--- title: "Building a Secure MCP Server on AWS for a Million-Company B2B Platform" url: https://daily.dev/posts/building-a-secure-mcp-server-on-aws-for-a-million-company-b2b-platform-eonkprxzw source_url: https://www.infoq.com/articles/secure-mcp-server-aws type: article source: "InfoQ" published: 2026-05-18T11:05:02.032Z updated: 2026-05-18T11:05:29.011Z tags: ["aws", "golang", "graphql", "mcp"] reading_time: 25 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Building a Secure MCP Server on AWS for a Million-Company B2B Platform **[InfoQ](https://daily.dev/sources/infoq)** · 25 min read · 0 upvotes · 0 comments ## Summary A detailed engineering account of building a production-grade MCP server on AWS for a B2B intelligence platform with over one million company profiles. Key design decisions include strict read/write tool separation, a default-deny --allow-mutations flag, OIDC-based authentication via AppSync, and a layered testing strategy using mocked GraphQL clients plus MCP Inspector for real-backend validation. The post covers nine narrowly scoped tools, normalization bugs caught by capturing GraphQL variables in tests, a production failure (Lambda null-pointer error) only caught through integration testing, rate limiting for AI search, and structured logging practices. Practical recommendations emphasize treating the MCP layer as a first-class interface rather than a thin API wrapper. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [8 Tips and Best Practices for MCP Server Development](https://daily.dev/posts/8-tips-and-best-practices-for-mcp-server-development-2g4tioqfz) · Nordic APIs · 3 upvotes · 0 comments - [The Real API Design Struggle Continues with MCP](https://daily.dev/posts/the-real-api-design-struggle-continues-with-mcp-ezuctvp9o) · API Evangelist · 1 upvotes · 0 comments --- Tags: [#aws](https://daily.dev/tags/aws), [#golang](https://daily.dev/tags/golang), [#graphql](https://daily.dev/tags/graphql), [#mcp](https://daily.dev/tags/mcp) [View this post on daily.dev](https://daily.dev/posts/building-a-secure-mcp-server-on-aws-for-a-million-company-b2b-platform-eonkprxzw)