Agentgateway MCP Server

by agentgateway• 5.8k•• Scanned•Claim this listing•Request removal
Cloud Infrastructureagentsaiai gatewayapi gatewaygateway api

Next Generation Agentic Proxy for AI Agents and MCP servers

Agentgateway is an open-source mcp server by agentgateway, written mainly in Rust, with 5,842 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 30, 2026.

Scan summary: scanned Nov 5, 2026 at commit 6f8e1d1. No capabilities flagged by our checks. Scan policy

Scanned
Full scan at 6f8e1d1 · Nov 5, 2026
Scanned
Static code scanpass
Secrets scanfail
Dependency audit30 known vulnerabilitieswarn
Manifestnonewarn
Buildn/a
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (164)

  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • medium
    pulldown-cmark@0.13.4: 4 known vulnerabilities
    RUSTSEC-2026-0414, RUSTSEC-2026-0433, RUSTSEC-2026-0414, RUSTSEC-2026-0433
    Cargo.lock
  • medium
    rmcp@0.10.0: 5 known vulnerabilities
    RUSTSEC-2026-0189, GHSA-33f5-2c5q-wgwj, GHSA-9g45-5xwm-f3wc, GHSA-9pj6-vhgr-3mwh, GHSA-c9xm-49cp-xcr9
    Cargo.lock
  • medium
    istio.io/istio@0.0.0-20261029174717-713df3ba26e2: 5 known vulnerabilities
    GHSA-7774-7vr3-cc8j, GHSA-856q-xv3c-7f2f, GHSA-hqxw-mm44-gc4r, GHSA-qcvw-82hh-gq38, GHSA-xwx5-5c9g-x68x
    go.mod
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    controller/pkg/syncer/krtxds/xds_internal_test.go:25
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/deployer_helm.go:28
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-controller-but-custom-gatewayclass-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-custom-configmap-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-daemonset-gw-override-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-deep-merging-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-daemonset-gwc-out.yaml:78
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-image-override-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-azure-annotations-out.yaml:79
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-image-pull-secrets-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-gke-subsetting-static-ip-out.yaml:80
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-aws-annotations-out.yaml:81
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-aws-nlb-dummy-port-out.yaml:81
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-gateway-addresses-out.yaml:77
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-istio-empty-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-istio-noauto-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-istio-additional-trust-domains-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-gateway-addresses-cluster-routability-out.yaml:77
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-image-repo-only-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-init-containers-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-omitdefaultsecuritycontext-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-omitdefaultsecuritycontext-ref-gwp-on-gw-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-params-primary-out.yaml:84
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-env-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-istio-optout-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-hpa-overlay-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-replicas-out.yaml:77
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-istio-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-pdb-overlay-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-long-gateway-name-exactly-63-chars-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-resource-requests-overlay-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-loadbalancer-static-ip-out.yaml:77
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-tls-out.yaml:104
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-istio-noparams-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-both-gwc-and-gw-have-params-out.yaml:77
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-logging-format-out.yaml:78
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-rawconfig-typed-conflict-out.yaml:80
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-spiffe-out.yaml:78
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-model-catalog-configmap-out.yaml:78
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-yaml-injection-out.yaml:94
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-sa-iam-annotations-out.yaml:78
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-security-context-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-shutdown-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-agwp-pod-scheduling-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-sidecar-containers-out.yaml:76
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-strategic-merge-patch-out.yaml:86
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-rawconfig-binds-out.yaml:88
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-infrastructure-out.yaml:102
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/testdata/agentgateway-long-gateway-name-over-63-chars-out.yaml:76
  • low
    Possible example credential in docs/tests: jwt
    5 matches in this file
    controller/test/e2e/jwtauth_test.go:27
  • low
    Possible example credential in docs/tests: private-key
    controller/test/e2e/testdata/dynamic-ca-cert/dynamic-ca-cert-invalid-ca.yaml:37
  • low
    Possible example credential in docs/tests: kubernetes-secret-yaml
    2 matches in this file
    controller/test/e2e/testdata/backendauth/credentials.yaml:17
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    controller/test/e2e/testdata/backendauth/credentials.yaml:24
  • low
    Possible example credential in docs/tests: kubernetes-secret-yaml
    controller/test/e2e/manifests/agent-gateway-base.yaml:176
  • low
    Possible example credential in docs/tests: private-key
    controller/test/e2e/manifests/agent-gateway-base.yaml:180
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/test/deployer/internal_helm_test.go:95
  • low
    Possible example credential in docs/tests: private-key
    controller/test/e2e/testdata/backendauth/valid-jwt-sign.yaml:24
  • low
    Possible example credential in docs/tests: private-key
    controller/test/e2e/testdata/dynamic-ca-cert/dynamic-ca-cert.yaml:27
  • low
    Possible example credential in docs/tests: kubernetes-secret-yaml
    controller/test/e2e/testdata/secret-ca/source.yaml:10
  • low
    Possible example credential in docs/tests: generic-api-key
    controller/pkg/deployer/agentgateway_parameters_test.go:794
  • low
    Possible example credential in docs/tests: jwt
    3 matches in this file
    controller/test/testutils/testjwt/remote.go:8
  • low
    Possible example credential in docs/tests: kubernetes-secret-yaml
    controller/test/e2e/testdata/secret-ca/custom-key.yaml:4
  • low
    Possible example credential in docs/tests: private-key
    crates/agentgateway/tests/common/testdata/key.pem:1
  • low
    Possible example credential in docs/tests: generic-api-key
    6 matches in this file
    crates/agentgateway/tests/tests/llm_providers.rs:547
  • low
    Possible example credential in docs/tests: private-key
    crates/agentgateway/tests/tests/auth.rs:122
  • low
    Possible example credential in docs/tests: private-key
    crates/agentgateway/tests/common/testdata/ca-key.pem:1
  • low
    Possible example credential in docs/tests: generic-api-key
    crates/agentgateway/tests/tests/substrate.rs:2549
  • low
    Possible example credential in docs/tests: private-key
    examples/mcp-tls/certs/ca-key.pem:1
  • low
    Possible example credential in docs/tests: private-key
    examples/mcp-tls/certs/key.pem:1
  • low
    Possible example credential in docs/tests: curl-auth-user
    examples/mcp-authzen/cli-tests.sh:42
  • low
    Possible example credential in docs/tests: curl-auth-user
    examples/traffic-token-exchange/oauth-rfc8693/README.md:44
  • low
    Possible example credential in docs/tests: curl-auth-header
    examples/traffic-unified-gateway/README.md:51
  • low
    Possible example credential in docs/tests: curl-auth-user
    2 matches in this file
    examples/traffic-token-exchange/jwt-authz-grant/README.md:83
  • low
    Possible example credential in docs/tests: private-key
    examples/traffic-jwt-sign/config.yaml:16
  • low
    Possible example credential in docs/tests: curl-auth-user
    examples/traffic-token-exchange/extauthz/README.md:27
  • low
    Possible example credential in docs/tests: private-key
    examples/mcp-authentication/auth_server.py:16
  • low
    Possible example credential in docs/tests: generic-api-key
    ui/tests/fixtures.ts:119
  • low
    atomic-polyfill@1.0.3: 2 known vulnerabilities
    RUSTSEC-2023-0089, RUSTSEC-2023-0089
    Cargo.lock
  • low
    crypto-bigint@0.7.5: 2 known vulnerabilities
    RUSTSEC-2026-0387, RUSTSEC-2026-0387
    Cargo.lock
  • low
    ctutils@0.4.3: 2 known vulnerabilities
    RUSTSEC-2026-0385, RUSTSEC-2026-0385
    Cargo.lock
  • low
    paste@1.0.15: 2 known vulnerabilities
    RUSTSEC-2024-0436, RUSTSEC-2024-0436
    Cargo.lock
  • low
    github.com/google/cel-go@0.29.2: 2 known vulnerabilities
    GO-2026-6094, GO-2026-6094
    go.mod
  • low
    golang.org/x/crypto@0.58.0: 2 known vulnerabilities
    GO-2026-5932, GO-2026-5932
    go.mod
  • low
    golang.org/x/net@0.61.0: 4 known vulnerabilities
    GO-2026-6860, GO-2026-6866, GO-2026-6860, GO-2026-6866
    go.mod
  • low
    No manifest declaring network access and environment variables (agent.json)
  • info
    Ignored the repo's scanner suppression config (1 file)
    osv-scanner.toml

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Agentgateway alternatives

View more →

Similar mcp servers in Cloud Infrastructure, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Agentgateway (this page)
agentgateway
5.8kApache-2.0Oct 30, 2026Scanned, no flagged issues
TREK
liketrek
15kAGPL-3.0Nov 1, 2026Scanned, no flagged issues
MCP
awslabs
9.9kApache-2.0Oct 31, 2026Scanned, no flagged issues
MCP Context Forge
IBM
4.7kApache-2.0Oct 30, 2026Scanned, no flagged issues
Mcpo
open-webui
4.4kMITMay 17, 2026Scanned, no flagged issues
Lean Ctx
yvgude
3.9kApache-2.0Oct 31, 2026Scanned, no flagged issues