This spotlight is part of our MCP company spotlights, within The MCP Guide. Building an MCP company? See SEO and GEO for MCP companies.
Solo.io builds cloud networking software, and for MCP it backs agentgateway. Agentgateway is an open-source gateway for service, model and MCP traffic, which Solo.io donated to the Linux Foundation. Solo sells an enterprise edition with extra MCP security features and 24x7 support.
Checked against: Solo.io's agentgateway page and agentgateway.dev on 28 October 2026. eSEOspace did not test Solo.io's products.
Key Takeaways
- Agentgateway describes itself as "one high-performance gateway for service, LLM, and MCP traffic."
- It is a Linux Foundation project, and its GitHub repository is Apache 2.0 licensed.
- Agentgateway can "scope which tools each identity may invoke" and inspect tool calls for prompt injection.
- Solo Enterprise for agentgateway adds MCP OAuth 2.1, tool-level RBAC, OpenAPI-to-MCP and 24x7 support.
- The open-source projects are free; enterprise pricing is by quote.
At a glance
| Item | Detail |
|---|---|
| Company | Solo.io |
| What it offers for MCP | agentgateway (open source), Solo Enterprise for agentgateway, agentregistry, kagent |
| Who it's for | Enterprises running agents in production, often on Kubernetes |
| Open source? | agentgateway (Apache 2.0); agentregistry and kagent are also open source |
| Pricing | Open source free; enterprise via sales |
What Solo.io offers for MCP
agentgateway (open source)
The agentgateway site calls it "an open source HTTP and gRPC gateway that handles traditional application traffic and AI-native protocols in one data plane." It has native support for MCP and agent-to-agent (A2A) traffic. It promises to "sign and scope every tool call, and keep an audit trail of what agents invoked."
Key MCP features from the site:
- MCP auth: "Authenticate callers into MCP servers and scope which tools each identity may invoke."
- Guardrails: "Inspect tool calls and responses in flight, blocking prompt injection and unsafe payloads."
- Authorization rules: allow and deny rules using RBAC and CEL, a small policy language.
The site says agentgateway is "a Series of LF Projects, LLC," and a partner quote thanks Solo.io for donating it to the Linux Foundation. The GitHub repository is Apache 2.0 licensed.
Solo Enterprise for agentgateway
Solo's product page calls this "the enterprise distribution of open source agentgateway." It adds "full-lifecycle MCP security and governance," including native MCP OAuth 2.1, "tool-level RBAC" and secure token exchange. You can "drop in any OpenAPI spec and instantly expose it as MCP tools." Tracing uses OpenTelemetry with OpenInference, and Solo offers "24x7 support for running AI connectivity in production."
agentregistry and kagent
Solo's agentregistry page describes one registry to "package, curate, and deploy agents, MCP servers, skills, and LLMs." Its arctl CLI can run MCP servers and configure clients like Cursor. Solo's homepage also lists kagent, which treats agents and tools as Kubernetes resources, and agentdesktop for agents on employee machines.
Who it's for
Solo.io's homepage aims at enterprises bringing AI agents to production, where "control sits at the platform layer." The tools lean toward platform teams that already run Kubernetes and service meshes. Smaller teams can use agentgateway on its own but should expect to learn CEL policies. Read MCP gateways explained if you are new to the idea.
Pricing
Solo's pricing page says "the open-source projects agentgateway, kgateway, kagent and agentregistry are free to use." For the enterprise edition, "pricing depends on your scope, environments and support needs," and you contact sales for a quote. No plan prices are listed.
Security and trust
Agentgateway's security features include caller authentication, per-identity tool scoping, guardrails against prompt injection, and audit trails. The enterprise edition adds MCP OAuth 2.1, tool-level RBAC, token exchange and audit trails described as "essential for compliance, debugging, and incident response." Solo links a Trust Center but its product page names no certifications. For how OAuth fits MCP, see our guide to MCP authentication and OAuth.
Agentgateway's Linux Foundation home matters for buyers who worry about lock-in, since no single vendor controls the project.
Alternatives
- IBM ContextForge is another Apache 2.0 gateway, with REST and gRPC translation and optional paid IBM Elite Support.
- Kong offers a managed AI gateway for LLM, MCP and A2A traffic with published starting prices.
- Obot is an MIT-licensed platform with a gateway, hosting and registries.
Agentgateway also appears in our list of MCP gateways. See all MCP company spotlights.
Next step
Start with open-source agentgateway in a test cluster and write one tool-scoping rule. If you need help designing MCP policies for production, our MCP development team can work through it with you.
Frequently asked questions
Who owns agentgateway?
The agentgateway site lists it as "a Series of LF Projects, LLC," a Linux Foundation project. Solo.io donated it and sells an enterprise distribution.
Is agentgateway free?
Yes. The open-source project is Apache 2.0 licensed and free. Solo Enterprise for agentgateway, with extra MCP security features and support, is priced by quote.
Can agentgateway turn an API into MCP tools?
Solo's enterprise page says you can "drop in any OpenAPI spec and instantly expose it as MCP tools." Check whether you need the enterprise edition for your use case.
What is agentregistry?
It is Solo.io's open-source registry for agents, MCP servers, skills and LLMs. Its CLI can run MCP servers and configure clients such as Cursor and VS Code.
