agentgateway Joins AAIF: The MCP Router With 300+ Contributors Gets a Linux Foundation Home
Agentic AIThe Agentic AI Foundation—hosted by the Linux Foundation—now has a fourth project: agentgateway, an open-source gateway for managing the full traffic mix of modern AI systems. The addition is significant not because agentgateway is new but because AAIF provides neutral stewardship for infrastructure that organizations depend on without wanting to bet on a single vendor’s roadmap.
What agentgateway Does
agentgateway handles unified routing and policy enforcement across five protocol types through a single operational interface: MCP communications, agent-to-agent interactions, language model inference, REST APIs, and gRPC services. The Rust implementation is Kubernetes-compatible and built for high-throughput environments.
The feature set is explicitly designed for the governance gap that traditional API gateways don’t address. Standard capabilities include JWT authentication, API key management, role-based access, mTLS, and malicious tool protections. MCP virtualization enables federated tool server access with tool-level policies—meaning you can expose an MCP surface to agents while applying fine-grained controls on which tools specific agents can call. Observability is built in: metrics, tracing, and access logging through standard interfaces.
The declarative configuration model uses Common Expression Language (CEL) for routing decisions—the same policy language Google uses in Firebase Security Rules and Kubernetes admission webhooks. For teams already using CEL-based policy in their infrastructure, agentgateway fits into existing policy-as-code workflows.
The AAIF Context
AAIF was established as a neutral home for agentic AI standards, protocols, and open-source projects. Its roster now includes MCP (the Model Context Protocol Anthropic originated), Goose (Block’s open-source agent framework), and agentgateway. This is the same governance model the Linux Foundation used for Kubernetes, Prometheus, and OpenTelemetry—vendor-neutral stewardship that makes enterprise adoption politically safe.
The contributor footprint (300+ contributors across 60+ organizations including Microsoft, Adobe, and Red Hat) is the signal that this is infrastructure, not a prototype. Those organizations don’t show up as contributors to proof-of-concept projects. The Apache 2.0 license removes the licensing friction that slows enterprise adoption of infrastructure tools.
The So What
For agentic AI infrastructure teams, agentgateway’s AAIF membership matters in two ways. First, it signals that the MCP routing and federation problem is considered solved enough to commit to a shared standard—organizations can adopt agentgateway without worrying that the vendor will pivot or extract rent from the protocol later. Second, the tool-level MCP policy enforcement capability addresses the agentic security gap directly: as AI agents proliferate and each agent gets access to multiple MCP servers, controlling which tools an agent can invoke—not just which servers it can connect to—is the governance primitive that was missing. agentgateway now provides it under Apache 2.0.
Source: Agentic AI Foundation
Content created with AI assistance and reviewed for accuracy.
Join the conversation
Stack Insiders is our free community for readers who want to go deeper — share resources, ask questions, and connect with others across every vertical we cover.
Join Stack Insiders →