AI Gateway MCP Server

by Azure-Samples• 1k•• Scanned•Claim this listing•Request removal
Cloud Infrastructurea2aagentsapimanagementautogenazure

Labs to explore AI Models, MCP servers, and Agents with the AI Gateway powered by Azure API Management and Microsoft Foundry 🚀

AI Gateway is an open-source mcp server by Azure-Samples, written mainly in Jupyter Notebook, with 1,006 GitHub stars and the MIT license. Its code was last updated Sep 16, 2026.

Scan summary: scanned Nov 5, 2026 at commit 98c2425. Seen able to run shell commands, connect to the internet. Scan policy

Scanned
Full scan at 98c2425 · Nov 5, 2026
Scanned
Static code scanwarn
Secrets scanfail
Dependency audit517 known vulnerabilitiesfail
Manifestnonewarn
Buildfail
Boot & handshaken/a
Network egresswarn
Reproducible (×3)n/a

Findings (112)

  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    shared/utils.py:255
  • medium
    pydantic-ai@0.0.40: 1 known vulnerability
    PYSEC-2026-2976
    labs/ai-foundry-hosted-agents-custom-framework/src/frameworks/pydantic/requirements-pydantic.txt
  • medium
    strands-agents@1.45.0: 2 known vulnerabilities
    GHSA-3w55-933p-8pv5, GHSA-763v-5pjm-fx36
    labs/ai-foundry-hosted-agents-custom-framework/src/frameworks/strands/requirements-strands.txt
  • medium
    python-multipart@0.0.9: 8 known vulnerabilities
    PYSEC-2026-1851, PYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038 +3 more
    labs/ai-foundry-hosted-agents-custom-framework/src/frameworks/strands/requirements-strands.txt
  • medium
    tqdm@4.9.0: 2 known vulnerabilities
    PYSEC-2017-74, PYSEC-2026-1976
    labs/ai-foundry-hosted-agents-custom-framework/src/frameworks/strands/requirements-strands.txt
  • medium
    azure-core@1.37.0: 1 known vulnerability
    PYSEC-2026-1208
    labs/ai-foundry-hosted-agents/src/agent/requirements.txt
  • medium
    azure-core@1.33.0: 1 known vulnerability
    PYSEC-2026-1208
    labs/azure-ml-models/mlflow-model/requirements.txt
  • medium
    cryptography@44.0.2: 6 known vulnerabilities
    PYSEC-2026-2141, PYSEC-2026-35, PYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554 +1 more
    labs/azure-ml-models/mlflow-model/requirements.txt
  • medium
    fsspec@2025.3.2: 1 known vulnerability
    PYSEC-2026-4217
    labs/azure-ml-models/mlflow-model/requirements.txt
  • medium
    jupyter-core@5.7.2: 1 known vulnerability
    PYSEC-2026-1477
    labs/azure-ml-models/mlflow-model/requirements.txt
  • medium
    msgpack@1.1.0: 2 known vulnerabilities
    PYSEC-2026-3625, GHSA-j586-36cw-2gc2
    labs/azure-ml-models/mlflow-model/requirements.txt
  • medium
    oauthlib@3.2.2: 3 known vulnerabilities
    PYSEC-2026-4113, PYSEC-2026-4114, GHSA-7984-qgvg-3j9c
    labs/azure-ml-models/mlflow-model/requirements.txt
  • medium
    protobuf@5.29.4: 2 known vulnerabilities
    PYSEC-2026-1805, PYSEC-2026-1806
    labs/azure-ml-models/mlflow-model/requirements.txt
  • medium
    pyasn1@0.6.1: 9 known vulnerabilities
    PYSEC-2026-1810, PYSEC-2026-2263, PYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457 +4 more
    labs/azure-ml-models/mlflow-model/requirements.txt
  • medium
    sqlparse@0.5.3: 6 known vulnerabilities
    PYSEC-2026-3696, PYSEC-2026-3697, PYSEC-2026-3698, PYSEC-2026-3699, PYSEC-2026-3923 +1 more
    labs/azure-ml-models/mlflow-model/requirements.txt
  • medium
    tornado@6.4.2: 18 known vulnerabilities
    PYSEC-2025-265, PYSEC-2025-266, PYSEC-2025-267, PYSEC-2026-140, PYSEC-2026-1974 +13 more
    labs/azure-ml-models/mlflow-model/requirements.txt
  • medium
    urllib3@1.26.20: 7 known vulnerabilities
    PYSEC-2026-141, PYSEC-2026-1994, PYSEC-2026-1996, PYSEC-2026-1998, PYSEC-2026-1999 +2 more
    labs/azure-ml-models/mlflow-model/requirements.txt
  • medium
    requests@2.9.2: 5 known vulnerabilities
    PYSEC-2018-28, PYSEC-2023-74, PYSEC-2026-1872, PYSEC-2026-1873, PYSEC-2026-2275
    labs/mcp-from-graphql/src/graphql-mcp/requirements.txt
  • medium
    aiohttp@3.14.1: 11 known vulnerabilities
    PYSEC-2026-3545, PYSEC-2026-3546, PYSEC-2026-3547, GHSA-2g87-pp6c-29x5, GHSA-494j-54xm-rwp3 +6 more
    uv.lock
  • medium
    cryptography@48.0.1: 3 known vulnerabilities
    PYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554
    uv.lock
  • medium
    dnspython@2.8.0: 1 known vulnerability
    GHSA-45c3-73f7-pv4m
    uv.lock
  • medium
    mcp@1.21.2: 7 known vulnerabilities
    PYSEC-2026-1617, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
    uv.lock
  • medium
    oauthlib@3.3.1: 4 known vulnerabilities
    PYSEC-2026-4113, PYSEC-2026-4114, GHSA-3jp2-3mrg-2vxc, GHSA-7984-qgvg-3j9c
    uv.lock
  • medium
    starlette@1.3.0: 1 known vulnerability
    PYSEC-2026-249
    uv.lock
  • medium
    urllib3@2.7.0: 3 known vulnerabilities
    PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177
    uv.lock
  • medium
    @babel/plugin-transform-modules-systemjs@7.25.9: 1 known vulnerability
    GHSA-fv7c-fp4j-7gwp
    workshop/package-lock.json
  • medium
    body-parser@1.20.3: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    workshop/package-lock.json
  • medium
    brace-expansion@1.1.11: 8 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
    workshop/package-lock.json
  • medium
    browserslist@4.24.4: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    workshop/package-lock.json
  • medium
    compression@1.8.0: 1 known vulnerability
    GHSA-vc2v-76pw-4v95
    workshop/package-lock.json
  • medium
    fast-uri@3.0.6: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
    workshop/package-lock.json
  • medium
    image-size@1.2.1: 2 known vulnerabilities
    GHSA-5p2g-fcmc-qvqq, GHSA-w3rx-r6r6-pgpr
    workshop/package-lock.json
  • medium
    joi@17.13.3: 6 known vulnerabilities
    GHSA-4528-x5fx-h6hg, GHSA-6h2x-m376-mqjq, GHSA-6w3j-5fw6-r9vr, GHSA-gg4h-3hg2-grpc, GHSA-q7cg-457f-vx79 +1 more
    workshop/package-lock.json
  • medium
    js-yaml@3.14.1: 5 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m
    workshop/package-lock.json
  • medium
    js-yaml@4.1.0: 5 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m
    workshop/package-lock.json
  • medium
    launch-editor@2.10.0: 4 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-r825-w8mm-5pxw, GHSA-v6wh-96g9-6wx3
    workshop/package-lock.json
  • medium
    lodash@4.17.21: 2 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    workshop/package-lock.json
  • medium
    minimatch@3.1.2: 3 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
    workshop/package-lock.json
  • medium
    nanoid@3.3.11: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    workshop/package-lock.json
  • medium
    node-forge@1.3.1: 18 known vulnerabilities
    GHSA-2328-f5f3-gj25, GHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-554w-wpv2-vw27 +13 more
    workshop/package-lock.json
  • medium
    path-to-regexp@0.1.12: 1 known vulnerability
    GHSA-37ch-88jc-xwx2
    workshop/package-lock.json
  • medium
    picomatch@2.3.1: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    workshop/package-lock.json
  • medium
    postcss@8.5.3: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    workshop/package-lock.json
  • medium
    serialize-javascript@6.0.2: 3 known vulnerabilities
    GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v, GHSA-qj8w-gfj5-8c6v
    workshop/package-lock.json
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    workshop/package-lock.json
  • medium
    svgo@3.3.2: 4 known vulnerabilities
    GHSA-2p49-hgcm-8545, GHSA-4vpr-x523-8j87, GHSA-w27v-7q3p-w38r, GHSA-xpqw-6gx7-v673
    workshop/package-lock.json
  • medium
    uuid@8.3.2: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    workshop/package-lock.json
  • medium
    webpack-dev-middleware@5.3.4: 1 known vulnerability
    GHSA-g84c-rxfj-3j2c
    workshop/package-lock.json
  • medium
    ws@7.5.10: 1 known vulnerability
    GHSA-96hv-2xvq-fx4p
    workshop/package-lock.json
  • medium
    ws@8.18.1: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    workshop/package-lock.json
  • medium
    Install or build failed in a clean environment
    ude` or `exclude`) 2. use a `src-layout` 3. explicitly set `py_modules` or `packages` with a list of names To find more information, look for "package discovery" on setuptools docs. hint: Build failures usually indicate a problem with the package or the build environment
  • medium
    Install contacted hosts other than package registries
    releases.astral.sh
  • low
    python-dotenv@1.0.0: 1 known vulnerability
    PYSEC-2026-2270
    labs/ai-foundry-hosted-agents-custom-framework/src/frameworks/pydantic/requirements-pydantic.txt
  • low
    idna@3.9.0: 2 known vulnerabilities
    PYSEC-2026-215, PYSEC-2026-215
    labs/ai-foundry-hosted-agents-custom-framework/src/frameworks/strands/requirements-strands.txt
  • low
    opentelemetry-api@1.39.1: 1 known vulnerability
    GHSA-xcq7-p3pf-p88h
    labs/ai-foundry-hosted-agents/src/agent/requirements.txt
  • low
    python-dotenv@1.1.1: 1 known vulnerability
    PYSEC-2026-2270
    labs/ai-foundry-hosted-agents/src/agent/requirements.txt
  • low
    bokeh@2.4.3: 1 known vulnerability
    PYSEC-2026-1223
    labs/azure-ml-models/mlflow-model/requirements.txt
  • low
    distributed@2023.2.0: 1 known vulnerability
    PYSEC-2026-169
    labs/azure-ml-models/mlflow-model/requirements.txt
  • low
    flask@3.0.3: 1 known vulnerability
    PYSEC-2026-2151
    labs/azure-ml-models/mlflow-model/requirements.txt
  • low
    flask-cors@5.0.1: 3 known vulnerabilities
    PYSEC-2026-1383, PYSEC-2026-1384, PYSEC-2026-1385
    labs/azure-ml-models/mlflow-model/requirements.txt
  • low
    fonttools@4.57.0: 1 known vulnerability
    PYSEC-2026-1389
    labs/azure-ml-models/mlflow-model/requirements.txt
  • low
    idna@3.10: 1 known vulnerability
    PYSEC-2026-215
    labs/azure-ml-models/mlflow-model/requirements.txt
  • low
    opentelemetry-api@1.32.0: 1 known vulnerability
    GHSA-xcq7-p3pf-p88h
    labs/azure-ml-models/mlflow-model/requirements.txt
  • low
    paramiko@3.5.1: 2 known vulnerabilities
    PYSEC-2026-2858, PYSEC-2026-2858
    labs/azure-ml-models/mlflow-model/requirements.txt
  • low
    pyarrow@14.0.2: 1 known vulnerability
    PYSEC-2024-161
    labs/azure-ml-models/mlflow-model/requirements.txt
  • low
    pygments@2.19.1: 1 known vulnerability
    PYSEC-2026-2987
    labs/azure-ml-models/mlflow-model/requirements.txt
  • low
    pynacl@1.5.0: 1 known vulnerability
    PYSEC-2026-3002
    labs/azure-ml-models/mlflow-model/requirements.txt
  • low
    python-dotenv@1.1.0: 1 known vulnerability
    PYSEC-2026-2270
    labs/azure-ml-models/mlflow-model/requirements.txt
  • low
    requests@2.32.3: 2 known vulnerabilities
    PYSEC-2026-1872, PYSEC-2026-2275
    labs/azure-ml-models/mlflow-model/requirements.txt
  • low
    werkzeug@3.1.3: 4 known vulnerabilities
    PYSEC-2026-2044, PYSEC-2026-2046, PYSEC-2026-2320, PYSEC-2026-4312
    labs/azure-ml-models/mlflow-model/requirements.txt
  • low
    fastmcp@3.4.9: 1 known vulnerability
    GHSA-7xgj-8392-5q4r
    labs/mcp-from-graphql/src/graphql-mcp/requirements.txt
  • low
    fastmcp-slim@3.4.9: 1 known vulnerability
    GHSA-7xgj-8392-5q4r
    labs/mcp-from-graphql/src/graphql-mcp/requirements.txt
  • low
    multidict@6.7.1: 1 known vulnerability
    PYSEC-2026-4244
    uv.lock
  • low
    opentelemetry-api@1.40.0: 1 known vulnerability
    GHSA-xcq7-p3pf-p88h
    uv.lock
  • low
    pydantic-settings@2.14.1: 1 known vulnerability
    GHSA-4xgf-cpjx-pc3j
    uv.lock
  • low
    setuptools@82.0.1: 2 known vulnerabilities
    PYSEC-2026-3447, GHSA-xmj3-9gf7-h52w
    uv.lock
  • low
    werkzeug@3.1.8: 1 known vulnerability
    PYSEC-2026-4312
    uv.lock
  • low
    @babel/core@7.26.10: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    workshop/package-lock.json
  • low
    ajv@6.12.6: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    workshop/package-lock.json
  • low
    ajv@8.17.1: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    workshop/package-lock.json
  • low
    colord@2.9.3: 1 known vulnerability
    GHSA-2wm5-q62r-hmrv
    workshop/package-lock.json
  • low
    deepmerge@4.3.1: 1 known vulnerability
    GHSA-gcqx-w48m-w2h4
    workshop/package-lock.json
  • low
    follow-redirects@1.15.9: 1 known vulnerability
    GHSA-r4q5-vmmm-2653
    workshop/package-lock.json
  • low
    http-proxy-middleware@2.0.7: 3 known vulnerabilities
    GHSA-4www-5p9h-95mh, GHSA-64mm-vxmg-q3vj, GHSA-9gqv-wp59-fq42
    workshop/package-lock.json
  • low
    mdast-util-to-hast@13.2.0: 1 known vulnerability
    GHSA-4fh9-h7wg-q85m
    workshop/package-lock.json
  • low
    on-headers@1.0.2: 1 known vulnerability
    GHSA-76c9-3jph-rj3q
    workshop/package-lock.json
  • low
    postcss-selector-parser@6.1.2: 2 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    workshop/package-lock.json
  • low
    postcss-selector-parser@7.1.0: 2 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    workshop/package-lock.json
  • low
    qs@6.13.0: 5 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
    workshop/package-lock.json
  • low
    webpack@5.99.2: 2 known vulnerabilities
    GHSA-38r7-794h-5758, GHSA-8fgc-7cc6-rx7x
    workshop/package-lock.json
  • low
    webpack-dev-server@4.15.2: 6 known vulnerabilities
    GHSA-4v9v-hfq4-rm2v, GHSA-79cf-xcqc-c78w, GHSA-9jgg-88mc-972h, GHSA-f5vj-f2hx-8m93, GHSA-m28w-2pqf-7qgj +1 more
    workshop/package-lock.json
  • low
    yaml@1.10.2: 1 known vulnerability
    GHSA-48c2-rrv3-qjmp
    workshop/package-lock.json
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
files.pythonhosted.orgpypi.orgreleases.astral.sh
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

AI Gateway alternatives

View more →

Similar mcp servers in Cloud Infrastructure, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
AI Gateway (this page)
Azure-Samples
1kMITSep 16, 2026Scanned, no flagged issues
TREK
liketrek
15kAGPL-3.0Nov 1, 2026Scanned, no flagged issues
MCP
awslabs
9.9kApache-2.0Oct 31, 2026Scanned, no flagged issues
MCP Context Forge
IBM
4.7kApache-2.0Oct 30, 2026Scanned, no flagged issues
Mcpo
open-webui
4.4kMITMay 17, 2026Scanned, no flagged issues
Lean Ctx
yvgude
3.9kApache-2.0Oct 31, 2026Scanned, no flagged issues