The safeguards map / 3.3 Gateways

Kong AI Gateway

Kong (company). Vendor, generally available. proprietary. Mapped; as of .

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Kong's AI Gateway: one control plane for large language model (LLM), Model Context Protocol (MCP) and Agent2Agent (A2A) traffic with OAuth2 tool scoping, prompt guards, personally identifiable information (PII) redaction and OpenTelemetry export.

Where it sits

3.3 Gateways (primary): Sits in front of LLM, MCP and A2A traffic and applies authentication, tool-scoping, prompt guard and PII redaction policies configured on its entities.

AI Gateway addresses these challenges with a high-performance control plane that secures, governs, and observes AI-native systems end to end.

captured

Define a single endpoint for any traffic type: LLM, MCP, or A2A.

captured

Scope agent tool calls with OAuth2, so write actions can require tighter access than read actions

captured

Facts

Concern
security
Names the law
no
Subject
agentAI system
Used by
those who run it
Runs
at runtime
Policy comes from
owner-entered settings
Traffic it sees
model callstool calls (MCP)agent to agent (A2A)
Can the agent bypass it
depends

Handoffs

produces Runtime records: OpenTelemetry span attributes

Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.