Enterprise governed MCP runtime
MCP Gateway puts identity, default‑deny policy, credential brokering, private connectivity, and a complete audit trail in front of every MCP server and REST API your agents touch — so you can say yes to AI without rebuilding governance for each tool.
Why MCP Gateway
One control layer for identity, policy, credentials, connectivity, sessions, and audit — so every team doesn’t rebuild it for every server.
Authorization
Every discovery and tool call is evaluated by the Cedar policy engine. An explicit deny always wins, and anything unmatched is denied — and hidden from discovery, so agents never even learn a capability exists unless policy allows it.
Service‑account, user‑delegated, agent‑scoped, and workload‑mapped credentials resolved at the edge — secrets never reach the agent or the audit log.
Turn selected REST operations into governed MCP tools. Host‑allowlisted, schema‑validated, approval‑gated — only what you choose is ever exposed.
Every decision is recorded with its policy version — searchable, exportable, SIEM‑ready, and metadata‑only by design.
Stateful sessions with affinity, reconnect, and drain — plus instant fan‑out revocation that takes effect on the very next request.
Reach private upstreams through direct routes and outbound connectors with SSRF‑safe boundaries — and see the blast radius before you disable one.
Architecture
The control plane owns configuration and approvals. The data plane enforces it on every request — and reports audit straight back.
Built for every workflow
Every governed task is available — and documented — three ways. Click through the console, script the API, or run a command in CI.
Five workspaces — Govern, Access, Operate, Investigate, Settings — for interactive review and investigation.
An OpenAPI 3.1 admin API on :8080 — the same surface the console itself calls.
gatewayctl CLIA scriptable Go CLI for onboarding, policy, diagnostics, and ops — every verb speaks —format json.
Authenticate to your gateway, make your first governed tool call, and watch policy and audit do their work.
Type set in Geist, Source Serif 4, and Departure Mono.