The safeguards map / 3.3 Gateways
Kuadrant
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
Gateway API policies for authentication and authorization, with an Envoy-based Model Context Protocol (MCP) gateway that applies tool-level access control to MCP servers.
Where it sits
3.3 Gateways (primary): Its MCP gateway routes calls to several MCP servers behind one endpoint, and an AuthPolicy validates the caller's token and limits which tools that caller may reach.
An Envoy-based gateway for Model Context Protocol (MCP) servers, enabling aggregation and routing of multiple MCP servers behind a single endpoint.
captured
Apply AuthPolicy for token validation/exchange on the /mcp endpoint, including tool authorization via keycloak group mappings (both via Keycloak)
captured
You now should only be able to access tools based on the ACL configuration.
captured
Teaching an MCP gateway to speak Agent2Agent
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- agentAI system
- Used by
- those who run it
- Runs
- at runtime
- Policy comes from
- owner-entered settings
- Traffic it sees
- tool calls (MCP)
- Can the agent bypass it
- depends
Handoffs
None recorded. A mapped entry with no handoff is here for its foundation home.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.