Agent tool / platformFree source toolLiveFrom public docs
agentgateway
Linux Foundation
Open-source proxy for agent and tool traffic over MCP and A2A, with CEL policy.
Overview
agentgateway federates MCP tools and A2A agents behind one proxy and adds security, observability and governance: JWT, API-key and OAuth authentication, fine-grained RBAC with a CEL policy engine, and OpenTelemetry metrics, logs and traces. Runs standalone or on Kubernetes.
Production criteria
| Approval gatesCan a person or policy hold an action until it is approved? | Not claimed Not documented by the vendor or not yet reviewed. |
|---|---|
| Restart recoveryDoes work resume after a crash or redeploy without repeating finished steps? | Not claimed Not documented by the vendor or not yet reviewed. |
| Evidence trailCan you inspect what ran, with what inputs, and who approved it? | Documented pattern OpenTelemetry metrics, logs and tracing for tool traffic. |
| Kill switchCan an operator withdraw permission or stop further actions? | Not claimed Not documented by the vendor or not yet reviewed. |
| Policy controlsDo declared rules decide which tools and actions are allowed? | Built in Fine-grained RBAC with a CEL policy engine. |
| Sandbox isolationDoes code or tool execution run inside an isolated boundary? | Not claimed Not documented by the vendor or not yet reviewed. |
Marks reflect the documentation linked below as of 2026-10-29. How we mark criteria.
Also in MCP gateways & tool policy
- ToolHive — Run and manage MCP servers in isolated containers, with access policy and audit logs.
- Docker MCP Gateway — The Docker CLI plugin behind MCP Toolkit: containerized MCP servers with tool allowlists.
Free tools, a product pilot, or a focused paid diagnosis.
Choose a tool from the directory, explore Mothership’s technical pilot path, or check fit for a software diagnosis when one issue needs investigation.