Gateways and proxies
Vendors of gateways, proxies and control planes that sit between MCP clients and servers. 13 vendors typed here by main layer, each read on its own pages on 5 November 2026 and listed A to Z: Agent Router, agentgateway, Docker, IBM ContextForge, Kong, LiteLLM, Microsoft Azure, Mintive, Obot, Pomerium, Portkey, Speakeasy and Teleport.
Of these, 11 state at least one standard on the pages read, and 9 publish a price for at least one product. Other layers they also cover: host or runtime (4), registry or directory (5) and auth provider (1). Mintive and Obot publish no price on the pages read.
Gateways and proxies
| Vendor | What it does for this layer | Pricing | Ora score |
|---|---|---|---|
| Agent Router | Agent Router, the renamed Envoy AI Gateway, is an open-source Envoy-based router that gives agents one OpenAI-compatible API for models and an MCPRoute gateway that aggregates and filters MCP servers. | open source, Apache-2.0 as of 2026-11-05 | no cached score |
| agentgateway | agentgateway is an open-source Rust proxy, hosted as a Linux Foundation project, that routes and secures MCP, A2A, LLM and ordinary HTTP or gRPC traffic in one data plane. | open source, Apache-2.0 as of 2026-11-05 | 50 (C) scanned 2026-11-01 |
| Docker | Docker packages MCP servers as container images in its MCP Catalog and runs them through the open-source MCP Gateway, which starts each server in an isolated container and injects credentials per call. | open source, MIT as of 2026-11-05 | 69 (C) scanned 2026-10-11 |
| IBM ContextForge | ContextForge is IBM's open-source registry and proxy that federates MCP servers, A2A agents and REST or gRPC APIs behind one MCP endpoint with guardrails, plugins and observability. | open source, Apache-2.0 as of 2026-11-05 | no product domain |
| Kong | Kong turns APIs behind Kong Gateway or published in its Dev Portal into MCP servers, proxies MCP traffic with the AI MCP Proxy plugin, and lists an AI Registry product, on-premises or in Konnect. | AI Gateway Enterprise as of 2026-11-05 | 71 (B) scanned 2026-11-01 |
| LiteLLM | LiteLLM is an open-source, self-hosted AI gateway whose proxy includes an MCP Gateway: one fixed endpoint for MCP tools, access controlled by API key and team, usable with any model LiteLLM routes. | price not read | 73 (B) scanned 2026-11-01 |
| Microsoft Azure | Microsoft Azure exposes REST APIs as remote MCP servers through API Management's AI gateway, hosts MCP tool functions with the Azure Functions MCP extension, and publishes an open-source MCP Gateway for Kubernetes. | open source, MIT as of 2026-11-05 | 24 (F) scanned 2026-10-15 |
| Mintive | Mintive, formerly MintMCP, sells a managed MCP gateway that hosts approved MCP servers, groups them into role-based bundles, gives agents their own credentials and logs every call. | no published price | no cached score |
| Obot | Obot is an open-source platform that hosts MCP servers, exposes them through a governed MCP gateway as virtual MCP servers, and keeps MCP and Agent Skills catalogs behind the MCP Registry API. | no published price | 67 (C) scanned 2026-10-09 |
| Pomerium | Pomerium is an identity-aware proxy that puts internal or third-party MCP servers behind one gateway, runs downstream OAuth 2.1 and upstream OAuth for them, and limits tool calls by policy. | per user per month as of 2026-11-05 | 59 (C) scanned 2026-08-30 |
| Portkey | Portkey, now presented as Palo Alto Networks Prisma AIRS AI Gateway, runs an MCP Gateway with a central registry of servers and tools, identity-provider sign-in and per-user tool policy, self-hosted or managed. | open source, MIT as of 2026-11-05 | 69 (C) scanned 2026-10-20 |
| Speakeasy | Speakeasy now sells an AI control plane centred on an MCP gateway that discovers the MCP servers employees use, promotes approved ones into an internal registry and provisions them by IdP role. | usage, no platform fee as of 2026-11-05 | 92 (A) scanned 2026-10-30 |
| Teleport | Teleport enrolls MCP servers as resources in a Teleport cluster, so engineers and AI clients reach them through Teleport with role-based permissions, audit and short-lived identity. | price not read | 59 (C) scanned 2026-08-25 |
Typed elsewhere, also covering this layer
Gateways and proxies