The safeguards map / 3.3 Gateways
Higress
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
An open-source gateway built on Istio and Envoy that fronts model providers and hosted Model Context Protocol (MCP) servers, with authentication, rate limiting and audit logs for tool calls.
Where it sits
3.3 Gateways (primary): Sits on the request path between agents and their model providers and MCP tools, applying authentication strategies, content safety checks, rate limiting and audit logging to the calls it carries.
It also supports hosting MCP (Model Context Protocol) Servers through its plugin mechanism, enabling AI Agents to easily call various tools and services.
captured
Connect model APIs, MCP tools, and Kubernetes inference workloads through one gateway
captured
supporting WAF and various authentication strategies, such as key-auth, hmac-auth, jwt-auth, basic-auth, oidc, etc.
captured
Bring AI content safety into the gateway path without application changes.
captured
Fine-grained rate limiting to prevent abuse - Comprehensive audit logs for all tool calls
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- agentAI system
- Used by
- those who run it
- Runs
- at runtime
- Policy comes from
- owner-entered settings
- Traffic it sees
- model callstool calls (MCP)
- Can the agent bypass it
- depends
Handoffs
None recorded. A mapped entry with no handoff is here for its foundation home.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.