23
AI ENGINEERING
26 September 2026 · 11 MIN READ
Kiro Trusts One File. Here Is How I Stopped Editing It by Hand
Kiro's enterprise MCP registry is one JSON file behind one URL: whatever is in it, developers see; whatever is not, never starts. That makes the file a control point — and a hand-edited control point is a liability. I rebuilt mine as a generated artifact: AWS Agent Registry as the approved catalog, AgentCore Gateway as the only remote MCP endpoint, and a small publisher that turns approvals into the file Kiro reads. Here are the five decisions, the six things the docs did not tell me, and what I still have not verified.
Read → †⁂