID token

🎫 ID Token (Agent0)

Issuer: Agent0 Auth Server

Contains: User identity

Status: User logged in

↓

Exchange #1: JAG Request

ID token → Agent0 Auth Server → IDP policy check → JAG token (RFC 8693)

🔑 Subject Token (Same as ID Token)

Issuer: Agent0 Auth Server

Purpose: Sent as subject for JAG request

Sent to: Agent0 Auth Server → IDP

⤵ Policy Evaluation

📜 JAG Token (ID-JAG)

Issuer: Agent0 Auth Server

Type: JWT Authorization Grant

Represents: IDP-approved access grant

⚠️ Token exchange failed

↓

Exchange #2: Access Token Request

JAG token exchanged at Todo0 auth server for access token

📜 JAG Token (Input)

Issuer: Agent0 Auth Server

Purpose: Exchange for access token

Sent to: Todo0 Auth Server

⤵ Token exchange request to Todo0 auth server

✅ MCP Access Token

Issuer: Todo0 Auth Server

Audience: Todo0 API

Used for: API calls (in loop)

⚠️ Token not available

↓

API Access (Loop)

Agent0 uses Access Token → Todo0 API validates → Returns data

🔄

Authorization: Bearer {Access Token}
Endpoint: GET /api/todos
Response: Todo items JSON

⚠️ API calls blocked - no access token available

Token Details

Header

Payload

Raw Token

Loading tokens...

⚠️ No tokens available. Please authenticate first.