agentgatewayLinux Foundation (started by Solo.io) | Datasheet DS-010 | Rev 2026-11-03 |
| Total 5.10 / 10 | Shares tenth place | |
| Status: Open source under the Apache 2.0 licence. | ||
In short: agentgateway scores 5.10 out of 10 and shares tenth place in this guide. Its strongest area is deployment, and its weakest is human approval. Deployment is listed as Open source, self-hosted. It is free under Apache 2.0. Each score below has a reason and a dated source.
Features
- MCP tool federation over stdio, HTTP, SSE and Streamable HTTP
- OpenAPI to MCP
- JWT, API key and OAuth authentication
- RBAC with a CEL policy engine
- Rate limiting and TLS
- OpenTelemetry metrics, logs and traces
Specifications
| Parameter | Value | Source |
|---|---|---|
| Product type | Open source agent gateway | [agw-gh] |
| Licence | Apache 2.0 | [agw-gh] |
| Policy engine | CEL | [agw-gh] |
| Auth | JWT, API keys, OAuth | [agw-gh] |
| Telemetry | OpenTelemetry | [agw-gh] |
| Price as published | Free open source | [agw-gh] |
How does agentgateway score on each criterion?
| Criterion | Weight | Score | Reason | Source |
|---|---|---|---|---|
| G1 Identity-bound per-call authorization | 25 | 6 | Fine-grained RBAC with a CEL policy engine can evaluate MCP requests, but the person behind an agent is not a documented input. | [agw-gh] |
| G2 Credential brokering | 20 | 4 | Upstream auth is configurable, but brokering short-lived credentials so the agent never holds them was not described. | [agw-gh] |
| G3 Human approval and escalation | 15 | 2 | No human approval step was found. | [agw-gh] |
| G4 Server registry and discovery | 10 | 4 | Tool federation across targets is documented, but an owned registry with discovery of unregistered servers was not. | [agw-gh] |
| G5 Audit evidence | 10 | 5 | OpenTelemetry metrics, logs and traces are documented; SIEM export tied to a person was not. | [agw-gh] |
| G6 Standards | 10 | 7 | Supports JWT, OAuth, OAuth metadata and DCR endpoints, and TLS. | [agw-gh] |
| G7 Deployment and buying clarity | 10 | 9 | Free to self-host under Apache 2.0. | [agw-gh] |
| Total | 100 | 5.10 | Sum of score times weight, divided by 100. | |
Typical deployment
Self-hosted binary or container.
Pricing as published
Free under Apache 2.0.
Works alongside your identity provider?
Yes. JWT and OAuth validation work against an external identity provider, including Entra endpoints. [agw-gh]
Frequently asked questions
- Does agentgateway work alongside my identity provider?
- Yes. JWT and OAuth validation work against an external identity provider, including Entra endpoints.
- How is agentgateway deployed?
- Self-hosted binary or container.
- What does agentgateway cost?
- Free under Apache 2.0.
How does it compare?
Revision history
| Rev | Change |
|---|---|
| 2026-11-03 | First issue of this datasheet. |
Sources
- agentgateway README [agw-gh] read 2026-11-03
By The Datasheet desk · Published and reviewed 2026-11-03