The safeguards map / 3.3 Gateways
MuleSoft Omni Gateway
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
MuleSoft's Envoy-based gateway with policies for Model Context Protocol (MCP), Agent2Agent (A2A) and large language model (LLM) traffic, including Cedar access rules on MCP tools and an external authorization callout.
Where it sits
3.3 Gateways (primary): Sits in front of APIs, MCP servers, agents and LLMs and applies policies such as Cedar access rules on MCP tools, resources and prompts, and forwards requests to an external authorization service.
Omni Gateway (formerly Flex Gateway) is an Envoy-based, ultrafast lightweight API gateway designed to manage and secure APIs running anywhere.
captured
The MCP Attribute-Based Access Control policy controls access to server tools, resources, and prompts based on user information such as Tiers, IP, Headers, or Claims.
captured
Use the Cedar policy language to define access rules.
captured
A2A Personally Identifiable Information (PII) Detector Policy
captured
LLM PII Detection Policy
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- agentAI system
- Used by
- those who run it
- Runs
- at runtime
- Policy comes from
- owner-entered settingsan external decision point
- Traffic it sees
- model callstool calls (MCP)agent to agent (A2A)
- Can the agent bypass it
- depends
Handoffs
None recorded.
Listed, not drawn: no documented handoff and no foundation home places it on the map.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.