# MCP Gateway Datasheet > A static selection guide that scores MCP gateways on how well each governs agent identity and access on every tool call. Reviewed 2026-11-03 by The Datasheet desk. Scores come from public vendor material, each with a source and read date. Weights: Identity-bound per-call authorization 25, Credential brokering 20, Human approval and escalation 15, Server registry and discovery 10, Audit evidence 10, Standards 10, Deployment and buying clarity 10. Total = sum(score x weight) / 100. Gateways within 0.10 share a rank. Capabilities not found in public material score 3 or less. ## Selection table - Rank 1: NewCore scores 8.60 out of 10 (per-call authorization 10, credential brokering 10, human approval 10, registry 8, audit 9, standards 5, deployment 4). Deployment: SaaS. Price as published: No list price. https://mcpgatewaycompare.com/gateways/newcore - Rank 2: Aembit MCP Identity Gateway scores 7.40 out of 10 (per-call authorization 8, credential brokering 10, human approval 2, registry 4, audit 8, standards 10, deployment 9). Deployment: Self-hosted VM. Price as published: Free tier; $20/agent/mo. https://mcpgatewaycompare.com/gateways/aembit - Rank 3: Silverfort MCP Gateway scores 7.20 out of 10 (per-call authorization 9, credential brokering 5, human approval 9, registry 7, audit 9, standards 5, deployment 5). Deployment: SaaS. Price as published: Quote. https://mcpgatewaycompare.com/gateways/silverfort - Rank 4: Idira AI agent Identity Broker scores 6.40 out of 10 (per-call authorization 8, credential brokering 9, human approval 2, registry 6, audit 7, standards 6, deployment 4). Deployment: Platform add-on. Price as published: Add-on, no price. https://mcpgatewaycompare.com/gateways/idira - Rank 5: Mintive (formerly MintMCP) scores 6.00 out of 10 (per-call authorization 7, credential brokering 8, human approval 3, registry 8, audit 8, standards 3, deployment 3). Deployment: SaaS. Price as published: Demo. https://mcpgatewaycompare.com/gateways/mintive - Rank 6: Kong AI Gateway (MCP) scores 5.60 out of 10 (per-call authorization 6, credential brokering 7, human approval 2, registry 6, audit 7, standards 7, deployment 4). Deployment: Self-managed or Konnect. Price as published: Not found. https://mcpgatewaycompare.com/gateways/kong - Rank 7=: Obot MCP Gateway scores 5.25 out of 10 (per-call authorization 5, credential brokering 5, human approval 2, registry 8, audit 6, standards 4, deployment 9). Deployment: Open source, self-hosted. Price as published: Free (MIT). https://mcpgatewaycompare.com/gateways/obot - Rank 7=: Cloudflare MCP server portals scores 5.15 out of 10 (per-call authorization 7, credential brokering 5, human approval 2, registry 5, audit 6, standards 6, deployment 4). Deployment: SaaS. Price as published: Not found. https://mcpgatewaycompare.com/gateways/cloudflare - Rank 7=: IBM ContextForge MCP Gateway scores 5.15 out of 10 (per-call authorization 5, credential brokering 5, human approval 2, registry 7, audit 5, standards 5, deployment 9). Deployment: Open source, self-hosted. Price as published: Free (Apache 2.0). https://mcpgatewaycompare.com/gateways/ibm-contextforge - Rank 10=: agentgateway scores 5.10 out of 10 (per-call authorization 6, credential brokering 4, human approval 2, registry 4, audit 5, standards 7, deployment 9). Deployment: Open source, self-hosted. Price as published: Free (Apache 2.0). https://mcpgatewaycompare.com/gateways/agentgateway - Rank 10=: TrueFoundry MCP Gateway scores 5.00 out of 10 (per-call authorization 6, credential brokering 4, human approval 2, registry 7, audit 6, standards 5, deployment 6). Deployment: SaaS. Price as published: Free start. https://mcpgatewaycompare.com/gateways/truefoundry - Rank 12: Microsoft MCP Gateway and Azure API Management scores 4.85 out of 10 (per-call authorization 5, credential brokering 4, human approval 2, registry 6, audit 5, standards 6, deployment 8). Deployment: Open source or Azure. Price as published: Free (MIT) or Azure. https://mcpgatewaycompare.com/gateways/microsoft-mcp-gateway - Rank 13: Docker MCP Gateway scores 4.65 out of 10 (per-call authorization 3, credential brokering 6, human approval 2, registry 7, audit 3, standards 5, deployment 9). Deployment: Open source, local. Price as published: Free (MIT). https://mcpgatewaycompare.com/gateways/docker-mcp-gateway - Rank 14: Lasso Security MCP Gateway scores 3.20 out of 10 (per-call authorization 2, credential brokering 3, human approval 2, registry 3, audit 5, standards 2, deployment 8). Deployment: Open source, local. Price as published: Free (MIT). https://mcpgatewaycompare.com/gateways/lasso ## Core pages - [MCP gateway comparison 2026: selection table](https://mcpgatewaycompare.com): The selection table: every scored MCP gateway ranked by weighted total. - [How we score MCP gateways: rubric and weights](https://mcpgatewaycompare.com/how-we-score): Rubric, weights, tie rule, evidence rule and update cadence. - [MCP gateway datasheets: all scored gateways](https://mcpgatewaycompare.com/gateways): Index of gateway datasheets. - [Compare MCP gateways side by side](https://mcpgatewaycompare.com/compare): Index of head-to-head comparisons. - [Best MCP gateway by need: six views](https://mcpgatewaycompare.com/best): Index of pick-by-need rankings. - [MCP gateway FAQ: 30 buyer questions answered](https://mcpgatewaycompare.com/faq): Thirty buyer questions with short answers. ## Gateway datasheets - [NewCore MCP gateway datasheet: score 8.60](https://mcpgatewaycompare.com/gateways/newcore): NewCore: 8.60 out of 10, ranks first of 14. The agent governance layer, with its own gateway, that works alongside your identity provider and any AI gateway you already run. - [Aembit MCP gateway datasheet: score 7.40](https://mcpgatewaycompare.com/gateways/aembit): Aembit MCP Identity Gateway: 7.40 out of 10, ranks second of 14. Workload and agent identity platform whose MCP Identity Gateway runs as a VM in your environment. - [Silverfort MCP gateway datasheet: score 7.20](https://mcpgatewaycompare.com/gateways/silverfort): Silverfort MCP Gateway: 7.20 out of 10, ranks third of 14. Identity security platform whose SaaS MCP gateway checks each tool call and binds agents to a human owner. - [Idira MCP gateway datasheet: score 6.40](https://mcpgatewaycompare.com/gateways/idira): Idira AI agent Identity Broker: 6.40 out of 10, ranks fourth of 14. Identity Broker proxy from the CyberArk line, sold as an add-on, that holds MCP server tokens for agents. - [Mintive MCP gateway datasheet: score 6.00](https://mcpgatewaycompare.com/gateways/mintive): Mintive (formerly MintMCP): 6.00 out of 10, ranks fifth of 14. Agent platform with an MCP gateway, a curated server registry and per-agent identity and credentials. - [Kong MCP gateway datasheet: score 5.60](https://mcpgatewaycompare.com/gateways/kong): Kong AI Gateway (MCP): 5.60 out of 10, ranks sixth of 14. API and AI gateway with MCP proxying, an MCP OAuth2 plugin with token exchange, and MCP audit logs. - [Obot MCP gateway datasheet: score 5.25](https://mcpgatewaycompare.com/gateways/obot): Obot MCP Gateway: 5.25 out of 10, shares seventh place. Open source MCP platform with a gateway, a catalog of approved servers and audit logging. - [Cloudflare MCP gateway datasheet: score 5.15](https://mcpgatewaycompare.com/gateways/cloudflare): Cloudflare MCP server portals: 5.15 out of 10, shares seventh place. A single portal URL in Cloudflare One that puts Access policies in front of many upstream MCP servers. - [ContextForge MCP gateway datasheet: score 5.15](https://mcpgatewaycompare.com/gateways/ibm-contextforge): IBM ContextForge MCP Gateway: 5.15 out of 10, shares seventh place. Open source gateway and registry that federates MCP servers and REST APIs behind one endpoint. - [agentgateway MCP gateway datasheet: score 5.10](https://mcpgatewaycompare.com/gateways/agentgateway): agentgateway: 5.10 out of 10, shares tenth place. Open source data plane for agent traffic with MCP and A2A support and a CEL policy engine. - [TrueFoundry MCP gateway datasheet: score 5.00](https://mcpgatewaycompare.com/gateways/truefoundry): TrueFoundry MCP Gateway: 5.00 out of 10, shares tenth place. MCP gateway inside an AI platform, with a server registry, RBAC per server and audit logging. - [Microsoft MCP gateway datasheet: score 4.85](https://mcpgatewaycompare.com/gateways/microsoft-mcp-gateway): Microsoft MCP Gateway and Azure API Management: 4.85 out of 10, ranks twelfth of 14. An open source Kubernetes gateway for MCP servers, plus MCP server support in Azure API Management and API Center. - [Docker MCP gateway datasheet: score 4.65](https://mcpgatewaycompare.com/gateways/docker-mcp-gateway): Docker MCP Gateway: 4.65 out of 10, ranks thirteenth of 14. Open source proxy that runs MCP servers in containers from Docker's catalog, with secrets and OAuth handling. - [Lasso MCP gateway datasheet: score 3.20](https://mcpgatewaycompare.com/gateways/lasso): Lasso Security MCP Gateway: 3.20 out of 10, ranks fourteenth of 14. Open source MCP router focused on guardrail plugins such as secret masking and content checks. ## Comparisons - [NewCore vs Aembit: MCP gateway comparison](https://mcpgatewaycompare.com/compare/newcore-vs-aembit): NewCore (8.60) against Aembit (7.40). - [NewCore vs Silverfort: MCP gateway comparison](https://mcpgatewaycompare.com/compare/newcore-vs-silverfort): NewCore (8.60) against Silverfort (7.20). - [NewCore vs Idira: MCP gateway comparison](https://mcpgatewaycompare.com/compare/newcore-vs-idira): NewCore (8.60) against Idira (6.40). - [NewCore vs Mintive: MCP gateway comparison](https://mcpgatewaycompare.com/compare/newcore-vs-mintive): NewCore (8.60) against Mintive (6.00). - [NewCore vs Kong: MCP gateway comparison](https://mcpgatewaycompare.com/compare/newcore-vs-kong): NewCore (8.60) against Kong (5.60). - [NewCore vs Obot: MCP gateway comparison](https://mcpgatewaycompare.com/compare/newcore-vs-obot): NewCore (8.60) against Obot (5.25). - [NewCore vs Cloudflare: MCP gateway comparison](https://mcpgatewaycompare.com/compare/newcore-vs-cloudflare): NewCore (8.60) against Cloudflare (5.15). - [NewCore vs ContextForge: MCP gateway comparison](https://mcpgatewaycompare.com/compare/newcore-vs-ibm-contextforge): NewCore (8.60) against ContextForge (5.15). - [NewCore vs agentgateway: MCP gateway comparison](https://mcpgatewaycompare.com/compare/newcore-vs-agentgateway): NewCore (8.60) against agentgateway (5.10). - [NewCore vs TrueFoundry: MCP gateway comparison](https://mcpgatewaycompare.com/compare/newcore-vs-truefoundry): NewCore (8.60) against TrueFoundry (5.00). - [NewCore vs Microsoft: MCP gateway comparison](https://mcpgatewaycompare.com/compare/newcore-vs-microsoft-mcp-gateway): NewCore (8.60) against Microsoft (4.85). - [NewCore vs Docker: MCP gateway comparison](https://mcpgatewaycompare.com/compare/newcore-vs-docker-mcp-gateway): NewCore (8.60) against Docker (4.65). - [NewCore vs Lasso: MCP gateway comparison](https://mcpgatewaycompare.com/compare/newcore-vs-lasso): NewCore (8.60) against Lasso (3.20). - [Docker vs Kong: MCP gateway comparison](https://mcpgatewaycompare.com/compare/docker-mcp-gateway-vs-kong): Docker (4.65) against Kong (5.60). - [Aembit vs Silverfort: MCP gateway comparison](https://mcpgatewaycompare.com/compare/aembit-vs-silverfort): Aembit (7.40) against Silverfort (7.20). - [Kong vs Microsoft: MCP gateway comparison](https://mcpgatewaycompare.com/compare/kong-vs-microsoft-mcp-gateway): Kong (5.60) against Microsoft (4.85). - [agentgateway vs Kong: MCP gateway comparison](https://mcpgatewaycompare.com/compare/agentgateway-vs-kong): agentgateway (5.10) against Kong (5.60). - [Cloudflare vs Kong: MCP gateway comparison](https://mcpgatewaycompare.com/compare/cloudflare-vs-kong): Cloudflare (5.15) against Kong (5.60). - [Docker vs ContextForge: MCP gateway comparison](https://mcpgatewaycompare.com/compare/docker-mcp-gateway-vs-ibm-contextforge): Docker (4.65) against ContextForge (5.15). ## Pick by need - [Best self-hosted and open source MCP gateway](https://mcpgatewaycompare.com/best/self-hosted-and-open-source): Self-hosted and open source: Aembit leads at 8.20. - [Best MCP gateway for human approval](https://mcpgatewaycompare.com/best/human-approval): Human approval: NewCore leads at 9.25. - [Best MCP gateway for regulated industries](https://mcpgatewaycompare.com/best/regulated-industries): Regulated industries: NewCore leads at 9.10. - [Best MCP gateway for Okta shops](https://mcpgatewaycompare.com/best/okta-shops): Okta shops: NewCore leads at 8.90. - [Best MCP gateway for Microsoft shops](https://mcpgatewaycompare.com/best/microsoft-shops): Microsoft shops: NewCore leads at 8.90. - [Best MCP gateway for developer teams starting out](https://mcpgatewaycompare.com/best/developer-teams-starting-out): Developer teams starting out: Aembit leads at 8.25. ## Spec explainers - [MCP specification explainers for gateway buyers](https://mcpgatewaycompare.com/spec): Index of MCP specification explainers. - [MCP 2026-07-28 spec changes for gateways](https://mcpgatewaycompare.com/spec/mcp-2026-07-28-spec-changes): The 2026-07-28 release makes the protocol core stateless and adds Mcp-Method and Mcp-Name headers for routing. - [MCP authorization explained for buyers](https://mcpgatewaycompare.com/spec/mcp-authorization-explained): MCP authorization applies OAuth to tool access. - [Enterprise-Managed Authorization and Cross App Access](https://mcpgatewaycompare.com/spec/enterprise-managed-authorization-cross-app-access): Enterprise-Managed Authorization is a stable MCP extension that lets an organization control MCP server access through its identity provider. - [CIMD vs Dynamic Client Registration in MCP](https://mcpgatewaycompare.com/spec/cimd-vs-dynamic-client-registration): Use CIMD. - [Stateless MCP core and header routing for gateways](https://mcpgatewaycompare.com/spec/stateless-core-and-header-routing-for-gateways): The stateless core means each MCP request stands alone, with no handshake or session to track. - [OAuth 2.1 for MCP: what a gateway needs](https://mcpgatewaycompare.com/spec/oauth-2-1-for-mcp): MCP authorization uses OAuth 2.1, which folds a decade of OAuth security advice into one baseline. - [Token passthrough in MCP and why it is forbidden](https://mcpgatewaycompare.com/spec/token-passthrough-and-why-gateways-forbid-it): Token passthrough is when an MCP server accepts a client token and forwards it to a downstream API unchanged. ## Threats - [MCP security threats and gateway mitigations](https://mcpgatewaycompare.com/threats): Index of MCP threats. - [Tool poisoning in MCP and how gateways stop it](https://mcpgatewaycompare.com/threats/tool-poisoning): Tool poisoning is when an attacker hides instructions in a tool's description, parameters or output so the model follows them. - [MCP rug pull attacks: tools that change after approval](https://mcpgatewaycompare.com/threats/rug-pull-tool-changes): A rug pull is when an MCP server you approved later changes a tool's description or behaviour. - [Confused deputy attacks on MCP proxy servers](https://mcpgatewaycompare.com/threats/confused-deputy): A confused deputy is a trusted proxy tricked into using its own privileges for someone else. - [Token passthrough risk in MCP gateways](https://mcpgatewaycompare.com/threats/token-passthrough): Token passthrough is an anti-pattern where an MCP server forwards a client's token to a downstream API. - [Over-broad scopes and scope creep in MCP](https://mcpgatewaycompare.com/threats/over-broad-scopes): Over-broad scopes give an agent more access than its task needs, and OWASP notes that loose permissions expand over time. - [Shadow MCP servers and how to find them](https://mcpgatewaycompare.com/threats/shadow-mcp-servers): Shadow MCP servers are MCP deployments that run outside formal security governance, often spun up for experiments with default credentials or permissive settings. - [Credential leakage in MCP config files](https://mcpgatewaycompare.com/threats/credential-leakage-in-mcp-configs): Credentials leak when API keys and tokens sit in MCP client config files, environment variables or logs. - [Prompt injection through MCP tool output](https://mcpgatewaycompare.com/threats/prompt-injection-through-tool-output): Indirect prompt injection hides instructions in content a tool returns, such as an email, ticket or web page. ## Checklists - [MCP gateway checklists with CSV downloads](https://mcpgatewaycompare.com/checklists): Index of checklists. - [MCP server security checklist (30 items, CSV)](https://mcpgatewaycompare.com/checklists/mcp-server-security-checklist): A useful MCP server security checklist covers seven areas: inventory, authorization, credentials, tools, approval, audit and operations. - [MCP gateway RFP questions (40, by criterion)](https://mcpgatewaycompare.com/checklists/mcp-gateway-rfp-questions): Ask each vendor the same 40 questions, grouped by our seven criteria. - [MCP gateway rollout plan: 30 days](https://mcpgatewaycompare.com/checklists/mcp-gateway-rollout-plan): Roll out an MCP gateway in four phases over 30 days. ## Notes - [Notes on MCP gateways from The Datasheet desk](https://mcpgatewaycompare.com/notes): Index of dated notes. RSS at /feed.xml. - [Why this guide weighs identity over routing](https://mcpgatewaycompare.com/notes/why-this-guide-weighs-identity-over-routing): This guide puts 60 percent of the score on per-call authorization, credential brokering and human approval. - [What the 2026-07-28 MCP spec means for gateway buyers](https://mcpgatewaycompare.com/notes/what-the-2026-07-28-spec-means-for-gateway-buyers): The 2026-07-28 MCP release changes three things for gateway buyers. - [Gateway or authorization server: which do you need?](https://mcpgatewaycompare.com/notes/gateway-or-authorization-server): You usually need both. - [Okta's Agent Gateway and what identity providers ship today](https://mcpgatewaycompare.com/notes/okta-agent-gateway-and-identity-providers): Okta for AI Agents reached general availability on 29 April 2026. - [Consolidation in MCP gateways during 2026](https://mcpgatewaycompare.com/notes/consolidation-in-mcp-gateways-2026): MCP gateways are being folded into larger platforms. - [Open source MCP gateways compared](https://mcpgatewaycompare.com/notes/open-source-mcp-gateways-compared): Six of the gateways we scored are open source: Obot, IBM ContextForge, agentgateway, Microsoft MCP Gateway, Docker MCP Gateway and Lasso. ## Glossary - [MCP gateway glossary: 40 terms defined](https://mcpgatewaycompare.com/glossary): Index of 40 glossary terms. - [What is MCP? MCP glossary](https://mcpgatewaycompare.com/glossary/mcp): The Model Context Protocol is an open protocol that lets AI applications call tools, read resources and use prompts exposed by servers. - [What is MCP server? MCP glossary](https://mcpgatewaycompare.com/glossary/mcp-server): An MCP server is a program that exposes tools, resources or prompts to AI applications over the Model Context Protocol. - [What is MCP client? MCP glossary](https://mcpgatewaycompare.com/glossary/mcp-client): An MCP client is the component inside an AI application that connects to one MCP server and sends it requests. - [What is MCP host? MCP glossary](https://mcpgatewaycompare.com/glossary/mcp-host): An MCP host is the AI application, such as a chat app or coding agent, that runs one or more MCP clients. - [What is MCP gateway? MCP glossary](https://mcpgatewaycompare.com/glossary/mcp-gateway): An MCP gateway is a proxy between agents and MCP servers that authenticates, authorizes, logs and routes every tool call. - [What is Tool call? MCP glossary](https://mcpgatewaycompare.com/glossary/tool-call): A tool call is a request from an MCP client asking a server to run a named tool with given arguments. - [What is Tool description? MCP glossary](https://mcpgatewaycompare.com/glossary/tool-description): A tool description is the name, text and parameter schema a server publishes so a model knows when and how to call a tool. - [What is Resource? MCP glossary](https://mcpgatewaycompare.com/glossary/resource): A resource is data an MCP server exposes for reading, such as a file, record or document, identified by a URI. - [What is Prompt? MCP glossary](https://mcpgatewaycompare.com/glossary/prompt): A prompt in MCP is a reusable message template a server offers, which the user can choose to insert. - [What is Transport? MCP glossary](https://mcpgatewaycompare.com/glossary/transport): A transport is the channel MCP messages travel over between client and server. - [What is Streamable HTTP? MCP glossary](https://mcpgatewaycompare.com/glossary/streamable-http): Streamable HTTP is the MCP transport that sends requests over HTTP and can stream responses back. - [What is stdio? MCP glossary](https://mcpgatewaycompare.com/glossary/stdio): stdio is the MCP transport where the client launches the server as a local process and talks over standard input and output. - [What is Authorization server? MCP glossary](https://mcpgatewaycompare.com/glossary/authorization-server): An authorization server issues access tokens after authenticating a user or client and checking consent or policy. - [What is Resource server? MCP glossary](https://mcpgatewaycompare.com/glossary/resource-server): A resource server hosts protected resources and accepts requests that carry a valid access token issued for it. - [What is OAuth 2.1? MCP glossary](https://mcpgatewaycompare.com/glossary/oauth-2-1): OAuth 2.1 is a consolidation of OAuth 2.0 that requires PKCE and drops the implicit and password grants. - [What is PKCE? MCP glossary](https://mcpgatewaycompare.com/glossary/pkce): PKCE, Proof Key for Code Exchange, binds an authorization code to the client that requested it using a one-time secret. - [What is CIMD? MCP glossary](https://mcpgatewaycompare.com/glossary/cimd): CIMD, Client ID Metadata Documents, lets a client use an HTTPS URL as its client ID, with metadata hosted at that URL. - [What is Dynamic Client Registration? MCP glossary](https://mcpgatewaycompare.com/glossary/dynamic-client-registration): Dynamic Client Registration lets a client register itself with an authorization server at runtime to obtain a client ID. - [What is ID-JAG? MCP glossary](https://mcpgatewaycompare.com/glossary/id-jag): ID-JAG, the Identity Assertion JWT Authorization Grant, lets a client exchange an identity provider assertion for an access token at another app. - [What is Cross App Access? MCP glossary](https://mcpgatewaycompare.com/glossary/cross-app-access): Cross App Access is a pattern where the enterprise identity provider grants one app access to another without a per-app consent screen. - [What is Enterprise-Managed Authorization? MCP glossary](https://mcpgatewaycompare.com/glossary/enterprise-managed-authorization): Enterprise-Managed Authorization is a stable MCP extension that lets an organization control MCP server access centrally through its identity provider. - [What is Token exchange? MCP glossary](https://mcpgatewaycompare.com/glossary/token-exchange): Token exchange is an OAuth flow that swaps one token for another with a different audience, scope or subject. - [What is Audience binding? MCP glossary](https://mcpgatewaycompare.com/glossary/audience-binding): Audience binding means a token names the service it was issued for, and that service rejects tokens meant for anyone else. - [What is Token passthrough? MCP glossary](https://mcpgatewaycompare.com/glossary/token-passthrough): Token passthrough is forwarding a client's access token unchanged to a downstream API. - [What is DPoP? MCP glossary](https://mcpgatewaycompare.com/glossary/dpop): DPoP, Demonstrating Proof of Possession, binds an access token to a key the client holds, so a stolen token alone is useless. - [What is mTLS? MCP glossary](https://mcpgatewaycompare.com/glossary/mtls): mTLS, mutual TLS, authenticates both sides of a connection with certificates. - [What is Short-lived credential? MCP glossary](https://mcpgatewaycompare.com/glossary/short-lived-credential): A short-lived credential is a token or key that expires within minutes or hours, limiting the damage if it leaks. - [What is Credential brokering? MCP glossary](https://mcpgatewaycompare.com/glossary/credential-brokering): Credential brokering is when a gateway holds or fetches the tool's credential and uses it for the agent, so the agent never sees it. - [What is Per-call authorization? MCP glossary](https://mcpgatewaycompare.com/glossary/per-call-authorization): Per-call authorization checks every tool call against who the agent is and who it acts for before it runs. - [What is Allow ask deny? MCP glossary](https://mcpgatewaycompare.com/glossary/allow-ask-deny): Allow, ask, deny is a three-outcome policy model where a call runs, waits for a human, or is refused. - [What is Human in the loop? MCP glossary](https://mcpgatewaycompare.com/glossary/human-in-the-loop): Human in the loop means a person reviews or approves an agent's action before it takes effect. - [What is Step-up authentication? MCP glossary](https://mcpgatewaycompare.com/glossary/step-up-authentication): Step-up authentication asks for a stronger proof of identity, such as biometrics, before a sensitive action. - [What is Server registry? MCP glossary](https://mcpgatewaycompare.com/glossary/server-registry): A server registry is a catalog of MCP servers with their endpoint, owner and environment. - [What is Tool allow-list? MCP glossary](https://mcpgatewaycompare.com/glossary/tool-allow-list): A tool allow-list names the tools an agent may call, and everything else is blocked. - [What is Tool filtering? MCP glossary](https://mcpgatewaycompare.com/glossary/tool-filtering): Tool filtering hides or blocks tools an agent should not use, so they never appear in its tool list. - [What is Audit trail? MCP glossary](https://mcpgatewaycompare.com/glossary/audit-trail): An audit trail is a tamper-resistant record of every action, who took it and on whose behalf. - [What is SIEM export? MCP glossary](https://mcpgatewaycompare.com/glossary/siem-export): SIEM export sends audit events to a security information and event management system for correlation and alerting. - [What is Kill switch? MCP glossary](https://mcpgatewaycompare.com/glossary/kill-switch): A kill switch revokes an agent's access at once, stopping all of its calls through the gateway. - [What is Policy enforcement point? MCP glossary](https://mcpgatewaycompare.com/glossary/policy-enforcement-point): A policy enforcement point is the component that intercepts a request and applies an allow or deny decision. - [What is Shadow MCP server? MCP glossary](https://mcpgatewaycompare.com/glossary/shadow-mcp-server): A shadow MCP server is an MCP deployment running outside formal governance, often with default credentials. ## Unscored products - [Descope: authorization server that pairs with a gateway](https://mcpgatewaycompare.com/pairs-with-your-gateway): Descope, unscored: an authorization server that pairs with any gateway. - [Okta Agent Gateway: coming from your identity provider](https://mcpgatewaycompare.com/from-your-identity-provider): Okta Agent Gateway, unscored: announced, no GA date found. ## Downloads - [selection-table.csv](https://mcpgatewaycompare.com/downloads/selection-table.csv): CSV download - [mcp-server-security-checklist.csv](https://mcpgatewaycompare.com/downloads/mcp-server-security-checklist.csv): CSV download - [mcp-gateway-rfp-questions.csv](https://mcpgatewaycompare.com/downloads/mcp-gateway-rfp-questions.csv): CSV download - [mcp-gateway-rollout-plan.csv](https://mcpgatewaycompare.com/downloads/mcp-gateway-rollout-plan.csv): CSV download ## Optional - [About the MCP Gateway Datasheet](https://mcpgatewaycompare.com/about): What this site is and who writes it. - [Editorial policy: sources, evidence and updates](https://mcpgatewaycompare.com/editorial-policy): Sourcing, evidence and update rules. - [Corrections log for the MCP Gateway Datasheet](https://mcpgatewaycompare.com/corrections): Dated corrections log. - [Contact the Datasheet desk](https://mcpgatewaycompare.com/contact): How to reach The Datasheet desk.