Speakeasy MCP: What It Offers, Pricing and Alternatives

Speakeasy started as an SDK generator for APIs. Today it calls its main product an "AI control plane," with an MCP gateway at the center. Its CLI can still generate an MCP server from an OpenAPI document.

Checked against: Speakeasy's MCP Gateway page on 28 October 2026. eSEOspace did not test Speakeasy's products.

At a glance

What Speakeasy offers for MCP

The MCP Gateway

Speakeasy's MCP Gateway page says the gateway "provisions access from your IdP, normalizes authentication, and generates a full audit trail of every tool call." An IdP is an identity provider, such as Okta or Microsoft Entra ID.

The page describes a four-step loop:

1. Discover. The gateway surfaces "shadow MCP," meaning servers employees connected without approval.
2. Promote. Admins move a discovered server into an official registry, filtered to approved tools.
3. Distribute. Group membership in Okta or Entra decides who gets which servers in Claude, Cursor and ChatGPT.
4. Govern. Every tool call passes one control point with OAuth 2.1, tool-level role-based access control (RBAC) and an audit log.

Speakeasy says the audit log records the employee, client, server, tool, arguments and result. It streams to Datadog, Splunk or any OpenTelemetry collector. The gateway can also run on a Tailscale tailnet, so the public path is closed.

On security, the same page lists session quarantine, data loss prevention (DLP) that redacts secrets and personal data, and prompt injection detection. A "gateway endpoint" gives agents four tools: list what is reachable, describe a server, fetch schemas and execute.

The MCP server generator

Speakeasy's docs page, Generate MCP Servers from OpenAPI Documents, gives the steps. You install the Speakeasy CLI, run speakeasy quickstart --mcp, and say whether you plan to deploy on Cloudflare. The result is a TypeScript MCP server in a directory you choose.

The docs say you can run that server from the generated code or publish it to npm. You can also use a generated MCP Bundle (MCPB) file that Claude Desktop can load. The same docs cover Cloudflare Workers deployment, adding OAuth, runtime scopes and a "dynamic mode" for progressive tool discovery.

If you are new to how servers are built, our guide on how to build an MCP server explains what a generator is producing for you.

Who it's for

Speakeasy's site names three buyer teams: security, compliance and AI enablement. The gateway fits a company where many employees already connect their own MCP servers and IT needs one inventory and one log.

The generator fits a different buyer: an API company that already maintains an OpenAPI spec and wants an MCP server without writing one by hand.

Pricing

Speakeasy's pricing page lists two options as of October 2026:

The FAQ says both plans carry "the same control plane," including connectors, OAuth, provisioning and RBAC. Estimate your token and egress volume before you commit.

Security and trust

Speakeasy's security page says the platform is "backed by independent audits" confirming SOC 2 Type 2 and ISO 27001 certification. Ask for the reports during procurement.

The gateway FAQ says backend agents get "a static credential that it uses to request short-lived access tokens." Employees sign in through the IdP with OAuth 2.1, "even when the upstream MCP server does not support it." For background on these terms, see our MCP security hub.

Alternatives

• Zuplo pairs an MCP gateway with an MCP server handler that reads your OpenAPI file.
• APIMatic generates curated MCP servers from OpenAPI, with its MCP platform in private beta.
• Kong is an API gateway company with MCP features, covered in our platforms batch.

For a wider comparison, see our MCP gateways roundup or browse all MCP company spotlights.

Next step

If you are weighing a generated server against a custom one, list the API operations agents truly need first. Then compare the generated output with a hand-built design. Our MCP development team can help scope either path.

Frequently asked questions