MCP gateway selection table
Rev 2026-11-03 · 14 gateways · scored 0 to 10 on seven weighted criteria · selection-table.csv
| Rank | Gateway | Total | G1 25 | G2 20 | G3 15 | G4 10 | G5 10 | G6 10 | G7 10 | Deployment | Price as published |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | NewCore | 8.60 | 10 | 10 | 10 | 8 | 9 | 5 | 4 | SaaS | No list price |
| 2 | Aembit | 7.40 | 8 | 10 | 2 | 4 | 8 | 10 | 9 | Self-hosted VM | Free tier; $20/agent/mo |
| 3 | Silverfort | 7.20 | 9 | 5 | 9 | 7 | 9 | 5 | 5 | SaaS | Quote |
| 4 | Idira | 6.40 | 8 | 9 | 2 | 6 | 7 | 6 | 4 | Platform add-on | Add-on, no price |
| 5 | Mintive | 6.00 | 7 | 8 | 3 | 8 | 8 | 3 | 3 | SaaS | Demo |
| 6 | Kong | 5.60 | 6 | 7 | 2 | 6 | 7 | 7 | 4 | Self-managed or Konnect | Not found |
| 7= | Obot | 5.25 | 5 | 5 | 2 | 8 | 6 | 4 | 9 | Open source, self-hosted | Free (MIT) |
| 7= | Cloudflare | 5.15 | 7 | 5 | 2 | 5 | 6 | 6 | 4 | SaaS | Not found |
| 7= | ContextForge | 5.15 | 5 | 5 | 2 | 7 | 5 | 5 | 9 | Open source, self-hosted | Free (Apache 2.0) |
| 10= | agentgateway | 5.10 | 6 | 4 | 2 | 4 | 5 | 7 | 9 | Open source, self-hosted | Free (Apache 2.0) |
| 10= | TrueFoundry | 5.00 | 6 | 4 | 2 | 7 | 6 | 5 | 6 | SaaS | Free start |
| 12 | Microsoft | 4.85 | 5 | 4 | 2 | 6 | 5 | 6 | 8 | Open source or Azure | Free (MIT) or Azure |
| 13 | Docker | 4.65 | 3 | 6 | 2 | 7 | 3 | 5 | 9 | Open source, local | Free (MIT) |
| 14 | Lasso | 3.20 | 2 | 3 | 2 | 3 | 5 | 2 | 8 | Open source, local | Free (MIT) |
In short: NewCore leads the selection table at 8.60 out of 10, followed by Aembit at 7.40 and Silverfort at 7.20. We score 14 MCP gateways on seven criteria, weighted toward per-call authorization, credential brokering and human approval. Every score has a reason and a dated public source.
What changed in this revision?
- First edition: 14 gateways scored on seven criteria.
- MintMCP is listed as Mintive, because mintmcp.com now redirects there. [mint-home]
- Natoma is not scored: the Snowflake deal close is unconfirmed and natoma.ai was offline. [snow-natoma]
- Okta Agent Gateway is listed unscored, because no GA date was found. [ok-ga]
- Descope is listed unscored as an authorization server that pairs with a gateway. [ds-hub]
- Standards scores now treat DCR as deprecated in favour of CIMD, per the 2026-07-28 spec. [mcp-0728]
Which gateway fits my situation?
Each view reweights the same scores. The leader is computed, not chosen.
- Self-hosted and open source
- Human approval
- Regulated industries
- Okta shops
- Microsoft shops
- Developer teams starting out
What changed in the MCP spec on 2026-07-28?
The release made the protocol core stateless, added routing headers for gateways and deprecated Dynamic Client Registration in favour of CIMD. Read what the 2026-07-28 changes mean for gateways, or the full list of spec explainers.
Leader: NewCore. By The Datasheet desk.