Agentgateway MCP Gateway

Content

Agentgateway is an open-source agentic proxy for AI-native traffic, including MCP, A2A, and LLM gateway use cases. Its MCP gateway mode can connect to downstream MCP servers over stdio, HTTP, SSE, or Streamable HTTP, then expose them through a managed gateway route for MCP clients.

The basic example shows a stdio MCP target being exposed through a gateway that serves Streamable HTTP under /mcp and SSE under /sse. The MCP authentication example shows protected MCP routes with OAuth resource metadata, JWT validation, CORS policy, and provider adaptation for Keycloak, Auth0, and Okta-style environments.

Source Review

• https://github.com/agentgateway/agentgateway
• https://github.com/agentgateway/agentgateway/blob/main/README.md
• https://github.com/agentgateway/agentgateway/blob/main/LICENSE
• https://agentgateway.dev/docs/
• https://agentgateway.dev/docs/quickstart
• https://agentgateway.dev/docs/standalone/latest/mcp/
• https://agentgateway.dev/docs/kubernetes/latest
• https://github.com/agentgateway/agentgateway/blob/main/examples/README.md
• https://github.com/agentgateway/agentgateway/blob/main/examples/basic/README.md
• https://github.com/agentgateway/agentgateway/blob/main/examples/basic/config.yaml
• https://github.com/agentgateway/agentgateway/blob/main/examples/mcp-authentication/README.md
• https://github.com/agentgateway/agentgateway/blob/main/examples/mcp-authentication/config.yaml
• https://github.com/agentgateway/agentgateway/blob/main/crates/agentgateway/src/mcp/streamablehttp.rs
• https://github.com/agentgateway/agentgateway/blob/main/schema/cel.md
• https://github.com/agentgateway/agentgateway/releases
• https://github.com/agentgateway/agentgateway/pkgs/container/agentgateway

These sources were reviewed on 2026-06-06. Prefer the live repository, README, docs, MCP docs, Kubernetes docs, basic example, MCP authentication example, Streamable HTTP implementation, CEL schema, GitHub Releases, and GHCR package page for current setup, transport, auth, policy, and deployment behavior.

Features

• Proxy stdio MCP servers and expose them over gateway-managed HTTP routes.
• Proxy remote MCP servers and serve OAuth protected-resource metadata.
• Aggregate multiple MCP targets behind one gateway endpoint.
• Serve MCP traffic over Streamable HTTP and SSE.
• Add MCP authentication with JWT validation, JWKS, resource metadata, Keycloak/Auth0/Okta provider adaptation, and DCR-related endpoints.
• Apply CORS, TLS, API key, JWT, RBAC, and CEL policy controls.
• Inspect MCP request context such as tool names, arguments, results, prompts, resources, method names, and session IDs for policy and logging.
• Deploy standalone or with the Kubernetes controller and Gateway API support.

Installation

Install from the upstream release or container path. The published container package can be pulled with:

docker pull ghcr.io/agentgateway/agentgateway

Configure a reviewed MCP backend in agentgateway, start the gateway, and connect your MCP client to the exposed route:

{
  "mcpServers": {
    "agentgateway": {
      "url": "LOCAL_AGENTGATEWAY_MCP_URL",
      "headers": {
        "Authorization": "Bearer AGENTGATEWAY_MCP_TOKEN"
      }
    }
  }
}

Follow the upstream quickstart, MCP docs, basic example, and MCP authentication example for the current config schema, route paths, auth settings, and Kubernetes deployment path.

Use Cases

• Put one governed gateway in front of several local or remote MCP servers.
• Convert a stdio-only MCP server into a Streamable HTTP or SSE endpoint for clients that cannot spawn the process directly.
• Add OAuth/JWT protection and resource metadata to remote MCP access.
• Apply CEL/RBAC policy to tool calls, prompts, resources, and request context.
• Run MCP gateway routing as part of a Kubernetes Gateway API deployment.

Safety and Privacy

Agentgateway sits on the trust boundary between clients and tools. Review every target, route, CORS rule, auth issuer, audience, JWKS URL, resource metadata field, TLS setting, and CEL policy before exposing it outside a local lab. Stdio targets can spawn commands on the gateway host, and aggregated targets can make a single endpoint much more powerful than any individual server appears.

Observability and policy inspection are useful, but they can expose sensitive request details. MCP tool arguments, results, prompts, resource names, session IDs, request/response bodies, JWT claims, API keys, and upstream credentials may be visible to logs, traces, policy expressions, or model providers through the MCP client.

Duplicate Check

No agentgateway/agentgateway entry, Agentgateway MCP Gateway entry, agentgateway MCP proxy entry, or matching source URL was found in content/mcp.

• Source repositorygithub.com 2026-07-21T07:17:01+00:00
• Documentationagentgateway.dev
• Submitted by oktofeesh12026-06-06