MCP makes it easier for AI agents to interact with tools, but enterprise production systems require much more than a protocol. This architecture deep dive explores how to build a governed MCP tool layer on AWS with AgentCore Gateway, identity propagation, authorization, private connectivity, observability, reliability and human approval.