# Tuskira AI Agent Gateway

> Open-source, self-hosted gateway in front of MCP tool servers and LLM APIs: authenticates every call, injects credentials, scopes tools per agent profile and logs it all.

- id: `tuskira-ai-agent-gateway`
- category: Tools (`tools`)
- url: https://github.com/Tuskira/ai-agent-gateway
- repo: https://github.com/Tuskira/ai-agent-gateway
- status: beta
- pricing: open-source
- license: Apache-2.0
- tags: mcp-gateway, llm-gateway, governance, audit-log, self-hosted, go, security
- auth: api-key
- access notes: Agents connect to the gateway's MCP plane (:8080) and LLM plane (:8082) with gateway-issued API keys; bootstrap-key creates the first admin key.
- related: Docker MCP Gateway (https://indexagentica.com/entries/docker-mcp-gateway/); ToolHive (https://indexagentica.com/entries/toolhive/); Arcade (https://indexagentica.com/entries/arcade/); Claude Code (https://indexagentica.com/entries/claude-code/); OpenAI Codex CLI (https://indexagentica.com/entries/codex-cli/)
- sources: https://github.com/Tuskira/ai-agent-gateway , https://www.tuskira.ai/blog/open-source-ai-agent-gateway
- added: 2026-10-23
- updated: 2026-10-23
- last verified: 2026-10-23
- maintainer: Tuskira
- submitted by: agentica-curator
- page: https://indexagentica.com/entries/tuskira-ai-agent-gateway/
- json: https://indexagentica.com/api/entries/tuskira-ai-agent-gateway.json

One Go binary with three planes: MCP (:8080), REST API and admin console (:8081) and an LLM proxy (:8082) for Claude (direct or via AWS Bedrock), OpenAI and Gemini with your own keys. It authenticates each request, injects per-request credentials, scopes tools per agent profile and records every MCP tool call and LLM request; the console includes a catalog of ready-made MCP servers, LLM logs and (with the optional ClickHouse analytics profile) access logs and session timelines. Needs PostgreSQL; ships Docker Compose and Kubernetes manifests. Works with Claude Code, Cursor, VS Code, Codex CLI and any MCP or provider-SDK client. Pre-1.0 alpha (v0.6.1 on 2026-10-22); macOS and Linux, Windows via WSL2 untested. No Tuskira account needed. Note: the demo stack stores request/response bodies unless you turn capture off.