AgentGateway is an open-source, AI-native proxy and gateway for routing, observing, and governing traffic to and from AI agents, LLM providers, and MCP servers. Built on the A2A and MCP protocols, it provides a unified gateway for LLM consumption, MCP tool federation, agent-to-agent communication, security, and observability. AgentGateway supports multi-provider LLM routing across OpenAI, Anthropic, Google Gemini, AWS Bedrock, and Azure OpenAI with built-in RBAC, JWT authentication, rate limiting, and OpenTelemetry integration.
AgentGateway publishes 7 API contracts indexed on the APIs.io network, including Config API, Debug API, Lifecycle API, and 4 more. Tagged areas include AI Gateway, API Gateway, MCP, LLM, and A2A.
The AgentGateway catalog on APIs.io includes 1 JSON-LD context and 1 Spectral governance ruleset.
AgentGateway’s developer surface includes API reference, code examples, CLI, authentication, changelog, sandbox, developer portal, and 43 more developer resources.
52.9/100developing▬ flatAgent28/100agent awareFront door AI6/6
dominant
Heartbeat84/100
alive
self hosted · Apache-2.0
Full breakdown ↓
scored 2026-11-06 · rubric v0.27.0 · Show this score on your site →
AccessOpen
1 published contract3 Agent Skills10 Features6 Use Cases
Regulatory Posture applies to this provider. Its tags matched the
Horizontal (data, software, accessibility, platform) regime, so
Regulatory Posture carries 15 points of the composite.
If this regime is wrong for your business, say so on your
provider repo — the
applicability map is public and we will correct it.
Open Source Surface applies to this provider. This product is open source and we
read its repository directly, so Open Source Surface carries
10 points of the composite. It is scored from what the repository actually
publishes — a security policy, a contribution guide, a release history, a code of conduct — read live from the
provider rather than inferred from our own catalog pointers.
This facet adds; nothing was taken away to make room for it. An open-source project is not excused from
the commercial facets, because exemption would strip it of the points it does earn.
If we have the wrong repository, or this product is not open source, say so on your
provider repo and we
will drop the facet rather than have you publish against it.
Create-or-Update Ergonomics applies to this provider. This API accepts writes, so it
carries 10 points of the composite. It is scored from the published contracts
themselves: whether a caller can create-or-update in one call, whether the write accepts a key the caller already
holds, and whether the response says which branch ran. Without that, every write needs a search-and-branch in
front of it, and the first time that check is skipped a duplicate record is created.
Scored against the observed mean rather than raw — a provider at the catalog average is unchanged by this facet,
not penalised by it.
The six quality facets above are damped to 65 points between them,
because both conditional facets apply and carry
35 points together. That is why each facet's contribution is shown against a damped
maximum: raising a quality facet moves the composite by 65% of its nominal
weight, not 100%. The full arithmetic is at apis.io/rating/.
Show this score on your site.
It updates itself when the score changes. Paste this where you link to your API docs:
<a href="https://apis.io/providers/agentgateway/"><img src="https://apis.io/badge/agentgateway/card.svg" alt="AgentGateway on APIs.io — Kin Score by API Evangelist"></a>
Other styles, a README pill and a shields.io endpoint are on the badge page.
Raise your score.
Agent readiness — checks not met, largest first (exact, from this profile):
MCP Server+12 pts — deployment.mode + probe verdict on the mcp/ manifest, not the pointer; an unprobed slug falls back to authorship
Idempotency+9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
A2A Agent Card+8 pts — a2a/-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0
Delegated User Identity+6 pts — a served discovery document listing authorization_code in grant_types_supported (served), else an oauth2 authorizationCode flow or openIdConnect declared in an OpenAPI (documented)
Documented Reversibility+6 pts — a reversal operation in the contract, graded up when a window is documented too
5 more unmet checks in the Agent Readiness table above.
Kin Score — facets with the most composite points still available (weight × headroom):
Access Clarityscores 21.1 — up to +15.8 composite points
The Kin Score Market layer reads a provider inside its market:
its position, and how deep its integrations go. Depth is only comparable within a position. Provisional and unweighted:
not part of the Kin Score or agent readiness.
Registered MCP server and declares compatibility are report only — not weighted.
Undeclared means we found nothing we can read, so there is no number: we never infer integrations.
Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.
Routes traffic to OpenAI, Anthropic, Google Gemini, AWS Bedrock, and Azure OpenAI through a unified API with model aliasing, failover, and load balancing.
MCP Gateway
Connects LLMs to tools via Model Context Protocol with static and dynamic routing, tool federation, and stateful MCP sessions.
Agent-to-Agent (A2A) Gateway
Enables secure, governed communication between AI agents using the A2A protocol for multi-agent orchestration.
Inference Routing
Intelligently routes requests to self-hosted models based on GPU utilization and request priority.
Security and Authentication
Provides JWT, OAuth2, API key management, CORS, CSRF protection, MCP authentication, and external authorization support.
Traffic Management
Supports request routing and matching, header manipulation, rate limiting, retries, gRPC routing, traffic splitting, and direct responses.
Observability
Integrates with OpenTelemetry for metrics, traces, and access logging with a built-in Admin UI and debugging tools.
Guardrails
Applies prompt guards, content filtering, regex filters, moderation policies, and custom webhooks for AI safety.
Cost Controls
Tracks budget and spend limits per user, team, or application with RBAC-based controls on LLM consumption.
Prompt Enrichment
Supports prompt templates and enrichment for standardizing and augmenting requests before routing to LLM providers.
Overlays applied on top of this provider's contracts. Each card says who wrote it: a document the provider publishes, or one API Evangelist derived or generated.
Route requests across multiple LLM providers with a single API, enabling failover, load balancing, and cost optimization without changing client code.
MCP Tool Federation
Aggregate tools from multiple MCP servers behind a single gateway endpoint, enabling agents to discover and invoke tools from any connected MCP server.
Enterprise AI Governance
Apply organization-wide security policies, rate limits, budget controls, and content filters to all AI agent traffic through a centralized gateway.
REST API to MCP Conversion
Convert existing REST APIs into MCP-native tool endpoints that AI agents can discover and invoke through the Model Context Protocol.
Multi-Agent Orchestration
Enable secure agent-to-agent communication using the A2A protocol, allowing specialized agents to delegate tasks to each other through the gateway.
Observability and Debugging
Collect unified telemetry across all AI agent and LLM interactions to monitor cost, latency, and behavior at scale.
aid: agentgateway
name: AgentGateway
description: AgentGateway is an open-source, AI-native proxy and gateway for routing, observing, and governing traffic to
and from AI agents, LLM providers, and MCP servers. Built on the A2A and MCP protocols, it provides a unified gateway for
LLM consumption, MCP tool federation, agent-to-agent communication, security, and observability. AgentGateway supports multi-provider
LLM routing across OpenAI, Anthropic, Google Gemini, AWS Bedrock, and Azure OpenAI with built-in RBAC, JWT authentication,
rate limiting, and OpenTelemetry integration.
url: https://raw.githubusercontent.com/api-evangelist/agentgateway/refs/heads/main/apis.yml
humanURL: https://agentgateway.dev/
type: Index
deliveryModel:
model: self-hosted
license: Apache-2.0
open_source: true
commercial: false
callable_host: false
label: Self-hosted open source · you run it yourself
confidence: high
source:
- license
- openapi
generated: '2026-08-28'
method: derived
accessModel:
pricing: unknown
onboarding: open
trial: false
try_now: false
public: false
gated: none
gated_source:
- onboarding
label: Open access
confidence: medium
try_now_blocked_by: loopback
source:
- authentication
- rate-limits
- security
- sandbox
generated: '2026-11-06'
method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/agentgateway.png
tags:
- AI Gateway
- API Gateway
- MCP
- LLM
- A2A
- Open Source
- CNCF
- Observability
- Security
tags_raw:
- AI Gateway
- API Gateway
- MCP
- LLM
- Agent-to-Agent
- Open Source
- CNCF
- Observability
- Security
- Open-Source
created: '2026-03-27'
modified: '2026-08-30'
specificationVersion: '0.23'
apis:
- aid: agentgateway:agentgateway
name: AgentGateway
x-base-url-note: 'agentgateway is self-hosted: there is no callable hosted API host. The five admin/debug API entries below
carry baseURL http://127.0.0.1:15000, which is the documented default admin bind address and matches their OpenAPI servers[]
blocks. They previously carried https://agentgateway.dev, which serves documentation only - probed 2026-08-30, https://agentgateway.dev/config_dump
returns 404. This entry keeps the project site as its base because the data plane''s port is whatever the operator configures
(the docs'' examples use 3000).'
description: AgentGateway provides AI-native gateway capabilities for routing LLM traffic, federating MCP tools, enabling
agent-to-agent communication, and applying security and observability controls across AI agent infrastructure.
humanURL: https://agentgateway.dev/
tags:
- AI Gateway
- LLM Routing
- MCP
- A2A
- Security
- Observability
tags_raw:
- AI Gateway
- LLM Routing
- MCP
- Agent-to-Agent
- Security
- Observability
properties:
- type: Documentation
url: https://agentgateway.dev/docs/
- type: GettingStarted
url: https://agentgateway.dev/docs/quickstart/
- type: GitHubRepository
url: https://github.com/agentgateway/agentgateway
- type: APIReference
url: https://agentgateway.dev/docs/standalone/latest/reference/
- type: JSONSchema
url: https://agentgateway.dev/schema/config
- aid: agentgateway:agentgateway-config-api
name: AgentGateway Config API
description: The Config API from AgentGateway — 1 operation(s) for config.
humanURL: https://agentgateway.dev/
baseURL: http://127.0.0.1:15000
tags:
- Config
properties:
- type: OpenAPI
url: openapi/agentgateway-config-api-openapi.yml
- type: Overlay
url: overlays/agentgateway-config-api-overlay.yaml
- aid: agentgateway:agentgateway-debug-api
name: AgentGateway Debug API
description: The Debug API from AgentGateway — 2 operation(s) for debug.
humanURL: https://agentgateway.dev/
baseURL: http://127.0.0.1:15000
tags:
- Debug
properties:
- type: OpenAPI
url: openapi/agentgateway-debug-api-openapi.yml
- type: Overlay
url: overlays/agentgateway-debug-api-overlay.yaml
- aid: agentgateway:agentgateway-lifecycle-api
name: AgentGateway Lifecycle API
description: The Lifecycle API from AgentGateway — 1 operation(s) for lifecycle.
humanURL: https://agentgateway.dev/
baseURL: http://127.0.0.1:15000
tags:
- Lifecycle
properties:
- type: OpenAPI
url: openapi/agentgateway-lifecycle-api-openapi.yml
- type: Overlay
url: overlays/agentgateway-lifecycle-api-overlay.yaml
- aid: agentgateway:agentgateway-logging-api
name: AgentGateway Logging API
description: The Logging API from AgentGateway — 1 operation(s) for logging.
humanURL: https://agentgateway.dev/
baseURL: http://127.0.0.1:15000
tags:
- Logging
properties:
- type: OpenAPI
url: openapi/agentgateway-logging-api-openapi.yml
- type: Overlay
url: overlays/agentgateway-logging-api-overlay.yaml
- aid: agentgateway:agentgateway-memory-api
name: AgentGateway Memory API
description: The Memory API from AgentGateway — 1 operation(s) for memory.
humanURL: https://agentgateway.dev/
baseURL: http://127.0.0.1:15000
tags:
- Memory
properties:
- type: OpenAPI
url: openapi/agentgateway-memory-api-openapi.yml
- type: Overlay
url: overlays/agentgateway-memory-api-overlay.yaml
- aid: agentgateway:agentgateway-profiling-api
name: AgentGateway Profiling API
description: The Profiling API from AgentGateway — 2 operation(s) for profiling.
humanURL: https://agentgateway.dev/
baseURL: http://127.0.0.1:15000
tags:
- Profiling
properties:
- type: OpenAPI
url: openapi/agentgateway-profiling-api-openapi.yml
- type: Overlay
url: overlays/agentgateway-profiling-api-overlay.yaml
common:
- type: Website
url: https://agentgateway.dev/
- type: APIReference
url: https://agentgateway.dev/docs/standalone/latest/reference/
- type: TermsOfService
url: https://lfprojects.org/policies/terms-of-use/
- type: PrivacyPolicy
url: https://www.linuxfoundation.org/legal/privacy-policy
- type: Charter
url: https://github.com/agentgateway/agentgateway/blob/main/CHARTER.md
- type: JSONSchema
url: https://agentgateway.dev/schema/config
title: Configuration Schema (LocalConfig) - first-party, JSON Schema draft 2020-12, 302 definitions
- type: JSONSchema
url: json-schema/agentgateway-config-schema.json
title: Configuration Schema (LocalConfig) - verbatim capture of https://agentgateway.dev/schema/config
- type: JSONStructure
url: json-structure/agentgateway-route-structure.json
- type: Examples
url: https://github.com/agentgateway/agentgateway/tree/main/examples
- type: SpectralRules
url: rules/agentgateway-jsonschema-spectral-rules.yml
- type: Plans
url: plans/agentgateway-plans-pricing.yml
- type: RateLimits
url: rate-limits/agentgateway-rate-limits.yml
- type: FinOps
url: finops/agentgateway-finops.yml
- type: Packages
url: packages/agentgateway-packages.yml
- type: CLI
url: cli/agentgateway-cli.yml
- type: Authentication
url: authentication/agentgateway-authentication.yml
- type: Conventions
url: conventions/agentgateway-conventions.yml
- type: Conformance
url: conformance/agentgateway-conformance.yml
- type: ErrorCatalog
url: errors/agentgateway-problem-types.yml
- type: Lifecycle
url: lifecycle/agentgateway-lifecycle.yml
- type: Deprecation
url: https://agentgateway.dev/docs/standalone/latest/reference/release-notes/
- type: ChangeLog
url: changelog/agentgateway-changelog.yml
- type: DataModel
url: data-model/agentgateway-data-model.yml
- type: Sandbox
url: sandbox/agentgateway-sandbox.yml
- type: Webhooks
url: webhooks/agentgateway-webhooks.yml
- type: Security
url: https://github.com/agentgateway/agentgateway/blob/main/SECURITY.md
- type: VulnerabilityDisclosure
url: security/agentgateway-vulnerability-disclosure.yml
- type: AgentSkill
url: skills/_index.yml
- type: LLMsTxt
url: llms/agentgateway-llms.txt
- type: WellKnown-probe
url: well-known/agentgateway-well-known.yml
note: Probe record only - every /.well-known path 404s. Deliberately NOT type WellKnown, which would assert a served document.
- type: X-MCPServerCandidate
url: mcp/agentgateway-mcp.yml
note: Derived candidate only - agentgateway ships no MCP server of its own. Deliberately NOT type MCPServer.
- type: IssueTracker
url: https://github.com/agentgateway/agentgateway/issues
- type: Releases
url: https://github.com/agentgateway/agentgateway/releases
- type: SecurityPolicy
url: https://github.com/agentgateway/agentgateway/blob/main/SECURITY.md
- type: CodeOfConduct
url: https://github.com/agentgateway/agentgateway/blob/main/CODE_OF_CONDUCT.md
- type: License
name: Apache-2.0
url: https://github.com/agentgateway/agentgateway/blob/main/LICENSE
- type: AgenticAccess
url: agentic-access/agentgateway-agentic-access.yml
- type: DomainSecurity
url: security/agentgateway-domain-security.yml
- type: GitHubOrganization
url: https://github.com/agentgateway
- type: JSONSchema
url: https://raw.githubusercontent.com/api-evangelist/agentgateway/refs/heads/main/json-schema/agentgateway-llm-backend-schema.json
title: LLM Backend Schema
- type: JSONSchema
url: https://raw.githubusercontent.com/api-evangelist/agentgateway/refs/heads/main/json-schema/agentgateway-mcp-target-schema.json
title: MCP Target Schema
- type: JSONSchema
url: https://raw.githubusercontent.com/api-evangelist/agentgateway/refs/heads/main/json-schema/agentgateway-route-schema.json
title: Route Schema
- type: JSONLD
url: https://raw.githubusercontent.com/api-evangelist/agentgateway/refs/heads/main/json-ld/agentgateway-context.jsonld
- type: Vocabulary
url: https://raw.githubusercontent.com/api-evangelist/agentgateway/refs/heads/main/vocabulary/agentgateway-vocabulary.yaml
- type: Portal
url: https://agentgateway.dev/
- type: Documentation
url: https://agentgateway.dev/docs/
- type: GettingStarted
url: https://agentgateway.dev/docs/quickstart/
- type: Support
url: https://discord.gg/y9efgEmppm
- type: Features
data:
- name: LLM Gateway
description: Routes traffic to OpenAI, Anthropic, Google Gemini, AWS Bedrock, and Azure OpenAI through a unified API with
model aliasing, failover, and load balancing.
- name: MCP Gateway
description: Connects LLMs to tools via Model Context Protocol with static and dynamic routing, tool federation, and stateful
MCP sessions.
- name: Agent-to-Agent (A2A) Gateway
description: Enables secure, governed communication between AI agents using the A2A protocol for multi-agent orchestration.
- name: Inference Routing
description: Intelligently routes requests to self-hosted models based on GPU utilization and request priority.
- name: Security and Authentication
description: Provides JWT, OAuth2, API key management, CORS, CSRF protection, MCP authentication, and external authorization
support.
- name: Traffic Management
description: Supports request routing and matching, header manipulation, rate limiting, retries, gRPC routing, traffic
splitting, and direct responses.
- name: Observability
description: Integrates with OpenTelemetry for metrics, traces, and access logging with a built-in Admin UI and debugging
tools.
- name: Guardrails
description: Applies prompt guards, content filtering, regex filters, moderation policies, and custom webhooks for AI
safety.
- name: Cost Controls
description: Tracks budget and spend limits per user, team, or application with RBAC-based controls on LLM consumption.
- name: Prompt Enrichment
description: Supports prompt templates and enrichment for standardizing and augmenting requests before routing to LLM
providers.
- type: UseCases
data:
- name: Unified LLM Routing
description: Route requests across multiple LLM providers with a single API, enabling failover, load balancing, and cost
optimization without changing client code.
- name: MCP Tool Federation
description: Aggregate tools from multiple MCP servers behind a single gateway endpoint, enabling agents to discover and
invoke tools from any connected MCP server.
- name: Enterprise AI Governance
description: Apply organization-wide security policies, rate limits, budget controls, and content filters to all AI agent
traffic through a centralized gateway.
- name: REST API to MCP Conversion
description: Convert existing REST APIs into MCP-native tool endpoints that AI agents can discover and invoke through
the Model Context Protocol.
- name: Multi-Agent Orchestration
description: Enable secure agent-to-agent communication using the A2A protocol, allowing specialized agents to delegate
tasks to each other through the gateway.
- name: Observability and Debugging
description: Collect unified telemetry across all AI agent and LLM interactions to monitor cost, latency, and behavior
at scale.
- type: Integrations
data:
- name: OpenAI
description: Route to OpenAI GPT models through the AgentGateway LLM backend with model aliasing and budget controls.
- name: Anthropic
description: Connect to Anthropic Claude models via the unified LLM gateway with failover and load balancing.
- name: Google Gemini
description: Route traffic to Google Gemini models through the AgentGateway multi-provider backend.
- name: AWS Bedrock
description: Integrate with AWS Bedrock for managed LLM access via the AgentGateway routing layer.
- name: Azure OpenAI
description: Route requests to Azure-hosted OpenAI models through the unified gateway API.
- name: Ollama
description: Connect to locally hosted Ollama models for self-hosted inference routing.
- name: vLLM
description: Route to vLLM inference servers with GPU utilization-aware routing for optimal performance.
- name: OpenTelemetry
description: Export metrics, traces, and logs to any OpenTelemetry-compatible observability backend.
- name: Kubernetes Gateway API
description: Deploy and configure AgentGateway on Kubernetes using the standard Gateway API for dynamic configuration.
- type: LlmsText
url: https://agentgateway.dev/llms.txt
- url: https://agentgateway.dev/blog/index.xml
type: Blog
maintainers:
- FN: Kin Lane
email: kin@apievangelist.com
x-enrichment:
date: '2026-08-30'
status: enriched
artifacts_added: 25
pass: local-v1
AgentGateway API — frequently asked questions
Does AgentGateway have an API?
Yes. APIs.io lists 7 APIs from AgentGateway, including AgentGateway, AgentGateway Config API and AgentGateway Debug API, and 4 more.
Is there an OpenAPI specification for the AgentGateway API?
Yes. APIs.io indexes 6 OpenAPI specifications for AgentGateway, each linked for download from this page.
How do I authenticate with the AgentGateway API?
AgentGateway uses bearer-token authentication (0 schemes). The details are profiled on APIs.io as Agentgateway Authentication.
Is the AgentGateway API ready for AI agents?
AgentGateway has a Kin Score of 52.9 out of 100 (developing) and an Agent Readiness score of 28.1 (agent-aware), scored by API Evangelist on 2026-11-06.
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.