Agent gateway
A control point in front of everything an agent can act on (tools, APIs and MCP servers) that governs what it can reach, enforces least privilege and logs its actions.
Used three ways today: the outbound control point for agent actions; an MCP gateway in front of your tool servers; and a registry where agents get their own identities and permissions. The control point and the registry are two views of one job: where rules are enforced vs where they are stored. Once an agent can act, the risk is a real side effect (a write, a payment, a deletion), not just a bad answer.
Also called
- Tool gateway
- MCP gateway
- Tool-access gateway
Often confused with
- LLM gateway An intermediary that your company's calls to models route through; when it holds the only API keys, it is both a control point and a log of every call.
Related
- Stack The shared AI infrastructure that every agent and harness in your company draws on, such as gateways, model access, data, evals, central identity and shared connectors.
How it connects
- Agent gateway reads Agent identity
- Least privilege for AI enforced by Agent gateway
- Tool is governed by Agent gateway
- Agent gateway sits in front of MCP server