One high-performance gateway for service, LLM, and MCP traffic.
An open source HTTP and gRPC gateway that handles traditional application traffic and AI-native protocols in one data plane. Route, secure, observe, and govern services, LLM provider traffic, MCP tools, and agent-to-agent communication without stitching together separate gateways.
LLM Gateway
Route to OpenAI, Claude, Gemini, or any self-hosted model with credentialing and failover.
MCP / A2A
Native protocol support for Model Context Protocol and agent-to-agent traffic.
APIs & Services
HTTP, gRPC, and TCP traffic — observable by default with mTLS and OIDC built in.
AAIF
Solo.io
Microsoft
Alibaba
Adobe
AWS
Cisco
Salesforce
Huawei
AmdocsEverything you need for agent traffic — in one binary.
One control plane for service traffic, LLM routing, MCP, A2A, and inference — with the policy, observability, and cost controls that a platform team actually trusts.
ROUTE
One data plane for HTTP, gRPC, and TCP services, every major LLM provider, self-hosted inference, and the MCP and A2A protocols your agents speak.
Run any north–south or east–west traffic through a single binary. Zero-config TLS, OIDC, mTLS-rotation, native Envoy compatibility for those who want it.
Drop-in OpenAI-compatible API in front of OpenAI, Anthropic, Bedrock, Gemini, Vertex, and OSS Llama runs — with token budgets, semantic caching, and prompt redaction.
Latency-aware, cost-aware, model-aware routing for self-hosted inference. Plug-in vLLM, TGI, Triton; agentgateway picks the warmest replica.
Treat MCP servers like microservices: discover them, sign and scope every tool call, and keep an audit trail of what agents invoked.
Route agent-to-agent invocations between LangChain, CrewAI, ADK, and your own runtime, with identity and tracing on every hop.
SECURE
Authenticate, authorize, and redact on every hop — not just at the edge.
The policy layer itself: what attaches where, how rules merge, and how a decision is reached on every hop — with tamper-evident audit logs.
Validate JWTs at the edge and pull claims into routing and authorization decisions, or hand off a full OIDC login flow for browser traffic.
Issue and rotate API keys per consumer, or fall back to basic auth for internal tooling that cannot speak OIDC.
Delegate the allow/deny call to your own service over gRPC or HTTP, so existing entitlement logic stays where it already lives.
Express allow/deny rules over method, path, headers, and JWT claims — evaluated per hop, on both HTTP and network listeners.
Authenticate callers into MCP servers and scope which tools each identity may invoke, so an agent cannot reach past its mandate.
Terminate TLS at the listener and originate verified TLS or mTLS to every backend, with certificate rotation handled for you.
Browser-facing protections for gateways that serve web apps directly: origin allow-lists and CSRF token enforcement.
OBSERVE
Know exactly what happened on every request, and debug it without a restart.
OpenTelemetry by default. Token-usage histograms on Prometheus, traces in Jaeger, and request logs with status, latency, and token counts — each carrying the realized USD cost.
See what a proxy actually loaded, without a restart. proxy trace taps live requests into an interactive terminal view, proxy config dumps runtime state, and log levels change on the fly.
GOVERN
Decide what each caller may invoke, inspect what flows through, and know how overlapping rules resolve.
Decide which tools on which MCP targets a caller may reach, and rewrite or restrict what the server exposes downstream.
Inspect tool calls and responses in flight, blocking prompt injection and unsafe payloads before they reach an agent or a server.
Pattern and model-based checks on LLM prompts and completions, with redaction for anything that should never leave your estate.
COST
Attribute, price, and cap what your agents spend.
Spend control in three stages: attribute it, price it, then enforce it — before the invoice is the first place you find out.
Hard caps per key or team: cut off token consumption and dollar spend once a limit is hit, rather than alerting after the fact.
Issue scoped keys per team, app, or user so every request carries an owner — the unit that budgets and reports attach to.
Spend, token usage, and traffic in the admin UI, grouped by model, provider, and user, so you can see where the money went.
Per-model input and output pricing, so each request carries a realized USD cost that logs, metrics, traces, and policies can all read.
Getting started
Quick start
Get started with agentgateway in less than 5 minutes — local-first.
MCP connectivity guide
Connect agentgateway to MCP servers with built-in discovery and auth.
Deployment options
Binary, Docker, or Kubernetes — pick what fits your stack.
Popular integrations
"The future won’t be built by standalone agents, MCP servers or LLMs — it’s shaped by their interconnection and ability to work together seamlessly. To unlock their full potential, we must apply policies, ensure control and maintain clear visibility into their interactions. This is where agentgateway plays a pivotal role — bridging not only agent-to-agent (A2A) communication but also agent-to-MCP servers, filling a critical gap in the ecosystem. I look forward to seeing the project’s continued momentum within the Linux Foundation."
"AI agents are rapidly transforming how enterprises work and innovate. To adopt them responsibly at scale, organizations need open and interoperable gateways that provide governance, visibility, and security. Agentgateway delivers the foundation enterprises need. I’m excited to see the community come together to accelerate the open foundation our customers need to scale AI on cloud platforms like CoreWeave."
"Agentic AI demands purpose-built infrastructure, not just another software layer. This requires rethinking compute, storage, and data movement from the ground up, so retrofitting legacy systems doesn’t work. The agentgateway project is a solid step toward that future. We’re happy to see it hosted by the Linux Foundation, where open source and community can drive the adoption and longevity that AI infrastructure requires."
"We are excited to welcome the agentgateway project to the Linux Foundation, ensuring that best practices for agentic workflows remain free and open to all. Agentgateway complements emerging specifications like A2A and MCP, and offers scalable, specification-aligned infrastructure for agent communication thereby empowering customers and developers to build robust agentic workflows across platforms."
"I’m excited to see Solo.io donate the agentgateway project to the Linux Foundation. Open sourcing an AI-native connectivity solution that understands MCP and A2A is a big win for the community. It helps us scale AI responsibly, with the security, flexibility, and governance we need in the real world."
"Building reliable AI agents is a challenge, especially when every step involves non-deterministic calls to LLMs, tools, and autonomous agents. Agentgateway’s integration with OpenTelemetry provides a robust foundation for observability, allowing us to treat each request-response pair as an evaluable unit. This capability is crucial for ensuring system-level accuracy and trustworthiness, paving the way for a true ‘AI mesh’ that empowers teams to scale, secure and optimize their AI workflows."
"One of the biggest open security problems today is how to do MCP security effectively. While there are a lot of problems in this space that the community doesn’t know how to address, the agentgateway project provides a first step toward addressing some of the important issues with basic role-based access control and visibility of actions to MCP servers. I look forward to seeing how this project adapts and evolves to handle the complex, evolving threats in this space under open source governance."
"The rapid evolution of the AI landscape demands robust, vendor-neutral infrastructure for how agents communicate with each other and with external tools. Without it, we risk stifling innovation and adoption. The agentgateway project, hosted by the Linux Foundation, is a crucial step in creating that common ground. We are excited to partner with Solo.io and support a community-driven foundation for the future of interoperable AI."
Ask me anything about agentgateway configuration, features, or usage.
Note: AI-generated content might contain errors; please verify and test all returned information.
Tip: one topic per conversation gives the best results. Use the + button in the chat header to start a new conversation.
What could be improved?
Your feedback helps us improve assistant answers and identify docs gaps we should fix.
Need more help? Join us on Discord: https://discord.gg/y9efgEmppm
Want to use your own agent? Add the Solo MCP server to query our docs directly. Get started here: https://search.solo.io/.