{"description":"Sourced facts behind metorial.com/comparisons. Every stated fact has the URL it comes from and a quote from that page; anything else is \"not-published\".","metorial":{"id":"metorial","name":"Metorial","vendor":"Metorial","url":"https://metorial.com","category":"mcp-gateway","frame":"self","checkedAt":"2026-10-16","reviewedBy":"Karim Rahme","summary":"Open-source MCP and skills gateway: one URL behind company SSO for 1,000+ integrations, in every AI client.","whereTheyWin":[],"pricing":{"public":true,"model":"per plan (see pricing/data/definition.ts)","freeTier":"yes","plans":[{"name":"Metorial Dev","price":"$0","unit":"month","source":"https://metorial.com/pricing"},{"name":"Metorial Scale","price":"$250","unit":"month","source":"https://metorial.com/pricing"},{"name":"Metorial for Enterprise","price":"Contact sales","unit":"","source":"https://metorial.com/pricing"}],"source":"https://metorial.com/pricing"},"limits":[],"facts":{"catalogSize":{"value":"1,000+","source":"https://metorial.com/features/managed-integrations","quote":"Metorial provides a library of more than 1000 managed integrations that are verified to work with popular AI agents"},"verifiedServers":{"value":"yes","source":"https://metorial.com/features/managed-integrations","quote":"more than 1000 managed integrations that are verified to work with popular AI agents"},"byoMcpServer":{"value":"yes","source":"https://metorial.com/features/custom-mcp","quote":"Connect your own integrations and internal systems to AI agents by building them as custom MCP servers."},"remoteMcpServers":{"value":"yes","source":"https://metorial.com/features/remote-mcp","quote":"Connect to MCP servers hosted by other vendors, like Linear, Sentry, Atlassian, and Microsoft"},"localOrDockerServers":{"value":"yes","source":"https://metorial.com/features/docker-mcp","quote":"Deploy any MCP server that can be packaged as a Docker container on Metorial, run it in an isolated enclave"},"singleUrlAllTools":{"value":"yes","source":"https://metorial.com/features/magic-mcp","quote":"Metorial generates virtual Magic MCP servers for each person. One-time SSO setup, no tokens or config"},"versionPinning":{"value":"yes","source":"https://metorial.com/features/version-pinning","quote":"Version pinning locks an integration to a version you trust."},"schemaChangeMonitoring":{"value":"yes","source":"https://metorial.com/features/schema-change-monitoring","quote":"tracks changes to tools, configs, and schemas. An unexpected change is caught and alerted before it breaks an agent"},"worksInClaude":{"value":"yes","source":"https://metorial.com/docs/platform/get-started","quote":"Let your team connect AI agents and MCP clients like Cursor, ChatGPT, and Claude to approved apps, tools, and shared skills"},"worksInClaudeCode":{"value":"yes","source":"https://github.com/metorial/metorial","quote":"Use integrations across tools like Claude Code, Codex, and Cursor without breaking security policies."},"worksInChatGPT":{"value":"yes","source":"https://metorial.com/docs/platform/get-started","quote":"Let your team connect AI agents and MCP clients like Cursor, ChatGPT, and Claude to approved apps, tools, and shared skills"},"worksInCursor":{"value":"yes","source":"https://metorial.com/docs/platform/get-started","quote":"Let your team connect AI agents and MCP clients like Cursor, ChatGPT, and Claude to approved apps, tools, and shared skills"},"worksInCodex":{"value":"yes","source":"https://github.com/metorial/metorial","quote":"Use integrations across tools like Claude Code, Codex, and Cursor without breaking security policies."},"worksInCopilot":{"value":"yes","source":"https://metorial.com/comparisons/best-enterprise-ai-gateways-2026","quote":"Every integration sits behind one URL that works the same in Claude, Cursor, Codex, or Copilot"},"customAgentsSdk":{"value":"yes","source":"https://github.com/metorial/metorial","quote":"Expose integrations as tools to any agent framework."},"ownChatUiRequired":{"value":"no","source":"https://metorial.com/features/vendor-agnostic","quote":"Metorial works with any model, agent, and provider."},"perUserOAuth":{"value":"yes","source":"https://metorial.com/features/magic-mcp","quote":"One-time SSO setup, no tokens or config, and access that stays scoped to each person."},"managedOAuthApps":{"value":"yes","source":"https://metorial.com/features/sso-for-providers","quote":"OAuth apps are managed by Metorial by default, and customer-managed OAuth is supported for enterprises that want more control."},"byoOAuthApp":{"value":"yes","source":"https://metorial.com/features/sso-for-providers","quote":"OAuth apps are managed by Metorial by default, and customer-managed OAuth is supported for enterprises that want more control."},"sso":{"value":"yes","source":"https://metorial.com/features/saml","quote":"SAML lets your people sign in once with your identity provider"},"scim":{"value":"yes","source":"https://metorial.com/","quote":"SSO, SAML, SCIM"},"roleBasedToolAccess":{"value":"yes","source":"https://metorial.com/features/policies-access-control","quote":"granular, role-based access control over users, agents, and admins, with policies across skills, integrations, and agents"},"toolLevelAllowDeny":{"value":"yes","source":"https://metorial.com/docs/build/operate/providers","quote":"Provider setup also includes tool filters. You can allow, reject, or mix tools by category"},"readOnlyModes":{"value":"yes","source":"https://metorial.com/docs/build/operate/sessions","quote":"Preventing destructive actions (e.g. allowing read-only tools only)"},"auditLogPerPerson":{"value":"yes","source":"https://metorial.com/features/audit-logs","quote":"a complete, filterable history of what people, AI agents, and machine users did across your integrations and skills."},"callTracing":{"value":"yes","source":"https://metorial.com/features/session-logs","quote":"Session logs capture every tool call, message, and execution in an MCP connection."},"logExportSiem":{"value":"yes","source":"https://github.com/metorial/outpost/tree/main/apps/mcp-proxy/examples","quote":"Read-only logging of every tool call, prompt get, and resource read -- shipped to Datadog and Splunk at once."},"dlpRedaction":{"value":"yes","source":"https://github.com/metorial/outpost","quote":"you can observe, transform, or block it before it reaches Metorial."},"promptInjectionDetection":{"value":"yes","source":"https://metorial.com/features/prompt-injection-monitoring","quote":"Metorial Protoguard monitors every tool call, message, and execution for prompt injection attacks in real time."},"toolPoisoningProtection":{"value":"yes","source":null,"quote":null,"note":"Through Protoguard."},"skillsAuthoring":{"value":"yes","source":"https://metorial.com/features/skills-collaboration","quote":"Domain experts build them together in a collaborative document editor, share them across teams, and govern who can use them."},"skillsGitSync":{"value":"yes","source":"https://metorial.com/features/skill-export","quote":"Skill export publishes the skills you build in Metorial as a Skill Marketplace on GitHub, GitLab, Bitbucket, or Azure DevOps."},"skillsByRole":{"value":"yes","source":"https://metorial.com/mcp-gateway","quote":"Teams edit skills in the browser, sync them to Git, and deliver them by role"},"skillsOverMcp":{"value":"not-published","source":null,"quote":null},"openSource":{"value":"FSL-1.1-ALv2 engine (Apache 2.0 after two years); Apache-2.0 integration catalog","source":"https://github.com/metorial/metorial-platform/blob/main/LICENSE","quote":"Functional Source License, Version 1.1, ALv2 Future License","note":"The engine (metorial-platform) is source-available under FSL and converts to Apache 2.0 two years after each release. The integration catalog (metorial/metorial) is Apache-2.0."},"selfHost":{"value":"yes","source":"https://github.com/metorial/metorial","quote":"It is open source and can be self-hosted."},"vpcOnPrem":{"value":"yes","source":"https://metorial.com/features/on-prem","quote":"Metorial offers on-prem hosting for organizations with strict compliance needs, with full control over data and infrastructure"},"airGapped":{"value":"yes","source":null,"quote":null},"euRegion":{"value":"yes","source":"https://metorial.com/features/multi-region","quote":"Metorial offers EU and US regions so you can meet data residency requirements"},"soc2Type2":{"value":"yes","source":"https://metorial.com/security","quote":"SOC 2 Type 2 and GDPR compliant, with EU and US regions."},"iso27001":{"value":"not-published","source":null,"quote":null},"hipaa":{"value":"yes","source":null,"quote":null,"note":"Signs BAAs."},"gdprDpa":{"value":"yes","source":"https://metorial.com/security","quote":"SOC 2 Type 2 and GDPR compliant, with EU and US regions.","note":"A data processing agreement is published at /legal/data-processing-agreement."},"publicPricing":{"value":"yes","source":"https://metorial.com/pricing","quote":"Metorial Pricing: Free Dev Plan, Scale from $250/mo, Enterprise"},"freeTier":{"value":"yes","source":"https://metorial.com/pricing","quote":"Metorial Pricing: Free Dev Plan, Scale from $250/mo, Enterprise"},"startingPrice":{"value":"$0 (Dev); Scale from $250/month","source":"https://metorial.com/pricing","quote":"Metorial Pricing: Free Dev Plan, Scale from $250/mo, Enterprise"},"pricingModel":{"value":"Flat monthly plans with paid add-ons (extra seats, tool calls)","source":"https://metorial.com/pricing","quote":"Add more Workforce Seats beyond the seats included in your plan."},"llmGateway":{"value":"no","source":null,"quote":null},"costTrackingPerPerson":{"value":"no","source":null,"quote":null}},"sourcesVisited":["https://github.com/metorial/metorial","https://github.com/metorial/metorial-platform/blob/main/LICENSE","https://metorial.com/comparisons/best-enterprise-ai-gateways-2026","https://metorial.com/docs/build/operate/providers","https://metorial.com/docs/build/operate/sessions","https://metorial.com/docs/platform/get-started","https://metorial.com/features/audit-logs","https://metorial.com/features/custom-mcp","https://metorial.com/features/docker-mcp","https://metorial.com/features/magic-mcp","https://metorial.com/features/managed-integrations","https://metorial.com/features/multi-region","https://metorial.com/features/on-prem","https://metorial.com/features/policies-access-control","https://metorial.com/features/prompt-injection-monitoring","https://metorial.com/features/remote-mcp","https://metorial.com/features/saml","https://metorial.com/features/schema-change-monitoring","https://metorial.com/features/session-logs","https://metorial.com/features/skill-export","https://metorial.com/features/skills-collaboration","https://metorial.com/features/sso-for-providers","https://metorial.com/features/vendor-agnostic","https://metorial.com/features/version-pinning","https://metorial.com/mcp-gateway","https://metorial.com/pricing","https://metorial.com/security","https://github.com/metorial/outpost","https://github.com/metorial/outpost/tree/main/apps/mcp-proxy/examples"],"github":{"repo":"metorial/metorial","url":"https://github.com/metorial/metorial","license":"FSL-1.1-ALv2","licenseSource":"https://github.com/metorial/metorial/blob/main/LICENSE","stars":3367,"starsCheckedAt":"2026-10-19","selfHostMethod":"Docker Compose","selfHostSource":"https://github.com/metorial/metorial-platform/blob/dev/self-hosting.md"}},"vendors":[{"id":"archestra","name":"Archestra","vendor":"Archestra.AI","url":"https://archestra.ai","category":"mcp-gateway","frame":"direct","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"AGPL-3.0 self-hosted platform combining MCP gateway and registry, LLM proxy with budgets, agents, chat, RAG and guardrails.","whereTheyWin":[{"text":"LLM proxy with hard spend limits per organization, team, user, agent, virtual key or environment; requests are blocked with HTTP 402 once a limit is hit.","source":"https://archestra.ai/docs/llm-proxy/costs-and-limits"},{"text":"Enterprise features (SSO, RBAC, granular access control) are free in production for companies under 30 users.","source":"https://archestra.ai/docs/platform-pricing-model"},{"text":"Session-level deterministic guardrails: tool results add restrictions to the session and later tool calls must satisfy them, enforced outside the agent loop.","source":"https://archestra.ai/docs/agents/guardrails"}],"company":{"founded":"2025","hq":"London","funding":"$10M seed led by 20VC (June 2, 2026); ~$13.5M raised to date","ownership":"Private, venture-backed","source":"https://dealroom.co/news/130913-archestra-ai-raises-10m-seed-led-by-20vc/"},"pricing":{"public":false,"model":"contact sales","freeTier":"yes","plans":[{"name":"Open source (AGPL-3.0)","price":"Free","unit":"self-hosted","includes":"Base platform: MCP gateway, registry, LLM proxy, chat, agents","source":"https://archestra.ai/docs/platform-pricing-model"},{"name":"Enterprise (small-team exception)","price":"Free","unit":"companies with fewer than 30 users","includes":"Enterprise features in production: RBAC, granular access control, SSO & OIDC, RAG access control, encryption at rest, 2FA","source":"https://archestra.ai/docs/platform-pricing-model"},{"name":"Enterprise","price":"Contact sales","unit":"license (30+ users)","includes":"Enterprise features above for 30+ users","source":"https://archestra.ai/docs/platform-pricing-model"},{"name":"Platform + AI Security","price":"Contact sales","unit":"license","includes":"Enterprise plus Guardrails and OpenAPPA integration (beta)","source":"https://archestra.ai/docs/platform-pricing-model"}],"extras":[],"source":"https://archestra.ai/docs/platform-pricing-model"},"limits":[{"name":"Free enterprise features","value":"Fewer than 30 users company-wide; exception ceases at 30+","source":"https://archestra.ai/docs/platform-pricing-model"},{"name":"Spend limit enforcement","value":"Blocks requests once spend reaches limit (HTTP 402 token_cost_limit_exceeded)","source":"https://archestra.ai/docs/llm-proxy/costs-and-limits"}],"facts":{"catalogSize":{"value":"900+","source":"https://archestra.ai","quote":"a curated catalog of 900+ evaluated Model Context Protocol servers for AI agents."},"verifiedServers":{"value":"partial","source":"https://archestra.ai","quote":"a curated catalog of 900+ evaluated Model Context Protocol servers for AI agents.","note":"Catalog servers are 'evaluated'; no formal verification program described."},"byoMcpServer":{"value":"yes","source":"https://archestra.ai/docs/mcp/servers","quote":"Pick self-hosted when Archestra should run it, hold its secrets, and show its logs."},"remoteMcpServers":{"value":"yes","source":"https://archestra.ai/docs/mcp/servers","quote":"Pick **Remote** for a server that runs elsewhere."},"localOrDockerServers":{"value":"yes","source":"https://archestra.ai/docs/mcp/servers","quote":"Run MCP server processes in Kubernetes and manage their runtime.","note":"Self-hosted servers run as Kubernetes workloads (embedded cluster in Docker quickstart)."},"singleUrlAllTools":{"value":"yes","source":"https://archestra.ai/docs/mcp/gateway","quote":"Give each client the right tools from one URL, and never hand out a server credential."},"versionPinning":{"value":"not-published","source":null,"quote":null},"schemaChangeMonitoring":{"value":"not-published","source":null,"quote":null},"worksInClaude":{"value":"yes","source":"https://archestra.ai/docs/integrations/claude-desktop","quote":"open Settings → Connectors, select archestra, and sign in.","note":"Claude Desktop documented; claude.ai web not explicitly."},"worksInClaudeCode":{"value":"yes","source":"https://archestra.ai/docs/get-started/connect","quote":"Claude Code, Codex, Cursor, Copilot CLI, OpenCode, and Kilo Code"},"worksInChatGPT":{"value":"not-published","source":null,"quote":null},"worksInCursor":{"value":"yes","source":"https://archestra.ai/docs/get-started/connect","quote":"Claude Code, Codex, Cursor, Copilot CLI, OpenCode, and Kilo Code"},"worksInCodex":{"value":"yes","source":"https://archestra.ai/docs/get-started/connect","quote":"Claude Code, Codex, Cursor, Copilot CLI, OpenCode, and Kilo Code"},"worksInCopilot":{"value":"partial","source":"https://archestra.ai/docs/get-started/connect","quote":"Claude Code, Codex, Cursor, Copilot CLI, OpenCode, and Kilo Code","note":"Copilot CLI named; Copilot in IDE not named."},"customAgentsSdk":{"value":"yes","source":"https://archestra.ai/docs/get-started/connect","quote":"any tool that supports MCP or an OpenAI-compatible API.","note":"Docs section 'AI SDKs and Frameworks'."},"ownChatUiRequired":{"value":"no","source":"https://archestra.ai/docs/get-started/connect","quote":"any tool that supports MCP or an OpenAI-compatible API.","note":"Ships its own chat & projects UI, but external clients supported."},"perUserOAuth":{"value":"yes","source":"https://archestra.ai/docs/mcp/servers","quote":"OAuth 2.1 or an API key they enter once","note":"README: OAuth + On-Behalf-Of so tools run as the user."},"managedOAuthApps":{"value":"not-published","source":null,"quote":null},"byoOAuthApp":{"value":"not-published","source":null,"quote":null},"sso":{"value":"yes","source":"https://archestra.ai/docs/admin/identity","quote":"Identity providers are an enterprise feature.","note":"Okta, Entra ID, Google, GitHub, GitLab, generic OIDC/SAML 2.0; enterprise license (free under 30 users)."},"scim":{"value":"not-published","source":null,"quote":null,"note":"Team sync from directory groups at SSO login; SCIM not mentioned."},"roleBasedToolAccess":{"value":"yes","source":"https://archestra.ai/docs/admin/access-control","quote":"A person who can use an agent gets only the tools from servers they can access, in both tool modes.","note":"Granular access control is an Enterprise feature."},"toolLevelAllowDeny":{"value":"partial","source":"https://archestra.ai/docs/mcp/gateway","quote":"Only the tools you choose. One gateway for engineers, one for support, one for an app.","note":"Per-gateway tool selection (Manual mode); no explicit per-tool allow/deny rules documented."},"readOnlyModes":{"value":"not-published","source":null,"quote":null,"note":"'Can read' permission level applies to platform resources, not tool calls."},"auditLogPerPerson":{"value":"yes","source":"https://archestra.ai/docs/admin/logs","quote":"Change: who, what, when, and if it succeeded.","note":"MCP Gateway log records tool, gateway, account, arguments and result per call."},"callTracing":{"value":"yes","source":"https://archestra.ai/docs","quote":"an audit log of every tool and model call"},"logExportSiem":{"value":"partial","source":"https://archestra.ai/docs/admin/logs","quote":"To send data to your own tools, use","note":"Metrics and traces export (homepage: OpenTelemetry and Prometheus); no named SIEM integration."},"dlpRedaction":{"value":"partial","source":"https://archestra.ai/docs/admin/logs","quote":"Content not stored","note":"Metadata-only logging mode; guardrails can redact secrets; no PII/DLP feature documented."},"promptInjectionDetection":{"value":"partial","source":"https://archestra.ai/docs/agents/guardrails","quote":"runs outside the agent's loop, so a prompt injection cannot change its decisions.","note":"Mitigation by deterministic session policy rather than detection; Guardrails in Beta and AI Security tier."},"toolPoisoningProtection":{"value":"not-published","source":null,"quote":null},"skillsAuthoring":{"value":"yes","source":"https://archestra.ai/docs/agents/skills","quote":"Create and edit SKILL.md skills in the UI or from chat."},"skillsGitSync":{"value":"partial","source":"https://archestra.ai/docs/agents/skills","quote":"Bring skills in from GitHub, GitLab, MCP servers, and plugins.","note":"Import documented; ongoing sync not stated."},"skillsByRole":{"value":"not-published","source":null,"quote":null,"note":"Skills scoped by user, agent and environment; roles/teams not mentioned on skills page."},"skillsOverMcp":{"value":"partial","source":"https://archestra.ai/docs/agents/skills","quote":"A connected client without a sandbox gets the files as text and saves them itself","note":"Shared marketplace for coding agents; transport not explicitly MCP."},"openSource":{"value":"AGPL-3.0 (enterprise features under separate LICENSE_ENTERPRISE)","source":"https://github.com/archestra-ai/archestra","quote":"AGPL-3.0 license"},"selfHost":{"value":"yes","source":"https://archestra.ai/docs/admin/deployment","quote":"Use Helm to run it in Kubernetes with a persistent database, workers, and MCP server workloads."},"vpcOnPrem":{"value":"yes","source":"https://archestra.ai/docs/admin/deployment","quote":"Use Helm to run it in Kubernetes with a persistent database, workers, and MCP server workloads."},"airGapped":{"value":"not-published","source":null,"quote":null},"euRegion":{"value":"not-published","source":null,"quote":null,"note":"No managed cloud offering documented; self-host only."},"soc2Type2":{"value":"not-published","source":null,"quote":null},"iso27001":{"value":"not-published","source":null,"quote":null},"hipaa":{"value":"not-published","source":null,"quote":null},"gdprDpa":{"value":"not-published","source":null,"quote":null},"publicPricing":{"value":"no","source":"https://archestra.ai/docs/platform-pricing-model","quote":"talk to sales@archestra.ai for the quote","note":"Free terms public; paid license price not listed."},"freeTier":{"value":"yes","source":"https://archestra.ai/docs/platform-pricing-model","quote":"may use the Enterprise features listed below in production without a paid subscription or Enterprise license","note":"Applies to companies with fewer than 30 Archestra users."},"startingPrice":{"value":"Free (AGPL; enterprise features free under 30 users); Enterprise contact sales","source":"https://archestra.ai/docs/platform-pricing-model","quote":"talk to sales@archestra.ai for the quote"},"pricingModel":{"value":"Open core: AGPL base + Enterprise license required at 30+ users","source":"https://archestra.ai/docs/platform-pricing-model","quote":"may use the Enterprise features listed below in production without a paid subscription or Enterprise license"},"llmGateway":{"value":"yes","source":"https://archestra.ai/docs/llm-proxy/costs-and-limits","quote":"Archestra syncs input, output, and cache prices for known models.","note":"LLM Proxy with providers, model router, virtual keys."},"costTrackingPerPerson":{"value":"yes","source":"https://archestra.ai/docs/llm-proxy/costs-and-limits","quote":"Costs shows the whole company's spend. My Usage shows each person their own.","note":"Budgets/limits per org, team, user, agent, virtual key, environment."}},"sourcesVisited":["https://archestra.ai","https://github.com/archestra-ai/archestra","https://archestra.ai/docs/platform-pricing-model","https://archestra.ai/docs","https://archestra.ai/docs/platform-ai-tool-guardrails","https://archestra.ai/docs/agents/skills","https://archestra.ai/docs/llm-proxy/costs-and-limits","https://archestra.ai/docs/mcp/authentication","https://archestra.ai/docs/mcp/gateway","https://archestra.ai/docs/admin/deployment","https://archestra.ai/docs/admin/logs","https://archestra.ai/docs/admin/identity","https://archestra.ai/docs/mcp/servers","https://archestra.ai/docs/admin/access-control","https://archestra.ai/docs/agents/guardrails","https://archestra.ai/docs/integrations/claude-desktop","https://archestra.ai/docs/get-started/connect","https://archestra.ai/docs/admin/security","https://dealroom.co/news/130913-archestra-ai-raises-10m-seed-led-by-20vc/"],"github":{"repo":"archestra-ai/archestra","url":"https://github.com/archestra-ai/archestra","license":"AGPL-3.0 (enterprise files separate)","licenseSource":"https://github.com/archestra-ai/archestra/blob/main/LICENSE.md","stars":4376,"starsCheckedAt":"2026-10-19","selfHostMethod":"Docker image, Helm","selfHostSource":"https://archestra.ai/docs/admin/deployment"}},{"id":"barndoor","name":"Barndoor","vendor":"Barndoor AI","url":"https://barndoor.ai","category":"mcp-gateway","frame":"direct","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"Closed-source AI gateway: governed MCP access, LLM gateway, DLP and policy engine; SaaS, private cloud or on-prem.","whereTheyWin":[{"text":"Built-in Data Control Center detects, blocks or redacts PII, secrets and prompt injection in MCP traffic, with field-level and conditional rules.","source":"https://docs.barndoor.ai/how-tos/data-control-center/overview.md"},{"text":"Per-call human approval for any governed tool, and MCP tool-inventory change history with alerts.","source":"https://docs.barndoor.ai/how-tos/tool-confirmations.md"},{"text":"Enterprise plan includes air-gapped and on-prem deployment plus an LLM gateway with token/cost budgets, routing and failover.","source":"https://barndoor.ai/pricing/"}],"company":{"founded":"2024","hq":"New York, NY (press release dateline)","funding":"$13.6M seed led by Crosslink Capital (May 20, 2025)","ownership":"Private, venture-backed; founder and CEO Oren Michels","source":"https://barndoor.ai/news/barndoor-ai-raises-13m-control-plane-agentic-ai/"},"pricing":{"public":false,"model":"contact sales","freeTier":"no","plans":[{"name":"Pro","price":"Contact Sales","unit":"not-published","includes":"Up to 50 human identities; unlimited MCP servers; RBAC & ABAC; DLP classifiers; indirect prompt injection detection; audit logs, traces; email support","source":"https://barndoor.ai/pricing/"},{"name":"Enterprise","price":"Contact Sales","unit":"not-published","includes":"Unlimited human identities; log export & streaming; LLM gateway with budgets, routing, rate limits; SaaS, private cloud/on-prem, air-gapped; 24/7 support, SLA","source":"https://barndoor.ai/pricing/"}],"extras":[],"source":"https://barndoor.ai/pricing/"},"limits":[{"name":"Pro human identities","value":"Up to 50","source":"https://barndoor.ai/pricing/"},{"name":"MCP servers","value":"Unlimited (both plans)","source":"https://barndoor.ai/pricing/"},{"name":"Trial","value":"14 days, 100K LLM requests, no credit card","source":"https://barndoor.ai/pricing/"},{"name":"Tool listing version history","value":"50 versions","source":"https://docs.barndoor.ai/how-tos/mcp-change-management.md"}],"facts":{"catalogSize":{"value":"100+","source":"https://barndoor.ai/","quote":"including 100+ Barndoor-hosted MCPs plus any custom or official MCP servers you already use."},"verifiedServers":{"value":"yes","source":"https://docs.barndoor.ai/mcp-servers/index.md","quote":"The list below features our verified ecosystem—including Barndoor-managed servers and fully tested remote servers."},"byoMcpServer":{"value":"yes","source":"https://docs.barndoor.ai/mcp-servers/index.md","quote":"You can easily add your own custom MCP servers using standard transport protocols like Streamable HTTP or SSE."},"remoteMcpServers":{"value":"yes","source":"https://docs.barndoor.ai/mcp-servers/index.md","quote":"You can easily add your own custom MCP servers using standard transport protocols like Streamable HTTP or SSE."},"localOrDockerServers":{"value":"not-published","source":null,"quote":null},"singleUrlAllTools":{"value":"yes","source":"https://docs.barndoor.ai/how-tos/claude-enterprise-barndoor-universal-url.md","quote":"one Claude connector, one Barndoor ToolIQ URL, many governed downstream systems."},"versionPinning":{"value":"not-published","source":null,"quote":null},"schemaChangeMonitoring":{"value":"yes","source":"https://docs.barndoor.ai/how-tos/mcp-change-management.md","quote":"Subscribe to the MCP server tooling changed alert to hear about a change as it's detected"},"worksInClaude":{"value":"yes","source":"https://docs.barndoor.ai/how-tos/connecting-barndoor-to-agents.md","quote":"Active Claude account (Pro, Max, Team, or Enterprise plan)"},"worksInClaudeCode":{"value":"partial","source":"https://docs.barndoor.ai/how-tos/llm-gateway-failover.md","quote":"Run Claude Code on your Claude subscription through the Barndoor LLM Gateway","note":"Documented for the LLM gateway; no Claude Code MCP setup guide found."},"worksInChatGPT":{"value":"yes","source":"https://docs.barndoor.ai/how-tos/connecting-barndoor-to-agents.md","quote":"Go to ChatGPT and navigate to Settings → Apps → Create App."},"worksInCursor":{"value":"yes","source":"https://docs.barndoor.ai/how-tos/connecting-barndoor-to-agents.md","quote":"Restart Cursor to apply changes"},"worksInCodex":{"value":"partial","source":"https://docs.barndoor.ai/how-tos/use-codex-with-llm-gateway.md","quote":"OpenAI Codex (CLI and Desktop) talks to models over the OpenAI Responses API (POST /v1/responses), not Chat Completions.","note":"LLM gateway only; no Codex MCP setup documented."},"worksInCopilot":{"value":"partial","source":"https://docs.barndoor.ai/how-tos/connecting-barndoor-to-agents.md","quote":"Reload VS Code to activate the MCP connection.","note":"VS Code MCP setup documented; GitHub Copilot not named."},"customAgentsSdk":{"value":"yes","source":"https://docs.barndoor.ai/","quote":"Barndoor SDKs are framework-agnostic.","note":"Python and TypeScript SDKs; CrewAI example."},"ownChatUiRequired":{"value":"no","source":"https://docs.barndoor.ai/how-tos/claude-enterprise-barndoor-universal-url.md","quote":"This will be the single connector URL you want Claude Enterprise to expose to users."},"perUserOAuth":{"value":"yes","source":"https://docs.barndoor.ai/how-tos/connecting-barndoor-to-agents.md","quote":"Members connect individually after an Owner has added the connector."},"managedOAuthApps":{"value":"not-published","source":null,"quote":null},"byoOAuthApp":{"value":"yes","source":"https://docs.barndoor.ai/how-tos/redirect-uri-allowlisting.md","quote":"add the redirect URI below to your OAuth client allowlist"},"sso":{"value":"yes","source":"https://docs.barndoor.ai/how-tos/idp-setup.md","quote":"Barndoor works with any OIDC or SAML 2.0 compatible IdP."},"scim":{"value":"partial","source":"https://docs.barndoor.ai/how-tos/idp-setup.md","quote":"Official Okta Integration Network app with SCIM provisioning.","note":"SCIM documented for Okta and Entra ID; other IdPs sync roles on login."},"roleBasedToolAccess":{"value":"yes","source":"https://barndoor.ai/pricing/","quote":"RBAC & ABAC"},"toolLevelAllowDeny":{"value":"yes","source":"https://docs.barndoor.ai/how-tos/manage-policies.md","quote":"A rule can grant a tool outright or grant it subject to user approval."},"readOnlyModes":{"value":"partial","source":"https://docs.barndoor.ai/how-tos/manage-policies.md","quote":"Reads run freely; writes need a human.","note":"No dedicated read-only mode; achieved by per-tool policy rules."},"auditLogPerPerson":{"value":"yes","source":"https://barndoor.ai/","quote":"Full audit trail of every action and the policy behind it, streamed to your SIEM"},"callTracing":{"value":"yes","source":"https://docs.barndoor.ai/how-tos/log-export.md","quote":"Trace and span IDs are included on events that originated within a traced request"},"logExportSiem":{"value":"yes","source":"https://barndoor.ai/","quote":"Full audit trail of every action and the policy behind it, streamed to your SIEM","note":"Docs describe export to S3-compatible or Azure Blob storage; 'Log export & streaming' is Enterprise plan."},"dlpRedaction":{"value":"yes","source":"https://docs.barndoor.ai/how-tos/data-control-center/overview.md","quote":"Detect, block, redact, or observe sensitive data as it flows through AI agents and the MCP layer."},"promptInjectionDetection":{"value":"yes","source":"https://barndoor.ai/pricing/","quote":"Indirect prompt injection detection"},"toolPoisoningProtection":{"value":"not-published","source":null,"quote":null,"note":"Tool-listing change alerts exist but are not framed as tool-poisoning protection."},"skillsAuthoring":{"value":"not-published","source":null,"quote":null,"note":"Diaphora acquisition (Sep 16, 2026) adds workflow 'blueprints', not skills."},"skillsGitSync":{"value":"not-published","source":null,"quote":null},"skillsByRole":{"value":"not-published","source":null,"quote":null},"skillsOverMcp":{"value":"not-published","source":null,"quote":null},"openSource":{"value":"not-published","source":null,"quote":null,"note":"Acquired Diaphora's open-source Frags engine; the gateway itself has no published source."},"selfHost":{"value":"yes","source":"https://barndoor.ai/","quote":"Run entirely within your infrastructure for maximum control and data residency.","note":"Enterprise plan."},"vpcOnPrem":{"value":"yes","source":"https://barndoor.ai/","quote":"Deploy in your cloud environment to meet security and compliance requirements.","note":"Private cloud and on-prem, Enterprise plan."},"airGapped":{"value":"yes","source":"https://barndoor.ai/pricing/","quote":"Air-gapped","note":"Enterprise plan."},"euRegion":{"value":"not-published","source":null,"quote":null},"soc2Type2":{"value":"yes","source":"https://barndoor.ai/security/","quote":"Our SOC 2 Type II report provides detailed evidence of our security controls’ effectiveness over time."},"iso27001":{"value":"not-published","source":null,"quote":null},"hipaa":{"value":"not-published","source":null,"quote":null},"gdprDpa":{"value":"not-published","source":null,"quote":null},"publicPricing":{"value":"no","source":"https://barndoor.ai/pricing/","quote":"Contact Sales"},"freeTier":{"value":"no","source":"https://barndoor.ai/pricing/","quote":"Free 14-day trial","note":"Time-limited trial only (100K LLM requests, no credit card); no permanent free plan listed."},"startingPrice":{"value":"Contact Sales","source":"https://barndoor.ai/pricing/","quote":"Contact Sales"},"pricingModel":{"value":"Two tiers (Pro up to 50 identities, Enterprise unlimited), sales-quoted","source":"https://barndoor.ai/pricing/","quote":"Up to 50 human identities"},"llmGateway":{"value":"yes","source":"https://barndoor.ai/","quote":"Route, control, and observe every model","note":"Enterprise plan per pricing page."},"costTrackingPerPerson":{"value":"yes","source":"https://docs.barndoor.ai/how-tos/use-llm-controls.md","quote":"A user covered by an org budget and a user budget is checked against both, and both are debited."}},"sourcesVisited":["https://barndoor.ai","https://barndoor.ai/","https://barndoor.ai/pricing/","https://barndoor.ai/security/","https://trust.barndoor.ai/","https://barndoor.ai/news/barndoor-ai-raises-13m-control-plane-agentic-ai/","https://barndoor.ai/barndoor-acquires-diaphora/","https://docs.barndoor.ai/","https://docs.barndoor.ai/llms.txt","https://docs.barndoor.ai/how-tos/connecting-barndoor-to-agents.md","https://docs.barndoor.ai/how-tos/tool-confirmations.md","https://docs.barndoor.ai/how-tos/mcp-change-management.md","https://docs.barndoor.ai/how-tos/log-export.md","https://docs.barndoor.ai/how-tos/idp-setup.md","https://docs.barndoor.ai/how-tos/use-llm-controls.md","https://docs.barndoor.ai/how-tos/data-control-center/overview.md","https://docs.barndoor.ai/mcp-servers/index.md","https://docs.barndoor.ai/how-tos/claude-enterprise-barndoor-universal-url.md","https://docs.barndoor.ai/how-tos/use-codex-with-llm-gateway.md","https://docs.barndoor.ai/how-tos/llm-gateway-failover.md","https://docs.barndoor.ai/how-tos/redirect-uri-allowlisting.md","https://docs.barndoor.ai/how-tos/manage-policies.md"]},{"id":"chatgpt-enterprise","name":"ChatGPT Business / Enterprise (apps, MCP, admin controls)","vendor":"OpenAI","url":"https://openai.com/business/pricing/","category":"platform-lab","frame":"different-client","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"OpenAI's business ChatGPT plans with apps/connectors, beta custom MCP apps, skills, workspace agents and admin RBAC.","whereTheyWin":[{"text":"Per-app action controls built into the client: admins toggle read vs write actions separately and new actions can default to disabled.","source":"https://help.openai.com/en/articles/11509118-admin-controls-security-and-compliance-for-plugins-and-apps"},{"text":"Compliance Logs Platform with app-activity records and a long list of ready-made SIEM/DLP/eDiscovery integrations (CrowdStrike, Purview, Netskope, Zscaler and others).","source":"https://help.openai.com/en/articles/9261474-compliance-api-for-enterprise-customers"},{"text":"Bundled with the ChatGPT seat: skills, workspace agents and Codex are included in Business at $20–25/user/month; Enterprise adds data residency in ten regions.","source":"https://openai.com/business/pricing/"}],"company":{"founded":"2015","hq":"San Francisco, CA","funding":"$122B round at $852B valuation (closed April 1, 2026)","ownership":"Private (OpenAI Group PBC controlled by OpenAI Foundation)","source":"https://news.bloomberglaw.com/tech-and-telecom-law/openai-valued-at-852-billion-after-closing-122-billion-round"},"pricing":{"public":true,"model":"per seat (Business); contact sales with credit- or token-based options (Enterprise)","freeTier":"yes","plans":[{"name":"Business – Standard seat","price":"$20 annual / $25 monthly","unit":"per user/month, 2–200 employees","includes":"GPTs, Projects, Apps, Company Knowledge, workspace agents, Codex, SAML SSO, admin roles","source":"https://openai.com/business/pricing/"},{"name":"Business – Premium seat","price":"$100 annual / $125 monthly","unit":"per user/month","includes":"Higher usage","source":"https://help.openai.com/en/articles/8792828-what-is-chatgpt-business"},{"name":"Enterprise","price":"Custom pricing","unit":"contact sales; annual","includes":"SCIM, RBAC, connector registry, Compliance API Logs Platform, EKM, data residency in ten regions","source":"https://openai.com/business/pricing/"}],"extras":["Business and Enterprise can purchase credits for more access","Credit-based pricing and token-based pricing are available for Enterprise plans"],"source":"https://openai.com/business/pricing/"},"limits":[{"name":"Business seats","value":"2–200 employees","source":"https://openai.com/business/pricing/"},{"name":"Compliance Logs Platform retention","value":"30 days","source":"https://help.openai.com/en/articles/9261474-compliance-api-for-enterprise-customers"},{"name":"Custom MCP apps","value":"Remote MCP only; web only; beta","source":"https://help.openai.com/en/articles/12584461-developer-mode-and-mcp-apps-in-chatgpt"}],"facts":{"catalogSize":{"value":"not-published","source":null,"quote":null,"note":"Apps help article gives no count."},"verifiedServers":{"value":"not-published","source":null,"quote":null},"byoMcpServer":{"value":"partial","source":"https://help.openai.com/en/articles/12584461-developer-mode-and-mcp-apps-in-chatgpt","quote":"rolling out in beta to ChatGPT Business, Enterprise, and Edu plans","note":"Full MCP (incl. write actions) in beta; only admins/owners can publish apps to the workspace."},"remoteMcpServers":{"value":"yes","source":"https://help.openai.com/en/articles/12584461-developer-mode-and-mcp-apps-in-chatgpt","quote":"ChatGPT connects to remote MCP servers.","note":"Private/on-prem servers reachable via Secure MCP Tunnel."},"localOrDockerServers":{"value":"no","source":"https://help.openai.com/en/articles/12584461-developer-mode-and-mcp-apps-in-chatgpt","quote":"ChatGPT connects to remote MCP servers.","note":"Remote only in ChatGPT; Secure MCP Tunnel for private networks."},"singleUrlAllTools":{"value":"not-published","source":null,"quote":null},"versionPinning":{"value":"not-published","source":null,"quote":null},"schemaChangeMonitoring":{"value":"partial","source":"https://help.openai.com/en/articles/12584461-developer-mode-and-mcp-apps-in-chatgpt","quote":"Functionality, UI, and permissions may change as we iterate.","note":"New actions on published apps are disabled by default on Enterprise/Edu and admins refresh the tool list manually; no automated change monitoring described. Quote is the beta caveat."},"worksInClaude":{"value":"no","source":"https://help.openai.com/en/articles/11487775-apps-in-chatgpt","quote":"the ChatGPT interface you use","note":"Structural: apps and admin controls apply to ChatGPT/OpenAI surfaces only."},"worksInClaudeCode":{"value":"no","source":"https://help.openai.com/en/articles/11487775-apps-in-chatgpt","quote":"the ChatGPT interface you use","note":"Structural: OpenAI surfaces only."},"worksInChatGPT":{"value":"yes","source":"https://help.openai.com/en/articles/12584461-developer-mode-and-mcp-apps-in-chatgpt","quote":"ChatGPT connects to remote MCP servers."},"worksInCursor":{"value":"no","source":"https://help.openai.com/en/articles/11487775-apps-in-chatgpt","quote":"the ChatGPT interface you use","note":"Structural: OpenAI surfaces only."},"worksInCodex":{"value":"partial","source":"https://help.openai.com/en/articles/20001066-skills-in-chatgpt","quote":"Skills can also be supported in Codex and other OpenAI products.","note":"Codex is included in Business."},"worksInCopilot":{"value":"no","source":"https://help.openai.com/en/articles/11487775-apps-in-chatgpt","quote":"the ChatGPT interface you use","note":"Structural: OpenAI surfaces only."},"customAgentsSdk":{"value":"partial","source":"https://openai.com/index/introducing-agentkit/","quote":"a central place for admins to manage how data and tools connect across OpenAI products","note":"Connector Registry spans ChatGPT and the API (beta to select customers). Agent Builder is being wound down on Nov 30, 2026."},"ownChatUiRequired":{"value":"yes","source":"https://help.openai.com/en/articles/11487775-apps-in-chatgpt","quote":"the ChatGPT interface you use","note":"Users work in ChatGPT (web; apps/developer mode are web only) or Slack for workspace agents."},"perUserOAuth":{"value":"yes","source":"https://help.openai.com/en/articles/11487775-apps-in-chatgpt","quote":"Some apps require no individual sign-in or use an administrator-managed connection.","note":"Default is individual sign-in per app; custom MCP apps support OAuth/OIDC."},"managedOAuthApps":{"value":"partial","source":"https://help.openai.com/en/articles/11487775-apps-in-chatgpt","quote":"Some apps require no individual sign-in or use an administrator-managed connection.","note":"Admin-managed connections for some apps only."},"byoOAuthApp":{"value":"not-published","source":null,"quote":null,"note":"Custom MCP apps support OAuth and OpenID Connect; BYO client registration not described."},"sso":{"value":"yes","source":"https://openai.com/business/pricing/","quote":"Secure workspace with SAML, SSO, and MFA","note":"Business and Enterprise."},"scim":{"value":"partial","source":"https://openai.com/business/pricing/","quote":"SCIM","note":"Enterprise only (No for Business in comparison table)."},"roleBasedToolAccess":{"value":"partial","source":"https://help.openai.com/en/articles/11509118-admin-controls-security-and-compliance-for-plugins-and-apps","quote":"Enterprise and Edu workspaces may assign eligible plugins to custom roles when role-level plugin controls are available.","note":"Enterprise/Edu only; not listed for Business."},"toolLevelAllowDeny":{"value":"partial","source":"https://help.openai.com/en/articles/11509118-admin-controls-security-and-compliance-for-plugins-and-apps","quote":"Only enable new read actions","note":"Per-action enable/disable after publishing is Enterprise/Edu; Business admins can only refresh tool lists."},"readOnlyModes":{"value":"yes","source":"https://help.openai.com/en/articles/11509118-admin-controls-security-and-compliance-for-plugins-and-apps","quote":"Allow read actions","note":"Read and write actions toggled separately."},"auditLogPerPerson":{"value":"partial","source":"https://help.openai.com/en/articles/11509118-admin-controls-security-and-compliance-for-plugins-and-apps","quote":"app-activity records can include an app request and related response information.","note":"Compliance Platform is Enterprise/Edu only; coverage varies by app."},"callTracing":{"value":"partial","source":"https://help.openai.com/en/articles/11509118-admin-controls-security-and-compliance-for-plugins-and-apps","quote":"app-activity records can include an app request and related response information.","note":"Enterprise/Edu; log coverage varies by app."},"logExportSiem":{"value":"partial","source":"https://help.openai.com/en/articles/9261474-compliance-api-for-enterprise-customers","quote":"The Compliance Platform is available to ChatGPT Enterprise and Edu workspaces.","note":"Enterprise/Edu only; 30-day retention; partners include CrowdStrike, Microsoft Purview, Netskope, Palo Alto Networks, Zscaler."},"dlpRedaction":{"value":"partial","source":"https://openai.com/index/introducing-agentkit/","quote":"can mask or flag PII, detect jailbreaks, and apply other safeguards","note":"Guardrails is an open-source library for API agents, not a ChatGPT workspace control; ChatGPT DLP relies on partner integrations."},"promptInjectionDetection":{"value":"partial","source":"https://help.openai.com/en/articles/11509118-admin-controls-security-and-compliance-for-plugins-and-apps","quote":"OpenAI uses testing, monitoring, access controls, and layered safeguards to reduce prompt-injection and unauthorized-access risks.","note":"OpenAI states these measures do not eliminate prompt-injection risk; no admin-configurable detection described."},"toolPoisoningProtection":{"value":"not-published","source":null,"quote":null},"skillsAuthoring":{"value":"yes","source":"https://help.openai.com/en/articles/20001066-skills-in-chatgpt","quote":"Skills are reusable, shareable workflows that help ChatGPT complete specific tasks more consistently."},"skillsGitSync":{"value":"not-published","source":null,"quote":null},"skillsByRole":{"value":"yes","source":"https://help.openai.com/en/articles/20001066-skills-in-chatgpt","quote":"Allow members to share skills with workspace members, groups, or the whole workspace.","note":"Sharing to groups; admins can also allow installing skills for others."},"skillsOverMcp":{"value":"not-published","source":null,"quote":null},"openSource":{"value":"not-published","source":null,"quote":null,"note":"Closed SaaS (Guardrails library is open source)."},"selfHost":{"value":"not-published","source":null,"quote":null},"vpcOnPrem":{"value":"not-published","source":null,"quote":null},"airGapped":{"value":"not-published","source":null,"quote":null},"euRegion":{"value":"partial","source":"https://chatgpt.com/pricing","quote":"Data residency in US, EU, UK, JP, CA, KR, SG, IN, AU, UAE","note":"Enterprise only ('Support for data residency in ten regions'); not Business."},"soc2Type2":{"value":"yes","source":"https://openai.com/enterprise-privacy/","quote":"ChatGPT Business successfully completed a SOC 2 Type 2 audit."},"iso27001":{"value":"yes","source":"https://trust.openai.com/","quote":"ISO/IEC 27001:2022","note":"Also 27017, 27018, 27701, 42001, CSA STAR."},"hipaa":{"value":"partial","source":"https://help.openai.com/en/articles/8792828-what-is-chatgpt-business","quote":"use a contracted offering instead of self-serve ChatGPT Business","note":"BAA via contracted offering only (Enterprise/Healthcare), not self-serve Business."},"gdprDpa":{"value":"yes","source":"https://openai.com/enterprise-privacy/","quote":"execute a Data Processing Addendum (DPA) with customers"},"publicPricing":{"value":"partial","source":"https://openai.com/business/pricing/","quote":"Contact our sales team to discuss enterprise pricing.","note":"Business public; Enterprise custom."},"freeTier":{"value":"partial","source":"https://chatgpt.com/pricing","quote":"Intelligence for everyday tasks","note":"Individual Free plan only; no free business workspace."},"startingPrice":{"value":"$20/user/month (Business Standard, annual); $25 monthly","source":"https://help.openai.com/en/articles/8792828-what-is-chatgpt-business","quote":"Annual plan: $20 per user per month, billed annually."},"pricingModel":{"value":"Per user per month; Enterprise custom with credit- or token-based options","source":"https://openai.com/business/pricing/","quote":"Credit-based pricing and token-based pricing are available for Enterprise plans."},"llmGateway":{"value":"not-published","source":null,"quote":null,"note":"OpenAI models only."},"costTrackingPerPerson":{"value":"not-published","source":null,"quote":null}},"sourcesVisited":["https://chatgpt.com/pricing","https://openai.com/business/pricing/","https://help.openai.com/en/articles/8792828-what-is-chatgpt-business","https://help.openai.com/en/articles/12584461-developer-mode-and-mcp-apps-in-chatgpt","https://help.openai.com/en/articles/9261474-compliance-api-for-enterprise-customers","https://help.openai.com/en/articles/11509118-admin-controls-security-and-compliance-for-plugins-and-apps","https://help.openai.com/en/articles/11487775-apps-in-chatgpt","https://help.openai.com/en/articles/20001066-skills-in-chatgpt","https://help.openai.com/en/articles/20001143-chatgpt-workspace-agents-for-enterprise-and-business","https://openai.com/enterprise-privacy/","https://openai.com/index/introducing-agentkit/","https://trust.openai.com/","https://news.bloomberglaw.com/tech-and-telecom-law/openai-valued-at-852-billion-after-closing-122-billion-round"]},{"id":"claude-enterprise","name":"Claude Team / Enterprise (connectors, skills, admin controls)","vendor":"Anthropic","url":"https://claude.com/pricing","category":"platform-lab","frame":"different-client","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"Anthropic's business plans for Claude apps, with admin-managed MCP connectors, org skills, RBAC and audit logs.","whereTheyWin":[{"text":"Bundled with the Claude seat: connectors, org-wide skills and SSO come in the $20/seat Team plan with no extra gateway to buy or run.","source":"https://claude.com/pricing"},{"text":"Enterprise RBAC sets each connector to Always allow, Needs approval, Blocked or Custom per group, down to individual tools, natively inside the client.","source":"https://support.claude.com/en/articles/13930458-set-up-role-based-permissions-on-enterprise-plans"},{"text":"Large first-party directory (829 connectors, many 'Anthropic verified') plus Okta-based Enterprise-managed connector auth (GA Aug 2026).","source":"https://claude.com/connectors"}],"company":{"founded":"2021","hq":"San Francisco, CA","funding":"$65B raised at $965B post-money valuation (May 28, 2026; led by Altimeter, Dragoneer, Greenoaks, Sequoia)","ownership":"Private","source":"https://news.bloomberglaw.com/private-equity/anthropic-raises-at-965-billion-valuation-eclipsing-openai-1"},"pricing":{"public":true,"model":"per seat (Team); per seat + usage at API rates (Enterprise)","freeTier":"yes","plans":[{"name":"Free","price":"$0","unit":"per user/month","includes":"Individual plan; one custom connector","source":"https://claude.com/pricing"},{"name":"Team – Standard seat","price":"$20 annual / $25 monthly","unit":"per seat/month, 2–150 seats","includes":"Admin controls for remote and local connectors, SSO, org-wide skills deployment, up to $500/month pooled API credits","source":"https://claude.com/pricing"},{"name":"Team – Premium seat","price":"$100 annual / $125 monthly","unit":"per seat/month","includes":"5x more usage than standard seats","source":"https://claude.com/pricing"},{"name":"Enterprise","price":"US$20 + usage billed at API rates","unit":"per seat/month, billed annually, 20-seat minimum","includes":"SCIM, audit logs, Compliance API, custom data retention, HIPAA-ready offering, role-based access with fine-grained permissioning","source":"https://claude.com/pricing"}],"extras":["Enterprise usage billed at standard API rates on top of the seat fee","Per-member spend limits via Spend Limits API (Enterprise, usage credits on)"],"source":"https://claude.com/pricing"},"limits":[{"name":"Team seats","value":"2 to 150 seats","source":"https://claude.com/pricing"},{"name":"Enterprise minimum","value":"20 seats, billed annually","source":"https://claude.com/pricing"},{"name":"Custom connectors on Free","value":"1","source":"https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp"},{"name":"Audit log export window","value":"Past 180 days per export; download link valid 24 hours","source":"https://support.claude.com/en/articles/9970975-access-audit-logs"},{"name":"Enterprise-managed connector auth IdP","value":"Okta only at launch","source":"https://support.claude.com/en/articles/15537633-authorize-mcp-connectors-for-your-entire-organization"}],"facts":{"catalogSize":{"value":"829 connectors in Anthropic directory","source":"https://claude.com/connectors","quote":"829 connectors","note":"Count shown on directory page on 2026-10-17."},"verifiedServers":{"value":"yes","source":"https://claude.com/connectors","quote":"Anthropic verified","note":"Label on many listings; verification process not described on the page. Claude Code docs say Anthropic reviews against listing criteria but 'doesn't security-audit or manage any MCP server'."},"byoMcpServer":{"value":"yes","source":"https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp","quote":"available on Claude, Cowork, and Claude Desktop for users on Free, Pro, Max, Team, and Enterprise plans","note":"Custom connectors; on Team only Owners/Primary Owners can add them."},"remoteMcpServers":{"value":"yes","source":"https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp","quote":"available on Claude, Cowork, and Claude Desktop for users on Free, Pro, Max, Team, and Enterprise plans","note":"Custom connectors are remote MCP servers."},"localOrDockerServers":{"value":"partial","source":"https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp","quote":"aren't available in Cowork or claude.ai","note":"Local servers work via Claude Desktop config and Claude Code (stdio), not in claude.ai or Cowork."},"singleUrlAllTools":{"value":"not-published","source":null,"quote":null,"note":"Each connector is added separately; no single aggregated endpoint described."},"versionPinning":{"value":"not-published","source":null,"quote":null},"schemaChangeMonitoring":{"value":"not-published","source":null,"quote":null},"worksInClaude":{"value":"yes","source":"https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp","quote":"claude.ai, Claude Desktop, Cowork, and the mobile apps"},"worksInClaudeCode":{"value":"yes","source":"https://code.claude.com/docs/en/managed-mcp","quote":"These restrictions cover the servers Claude Code loads itself, including the connectors it fetches from claude.ai.","note":"Claude Code has its own managed-mcp.json / allowlist controls."},"worksInChatGPT":{"value":"no","source":"https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp","quote":"claude.ai, Claude Desktop, Cowork, and the mobile apps","note":"Structural: connectors and admin controls only apply to Claude surfaces."},"worksInCursor":{"value":"no","source":"https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp","quote":"claude.ai, Claude Desktop, Cowork, and the mobile apps","note":"Structural: governs Claude surfaces only."},"worksInCodex":{"value":"no","source":"https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp","quote":"claude.ai, Claude Desktop, Cowork, and the mobile apps","note":"Structural: governs Claude surfaces only."},"worksInCopilot":{"value":"no","source":"https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp","quote":"claude.ai, Claude Desktop, Cowork, and the mobile apps","note":"Structural: governs Claude surfaces only."},"customAgentsSdk":{"value":"not-published","source":null,"quote":null},"ownChatUiRequired":{"value":"yes","source":"https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp","quote":"claude.ai, Claude Desktop, Cowork, and the mobile apps","note":"Users must work in Claude apps (or Claude Code)."},"perUserOAuth":{"value":"yes","source":"https://academy.claude.com/tutorials/claude-cowork-enterprise-administrator-guide","quote":"each user individually OAuths to link their account"},"managedOAuthApps":{"value":"not-published","source":null,"quote":null,"note":"Enterprise-managed auth (Okta, Aug 2026) provisions connector access through the IdP for a listed set of connectors; not the same as vendor-managed OAuth apps."},"byoOAuthApp":{"value":"yes","source":"https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp","quote":"Use your own OAuth client"},"sso":{"value":"yes","source":"https://claude.com/pricing","quote":"Single sign-on (SSO)","note":"Team and Enterprise."},"scim":{"value":"partial","source":"https://claude.com/pricing","quote":"System for Cross-domain Identity Management (SCIM)","note":"Enterprise only."},"roleBasedToolAccess":{"value":"partial","source":"https://support.claude.com/en/articles/13930458-set-up-role-based-permissions-on-enterprise-plans","quote":"This lets you control which features and connectors specific teams or groups of members can access","note":"Enterprise only. Cowork admin guide notes Cowork has no per-group connector control."},"toolLevelAllowDeny":{"value":"partial","source":"https://support.claude.com/en/articles/13930458-set-up-role-based-permissions-on-enterprise-plans","quote":"Set a connector to Custom to reveal its tools as individual rows.","note":"Enterprise RBAC only; users can also disable tools per conversation."},"readOnlyModes":{"value":"not-published","source":null,"quote":null},"auditLogPerPerson":{"value":"partial","source":"https://support.claude.com/en/articles/9970975-access-audit-logs","quote":"Audit logs are available for Enterprise organizations only.","note":"Logged events cover sign-in, membership, projects, files, conversations; connector/tool calls not listed. Audit logs do not cover Cowork yet."},"callTracing":{"value":"partial","source":"https://code.claude.com/docs/en/managed-mcp","quote":"Claude Code can record which MCP servers and tools users invoke.","note":"Via OpenTelemetry export in Claude Code (and Cowork OTEL); not documented for claude.ai chat."},"logExportSiem":{"value":"partial","source":"https://academy.claude.com/tutorials/claude-cowork-enterprise-administrator-guide","quote":"Set up your OTEL endpoint to export Claude Cowork session data to your SIEM or observability platform.","note":"Enterprise Compliance API provides chats, files and audit events; OTEL for Cowork/Claude Code."},"dlpRedaction":{"value":"not-published","source":null,"quote":null,"note":"Compliance API is used by third-party security platforms; no native DLP described."},"promptInjectionDetection":{"value":"not-published","source":null,"quote":null},"toolPoisoningProtection":{"value":"not-published","source":null,"quote":null},"skillsAuthoring":{"value":"yes","source":"https://claude.com/blog/organization-skills-and-directory","quote":"Claude Team and Enterprise plan admins can now provision skills centrally from admin settings.","note":"Announced Dec 18, 2025."},"skillsGitSync":{"value":"partial","source":"https://claude.com/blog/organization-skills-and-directory","quote":"check skills into your repository","note":"Repo-based skills apply to Claude Code; no Git sync for org skills in claude.ai described."},"skillsByRole":{"value":"not-published","source":null,"quote":null,"note":"Org skills are on by default for everyone; plugin marketplace supports group-level overrides per admin guide, skills targeting by group not stated."},"skillsOverMcp":{"value":"not-published","source":null,"quote":null},"openSource":{"value":"not-published","source":null,"quote":null,"note":"Closed SaaS."},"selfHost":{"value":"not-published","source":null,"quote":null},"vpcOnPrem":{"value":"not-published","source":null,"quote":null},"airGapped":{"value":"not-published","source":null,"quote":null},"euRegion":{"value":"partial","source":"https://claude.com/redirect/claudeai.v1.f75a17e2-6571-4e44-af72-0e87eb387c69/regional-compliance","quote":"Regional data residency is available across Europe, United States, Canada, and Asia-Pacific regions.","note":"Page covers Claude via AWS Bedrock / GCP Vertex / Microsoft Foundry, not claude.ai Enterprise."},"soc2Type2":{"value":"yes","source":"https://support.claude.com/en/articles/10015870","quote":"SOC 2 Type I & Type II"},"iso27001":{"value":"yes","source":"https://support.claude.com/en/articles/10015870","quote":"ISO 27001:2022 (Information Security Management)","note":"Also ISO/IEC 42001:2023."},"hipaa":{"value":"partial","source":"https://claude.com/pricing","quote":"HIPAA-ready offering available","note":"Enterprise only; BAA available per certifications article."},"gdprDpa":{"value":"yes","source":"https://claude.com/redirect/claudeai.v1.f75a17e2-6571-4e44-af72-0e87eb387c69/regional-compliance","quote":"Data Processing Addendum"},"publicPricing":{"value":"yes","source":"https://claude.com/pricing","quote":"US$20 per seat per month, plus usage billed at API rates"},"freeTier":{"value":"partial","source":"https://claude.com/pricing","quote":"Free for everyone","note":"Individual Free plan only; Team and Enterprise are paid."},"startingPrice":{"value":"$20/seat/month (Team Standard, annual); Enterprise $20/seat/month + API-rate usage","source":"https://claude.com/pricing","quote":"US$20 per seat per month, plus usage billed at API rates"},"pricingModel":{"value":"Per seat (Team); per seat plus metered usage at API rates (Enterprise)","source":"https://claude.com/pricing","quote":"Usage cost scales with model and task."},"llmGateway":{"value":"not-published","source":null,"quote":null,"note":"Claude models only; not a multi-model gateway."},"costTrackingPerPerson":{"value":"partial","source":"https://platform.claude.com/docs/en/manage-claude/spend-limits-api","quote":"The Spend Limits API lets you set a spend limit on each Claude Enterprise member","note":"Enterprise with usage credits on; covers Claude spend only."}},"sourcesVisited":["https://claude.com/pricing","https://claude.com/blog/organization-skills-and-directory","https://academy.claude.com/tutorials/claude-cowork-enterprise-administrator-guide","https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp","https://support.claude.com/en/articles/9970975-access-audit-logs","https://support.claude.com/en/articles/13015708-access-the-compliance-api","https://support.claude.com/en/articles/13930458-set-up-role-based-permissions-on-enterprise-plans","https://support.claude.com/en/articles/15537633-authorize-mcp-connectors-for-your-entire-organization","https://support.claude.com/en/articles/10015870","https://claude.com/redirect/claudeai.v1.f75a17e2-6571-4e44-af72-0e87eb387c69/regional-compliance","https://code.claude.com/docs/en/managed-mcp","https://claude.com/connectors","https://platform.claude.com/docs/en/manage-claude/spend-limits-api","https://www.theregister.com/2026/04/16/anthropic_ejects_bundled_tokens_enterprise/","https://news.bloomberglaw.com/private-equity/anthropic-raises-at-965-billion-valuation-eclipsing-openai-1"]},{"id":"cloudflare-mcp-portals","name":"Cloudflare MCP server portals (Cloudflare One / Zero Trust)","vendor":"Cloudflare, Inc.","url":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/","category":"mcp-gateway","frame":"direct","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"Zero Trust feature that puts multiple remote MCP servers behind one Access-protected URL with tool toggles and logs.","whereTheyWin":[{"text":"Bundled into Cloudflare Zero Trust: free for up to 50 users, and plugs into existing Access policies, IdPs, Gateway DLP and shadow-MCP detection.","source":"https://www.cloudflare.com/plans/"},{"text":"Code Mode collapses all upstream tools into two tools (search + execute) running in isolated Workers, cutting tool-definition context sharply.","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md"},{"text":"Can reach MCP servers on private networks without exposing them publicly, via Cloudflare's network (Sept 2026).","source":"https://developers.cloudflare.com/changelog/post/2026-09-22-private-mcp-servers/"}],"company":{"founded":"2009 (not stated on about page; widely reported)","hq":"San Francisco, CA (101 Townsend St.)","funding":"Public company; IPO 13 September 2019","ownership":"Public (NYSE: NET)","source":"https://www.cloudflare.com/about-overview/"},"pricing":{"public":true,"model":"bundled (Cloudflare Zero Trust per user/month)","freeTier":"yes","plans":[{"name":"Free","price":"$0 forever","unit":"up to 50 users","includes":"Zero Trust incl. MCP server portals; log retention up to 24 hours; community support","source":"https://www.cloudflare.com/plans/"},{"name":"Pay-as-you-go","price":"$7","unit":"per user/month","includes":"No user limit; log retention up to 30 days; chat and ticket support","source":"https://www.cloudflare.com/plans/"},{"name":"Contract","price":"Custom","unit":"annual price per user","includes":"Log retention up to 6 months; Logpush to SIEM/cloud storage; phone support","source":"https://www.cloudflare.com/plans/"}],"extras":["Professional services available as add-on (Contract)","Logpush export of portal logs only on Enterprise plans"],"source":"https://www.cloudflare.com/plans/"},"limits":[{"name":"MCP servers per portal","value":"up to 80","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md"},{"name":"Server transport","value":"Remote HTTP (Streamable HTTP / SSE) only; stdio-only servers cannot be added","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md"},{"name":"Free plan users","value":"50 users","source":"https://www.cloudflare.com/plans/"},{"name":"Log retention","value":"24 hours (Free), 30 days (Pay-as-you-go), 6 months (Contract)","source":"https://www.cloudflare.com/plans/"},{"name":"Prerequisite","value":"Active domain on Cloudflare and an IdP configured in Zero Trust","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md"}],"facts":{"catalogSize":{"value":"not-published","source":null,"quote":null,"note":"No integration catalog; admins register their own or third-party remote servers."},"verifiedServers":{"value":"not-published","source":null,"quote":null,"note":"Admins review/approve servers before exposure, but no vendor-verified catalog."},"byoMcpServer":{"value":"yes","source":"https://blog.cloudflare.com/zero-trust-mcp-server-portals/","quote":"Instead of developers distributing dozens of individual server endpoints, they register their servers with Cloudflare."},"remoteMcpServers":{"value":"yes","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md","quote":"Only remote HTTP MCP servers are supported."},"localOrDockerServers":{"value":"no","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md","quote":"do not expose a remote HTTP endpoint and cannot be added to an MCP server portal.","note":"Stdio servers must be self-hosted behind HTTP first. Private-network HTTP servers supported since Sept 2026."},"singleUrlAllTools":{"value":"yes","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md","quote":"An MCP server portal centralizes multiple Model Context Protocol (MCP) servers onto a single HTTP endpoint."},"versionPinning":{"value":"not-published","source":null,"quote":null},"schemaChangeMonitoring":{"value":"not-published","source":null,"quote":null},"worksInClaude":{"value":"yes","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md","quote":"Per-client connection instructions for Claude Desktop","note":"Examples use mcp-remote."},"worksInClaudeCode":{"value":"not-published","source":null,"quote":null,"note":"Generic: works with MCP clients that support remote servers."},"worksInChatGPT":{"value":"not-published","source":null,"quote":null,"note":"ChatGPT named only as an example MCP client in launch blog, no setup docs."},"worksInCursor":{"value":"not-published","source":null,"quote":null},"worksInCodex":{"value":"not-published","source":null,"quote":null},"worksInCopilot":{"value":"not-published","source":null,"quote":null},"customAgentsSdk":{"value":"yes","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md","quote":"Service tokens bypass the browser-based OAuth flow.","note":"Machine-to-machine access for agents via service tokens (added June 2026)."},"ownChatUiRequired":{"value":"no","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md","quote":"or other MCP clients that support remote MCP servers."},"perUserOAuth":{"value":"yes","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md","quote":"User will be prompted to utilize their own login credentials to establish a connection with the MCP server.","note":"Require user auth is default; can instead use a shared admin credential."},"managedOAuthApps":{"value":"not-published","source":null,"quote":null,"note":"'Managed OAuth' refers to client-to-portal auth, not pre-built upstream OAuth apps."},"byoOAuthApp":{"value":"yes","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md","quote":"This flow uses an OAuth application that you register with the upstream provider."},"sso":{"value":"yes","source":"https://blog.cloudflare.com/zero-trust-mcp-server-portals/","quote":"Access prompts them to authenticate with their corporate identity provider."},"scim":{"value":"yes","source":"https://developers.cloudflare.com/cloudflare-one/team-and-resources/users/scim/","quote":"This section covers SCIM provisioning for Cloudflare Zero Trust only.","note":"Zero Trust-wide SCIM; applies to Access groups used in portal policies."},"roleBasedToolAccess":{"value":"partial","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md","quote":"The MCP server link will only appear in the portal for users who match an Allow policy.","note":"Access policies at server and portal level; tool toggles are portal-wide, not per role. Docs warn blocked users can bypass via direct server URL unless Access is the server's OAuth provider."},"toolLevelAllowDeny":{"value":"yes","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md","quote":"Turned-off tools will not appear in the portal's tool list.","note":"default_disabled enables allowlist mode."},"readOnlyModes":{"value":"partial","source":"https://blog.cloudflare.com/mcp-portal-writeguard-private-beta/","quote":"WriteGuard is a shared policy, attribution, and auditing layer.","note":"WriteGuard risk tiers (Read Only ... Critical) in private beta since Aug 5, 2026."},"auditLogPerPerson":{"value":"yes","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md","quote":"Portal logs allow you to monitor user activity through an MCP server portal."},"callTracing":{"value":"partial","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md","quote":"Portal logs allow you to monitor user activity through an MCP server portal.","note":"Logs show time, status, server, capability, duration; no payload-level tracing described."},"logExportSiem":{"value":"partial","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md","quote":"Only available on Enterprise plans.","note":"Logpush export of portal logs is Enterprise only."},"dlpRedaction":{"value":"partial","source":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md","quote":"Gateway inspects the traffic and applies any matching HTTP policies, including DLP scanning.","note":"Requires routing portal traffic through Cloudflare Gateway (since Mar 2026); DLP scanning/blocking, redaction not stated."},"promptInjectionDetection":{"value":"partial","source":"https://blog.cloudflare.com/enterprise-mcp/","quote":"automatically inspect inbound MCP traffic for prompt injection attempts","note":"Via separate AI Security for Apps product for public-facing MCP servers, not a portal feature."},"toolPoisoningProtection":{"value":"not-published","source":null,"quote":null},"skillsAuthoring":{"value":"not-published","source":null,"quote":null},"skillsGitSync":{"value":"not-published","source":null,"quote":null},"skillsByRole":{"value":"not-published","source":null,"quote":null},"skillsOverMcp":{"value":"not-published","source":null,"quote":null},"openSource":{"value":"not-published","source":null,"quote":null,"note":"Managed Cloudflare service; no source repo for portals found."},"selfHost":{"value":"not-published","source":null,"quote":null,"note":"Runs on Cloudflare's network only; requires an active Cloudflare zone."},"vpcOnPrem":{"value":"partial","source":"https://developers.cloudflare.com/changelog/post/2026-09-22-private-mcp-servers/","quote":"MCP server portals can now connect to MCP servers available only on your private network.","note":"Portal is SaaS; upstream servers can sit on private networks."},"airGapped":{"value":"not-published","source":null,"quote":null},"euRegion":{"value":"not-published","source":null,"quote":null,"note":"Cloudflare has data localization products; not documented for MCP portals."},"soc2Type2":{"value":"yes","source":"https://www.cloudflare.com/trust-hub/","quote":"Explore our posture around ISO 27001, ISO 27701, PCI DSS, SOC 2 Type II, and others","note":"Company-level; portal scope not stated."},"iso27001":{"value":"yes","source":"https://www.cloudflare.com/trust-hub/","quote":"Explore our posture around ISO 27001, ISO 27701, PCI DSS, SOC 2 Type II, and others","note":"Company-level; portal scope not stated."},"hipaa":{"value":"not-published","source":null,"quote":null},"gdprDpa":{"value":"partial","source":"https://www.cloudflare.com/trust-hub/","quote":"Learn about our privacy policy, our data localization products, and our approach to regulations like the GDPR.","note":"GDPR addressed; DPA not stated."},"publicPricing":{"value":"yes","source":"https://www.cloudflare.com/plans/","quote":"Teams over 50 solving narrow SSE use cases without enterprise support."},"freeTier":{"value":"yes","source":"https://www.cloudflare.com/plans/","quote":"Teams under 50 users or enterprise proof-of-concept tests.","note":"Portals available on all plans per Aug 2025 changelog."},"startingPrice":{"value":"$0 up to 50 users; $7/user/month Pay-as-you-go","source":"https://www.cloudflare.com/plans/","quote":"Teams over 50 solving narrow SSE use cases without enterprise support.","note":"Price shown as $7 /user/month."},"pricingModel":{"value":"Bundled in Cloudflare Zero Trust seat pricing (per user/month); no separate MCP portal charge published","source":"https://developers.cloudflare.com/changelog/post/2025-08-26-mcp-server-portals/index.md","quote":"for all customers across all plans"},"llmGateway":{"value":"partial","source":"https://developers.cloudflare.com/ai-gateway/","quote":"Cloudflare's AI Gateway allows you to gain visibility and control over your AI apps.","note":"Separate product (AI Gateway), not part of MCP portals."},"costTrackingPerPerson":{"value":"not-published","source":null,"quote":null,"note":"AI Gateway tracks cost per app, not per user in portals."}},"sourcesVisited":["https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/index.md","https://developers.cloudflare.com/changelog/post/2025-08-26-mcp-server-portals/index.md","https://www.cloudflare.com/plans/","https://en-us.www.cloudflare.com/teams-pricing/","https://blog.cloudflare.com/mcp-portal-writeguard-private-beta/","https://developers.cloudflare.com/changelog/post/2026-09-22-private-mcp-servers/","https://blog.cloudflare.com/enterprise-mcp/","https://www.cloudflare.com/trust-hub/","https://developers.cloudflare.com/cloudflare-one/team-and-resources/users/scim/","https://blog.cloudflare.com/zero-trust-mcp-server-portals/","https://developers.cloudflare.com/ai-gateway/","https://www.cloudflare.com/about-overview/","https://developers.cloudflare.com/changelog/post/2026-03-20-mcp-portal-gateway-routing/"]},{"id":"docker-mcp-gateway","name":"Docker MCP Gateway (MCP Toolkit, MCP Catalog, MCP Enterprise Gateway)","vendor":"Docker, Inc.","url":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/","category":"mcp-gateway","frame":"direct","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"MIT-licensed gateway running MCP servers as containers, with a 300+ server catalog and a sales-led enterprise edition.","whereTheyWin":[{"text":"Runs local MCP servers in isolated containers with signed images, SBOMs, secret blocking and network blocking, which a hosted gateway cannot do for stdio servers.","source":"https://docs.docker.com/reference/cli/docker/mcp/gateway/run.md"},{"text":"Distribution through Docker Desktop: MCP Toolkit ships in an app most developers already have, with a 300+ server catalog and one-command client connect.","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/catalog"},{"text":"Enterprise Gateway offers Cedar policies with default-deny, per-request approval, SIEM-streamed per-user decisions, and an air-gapped appliance available today.","source":"https://www.docker.com/products/mcp-enterprise-gateway/"}],"company":{"founded":"not-published","hq":"Palo Alto, CA (3790 El Camino Real #1052; company is remote-first)","funding":"$105M Series C at $2.1B valuation led by Bain Capital Ventures (Apr 2022, press)","ownership":"Private, VC-backed","source":"https://www.docker.com/company/contact/"},"pricing":{"public":false,"model":"free open source (gateway/Toolkit) + contact sales (MCP Enterprise Gateway / AI Governance)","freeTier":"yes","plans":[{"name":"MCP Gateway (open source)","price":"$0","unit":"MIT license, self-run","includes":"docker mcp CLI plugin, containerized servers, profiles, catalog, OAuth, call logging","source":"https://github.com/docker/mcp-gateway"},{"name":"Docker Personal","price":"$0","unit":"/mo","includes":"Docker Desktop (MCP Toolkit UI lives in Docker Desktop); no MCP-specific features listed on pricing page","source":"https://www.docker.com/pricing/"},{"name":"Docker Pro","price":"$11 monthly / $9 annual","unit":"per user/month","includes":"Docker subscription; MCP not listed","source":"https://www.docker.com/pricing/"},{"name":"Docker Team","price":"$16 monthly / $15 annual","unit":"per user/month","includes":"Docker subscription; MCP not listed","source":"https://www.docker.com/pricing/"},{"name":"Docker Business","price":"$24","unit":"per user/month","includes":"Single Sign-On (SSO), SCIM user provisioning; MCP not listed","source":"https://www.docker.com/pricing/"},{"name":"MCP Enterprise Gateway / AI Governance","price":"Contact sales","unit":"not published","includes":"Identity, Cedar policy, audit to SIEM; managed in your VPC or air-gapped appliance","source":"https://www.docker.com/products/mcp-enterprise-gateway/"}],"extras":[],"source":"https://www.docker.com/pricing/"},"limits":[{"name":"Catalog size","value":"300+ servers","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/catalog"},{"name":"Per-tool container resources","value":"1 CPU, 2 GB memory","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/toolkit"},{"name":"Docker Desktop version for current Toolkit UI","value":"4.62 and later","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/toolkit"},{"name":"Enterprise availability","value":"MCP Gateway as part of Docker AI Governance is invite-only","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/"}],"facts":{"catalogSize":{"value":"300+","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/catalog","quote":"all 300+ servers in the Docker catalog"},"verifiedServers":{"value":"yes","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/catalog","quote":"built and digitally signed by Docker for enhanced security","note":"Docker-built images under mcp/ with signed SBOMs; FAQ calls security measures best-effort."},"byoMcpServer":{"value":"yes","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/catalog","quote":"Add your organization's private MCP servers alongside public ones."},"remoteMcpServers":{"value":"yes","source":"https://www.docker.com/products/mcp-enterprise-gateway/","quote":"Remote services over HTTP or SSE, containerized servers, and the internal servers your own teams build."},"localOrDockerServers":{"value":"yes","source":"https://github.com/docker/mcp-gateway","quote":"Run MCP servers as Docker containers with proper isolation."},"singleUrlAllTools":{"value":"partial","source":"https://docs.docker.com/reference/cli/docker/mcp/gateway/run.md","quote":"TCP port to listen on (default is to listen on stdio)","note":"OSS gateway defaults to a local stdio endpoint per client; sse/streaming transports expose one endpoint. Enterprise Gateway gives a shared governed endpoint."},"versionPinning":{"value":"partial","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/catalog","quote":"versioned with full provenance and SBOM metadata","note":"Servers are versioned OCI images; explicit pinning workflow not documented."},"schemaChangeMonitoring":{"value":"not-published","source":null,"quote":null},"worksInClaude":{"value":"yes","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/toolkit","quote":"Cross-LLM compatibility: Works with Claude, Cursor, and other MCP clients.","note":"Claude Desktop example documented."},"worksInClaudeCode":{"value":"yes","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/","quote":"Claude Code, Cursor, Zed, and others connect through the MCP Gateway."},"worksInChatGPT":{"value":"partial","source":"https://www.docker.com/products/mcp-enterprise-gateway/","quote":"Clients that speak MCP, including Claude Code, Cursor, VS Code, Codex, ChatGPT Enterprise, and agents your teams build in house.","note":"Enterprise Gateway only (ChatGPT Enterprise); local Toolkit is not reachable from ChatGPT."},"worksInCursor":{"value":"yes","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/","quote":"Claude Code, Cursor, Zed, and others connect through the MCP Gateway."},"worksInCodex":{"value":"yes","source":"https://www.docker.com/products/mcp-enterprise-gateway/","quote":"Clients that speak MCP, including Claude Code, Cursor, VS Code, Codex, ChatGPT Enterprise, and agents your teams build in house."},"worksInCopilot":{"value":"partial","source":"https://github.com/docker/mcp-gateway","quote":"Each MCP client (eg VS Code, Cursor, Claude Desktop, etc.)","note":"VS Code documented; Copilot not named explicitly."},"customAgentsSdk":{"value":"yes","source":"https://www.docker.com/products/mcp-enterprise-gateway/","quote":"Clients that speak MCP, including Claude Code, Cursor, VS Code, Codex, ChatGPT Enterprise, and agents your teams build in house."},"ownChatUiRequired":{"value":"no","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/","quote":"Claude Code, Cursor, Zed, and others connect through the MCP Gateway."},"perUserOAuth":{"value":"partial","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/toolkit","quote":"The MCP Toolkit handles OAuth authentication automatically.","note":"Each developer authorizes on their own machine; shared profiles exclude credentials. Per-user OAuth in Enterprise Gateway not stated (it says credentials stay in your secret store)."},"managedOAuthApps":{"value":"partial","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/catalog","quote":"Remote servers run on the provider's infrastructure and connect to external services.","note":"Toolkit runs OAuth for catalog remote servers (GitHub, Notion, Linear) via browser; whether Docker-owned OAuth apps are used not stated."},"byoOAuthApp":{"value":"not-published","source":null,"quote":null},"sso":{"value":"partial","source":"https://www.docker.com/products/mcp-enterprise-gateway/","quote":"Sign in through your provider. Policy follows the groups you already manage.","note":"Enterprise Gateway (contact sales/invite-only). Docker Business also lists SSO for Docker accounts."},"scim":{"value":"partial","source":"https://www.docker.com/pricing/","quote":"SCIM user provisioning","note":"Docker Business account provisioning; MCP-specific SCIM not documented."},"roleBasedToolAccess":{"value":"partial","source":"https://www.docker.com/products/mcp-enterprise-gateway/","quote":"It authenticates the user through your identity provider, resolves which servers and tools that user's groups can reach","note":"Enterprise Gateway only; OSS uses profiles, not identity-based roles."},"toolLevelAllowDeny":{"value":"yes","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/profiles","quote":"You can enable or disable individual tools.","note":"Enterprise: allow/deny by server, tool, transport and call."},"readOnlyModes":{"value":"partial","source":"https://docs.docker.com/ai/sandboxes/governance/access-controls/mcp/","quote":"It permits read-only tool calls, resource reads, and prompt retrieval from that registered server:","note":"Expressible as Cedar policy in AI Governance; not a toggle in OSS."},"auditLogPerPerson":{"value":"partial","source":"https://www.docker.com/products/mcp-enterprise-gateway/","quote":"A structured event per evaluation, tied to user and agent, streamed to your SIEM.","note":"Enterprise Gateway only; OSS logs calls locally without user identity."},"callTracing":{"value":"yes","source":"https://github.com/docker/mcp-gateway","quote":"Built-in logging and call tracing capabilities."},"logExportSiem":{"value":"partial","source":"https://www.docker.com/products/mcp-enterprise-gateway/","quote":"Structured events per tool call, in the pipeline your security team already watches.","note":"Enterprise Gateway only."},"dlpRedaction":{"value":"partial","source":"https://docs.docker.com/reference/cli/docker/mcp/gateway/run.md","quote":"Block secrets from being/received sent to/from tools","note":"Secret-pattern blocking only (--block-secrets), not general PII redaction."},"promptInjectionDetection":{"value":"not-published","source":null,"quote":null,"note":"Custom interceptors could be used; no built-in detector documented."},"toolPoisoningProtection":{"value":"partial","source":"https://www.docker.com/blog/docker-mcp-gateway-secure-infrastructure-for-agentic-ai/","quote":"Verify signatures – ensure that the gateway can verify provenance of the MCP container image before using it.","note":"Supply-chain provenance check, not tool-description scanning."},"skillsAuthoring":{"value":"not-published","source":null,"quote":null,"note":"Docker publishes its own open-source Docker Skills (SKILL.md guidance); no customer skills authoring via MCP Gateway documented."},"skillsGitSync":{"value":"not-published","source":null,"quote":null},"skillsByRole":{"value":"not-published","source":null,"quote":null},"skillsOverMcp":{"value":"not-published","source":null,"quote":null},"openSource":{"value":"MIT","source":"https://github.com/docker/mcp-gateway","quote":"This project is licensed under the MIT License","note":"Enterprise Gateway / AI Governance features are commercial."},"selfHost":{"value":"yes","source":"https://github.com/docker/mcp-gateway","quote":"Run MCP servers as Docker containers with proper isolation.","note":"OSS gateway runs locally or anywhere Docker runs."},"vpcOnPrem":{"value":"yes","source":"https://www.docker.com/products/mcp-enterprise-gateway/","quote":"Docker-operated, inside your own account or VPC. Data and traffic stay in your environment."},"airGapped":{"value":"yes","source":"https://www.docker.com/products/mcp-enterprise-gateway/","quote":"Private Kubernetes with no outbound connection. Catalogs, server images, and policy load from inside your network."},"euRegion":{"value":"not-published","source":null,"quote":null,"note":"Docker-managed multi-tenant cloud is 'coming soon'; customer-VPC deploy covers residency."},"soc2Type2":{"value":"partial","source":"https://www.docker.com/trust/compliance/","quote":"The current SOC 2 Type 2 audit report includes Docker Desktop, Hub, Scout, Build Cloud, Testcontainers Cloud, Docker Hardened Images (DHI), and Offload.","note":"Company has SOC 2 Type 2; MCP Gateway/AI Governance not listed in scope (Desktop is)."},"iso27001":{"value":"yes","source":"https://www.docker.com/trust/compliance/","quote":"Docker first achieved ISO 27001 certification in April 2024","note":"Company-level; product scope not stated."},"hipaa":{"value":"not-published","source":null,"quote":null},"gdprDpa":{"value":"partial","source":"https://www.docker.com/trust/compliance/","quote":"Docker complies with leading privacy regulations like GDPR, CCPA, CPA, CTDPA, VCDPA, UCPA, and The APEC Privacy Framework.","note":"DPA not mentioned."},"publicPricing":{"value":"partial","source":"https://www.docker.com/products/mcp-enterprise-gateway/","quote":"Docker-operated, inside your own account or VPC.","note":"OSS gateway free; Docker subscription prices public but list no MCP features; Enterprise Gateway is Talk to sales."},"freeTier":{"value":"yes","source":"https://github.com/docker/mcp-gateway","quote":"This project is licensed under the MIT License"},"startingPrice":{"value":"$0 (open source); Enterprise Gateway contact sales","source":"https://github.com/docker/mcp-gateway","quote":"This project is licensed under the MIT License"},"pricingModel":{"value":"Free OSS + Docker Desktop subscriptions (per user/month) + sales-led Enterprise Gateway / AI Governance","source":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/","quote":"MCP Gateway as part of Docker AI Governance is an invite-only feature."},"llmGateway":{"value":"not-published","source":null,"quote":null},"costTrackingPerPerson":{"value":"not-published","source":null,"quote":null}},"sourcesVisited":["https://docs.docker.com/ai/mcp-catalog-and-toolkit/mcp-gateway/","https://github.com/docker/mcp-gateway","https://docs.docker.com/ai/mcp-catalog-and-toolkit/catalog","https://docs.docker.com/ai/mcp-catalog-and-toolkit/toolkit","https://www.docker.com/pricing/","https://docs.docker.com/ai/mcp-catalog-and-toolkit/faqs","https://www.docker.com/products/ai-governance/","https://docs.docker.com/ai/sandboxes/governance/access-controls/mcp/","https://www.docker.com/products/mcp-enterprise-gateway/","https://docs.docker.com/reference/cli/docker/mcp/","https://docs.docker.com/ai/mcp-catalog-and-toolkit/profiles","https://www.docker.com/trust/compliance/","https://www.docker.com/company/contact/","https://docs.docker.com/ai/mcp-catalog-and-toolkit/","https://docs.docker.com/ai/skills/","https://texxr.com/1158272/docker-raises-105m-at-2-1b-valuation","https://docs.docker.com/reference/cli/docker/mcp/gateway/run.md","https://www.docker.com/blog/docker-mcp-gateway-secure-infrastructure-for-agentic-ai/"],"github":{"repo":"docker/mcp-gateway","url":"https://github.com/docker/mcp-gateway","license":"MIT","licenseSource":"https://github.com/docker/mcp-gateway/blob/main/LICENSE","stars":1605,"starsCheckedAt":"2026-10-19","selfHostMethod":"Docker CLI plugin","selfHostSource":"https://github.com/docker/mcp-gateway#installation"}},{"id":"glean","name":"Glean (Assistant, Agents, MCP server)","vendor":"Glean Technologies","url":"https://www.glean.com","category":"agent-builder","frame":"different-client","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"Enterprise search and AI assistant with agent builder, indexed connectors, and a hosted MCP server for external AI clients.","whereTheyWin":[{"text":"Indexes company data into a permission-aware knowledge graph, so search and chat over 275+ sources is retrieval over a pre-built index rather than live tool calls per app.","source":"https://www.glean.com/platform/connectors"},{"text":"Ships its own end-user assistant, agent builder and browser extension; non-technical staff get a finished app, not just a tool endpoint.","source":"https://docs.glean.com/release-notes/releases/2026-08-31-august-release"},{"text":"Built-in AI security layer: DLP for sensitive content and prompt-injection detection (Protect+), plus HIPAA and ISO 42001 attestations.","source":"https://www.glean.com/security"}],"company":{"founded":"2019","hq":"Palo Alto, CA","funding":"~$765M disclosed; $150M Series F at $7.2B valuation (June 2025, led by Wellington)","ownership":"Private, venture-backed","source":"https://en.wikipedia.org/wiki/Glean_Technologies"},"pricing":{"public":false,"model":"per seat + usage (FlexCredits / Model Hub tokens); contact sales","freeTier":"not-published","plans":[{"name":"Enterprise Flex Seats","price":"not published","unit":"per user per month","includes":"Unlimited Fast Mode queries and agent creation; Thinking Mode on standard models up to 100/user/week; pooled FlexCredits for premium models and agent runs","source":"https://docs.glean.com/glean-enterprise-flex-pricing"},{"name":"Glean Core Suite","price":"not published","unit":"per user per month","includes":"Search, assistant, agent building and governance, connectors, Glean Protect, APIs","source":"https://docs.glean.com/glean-core-suite-pricing"},{"name":"Glean Model Hub Usage (add-on)","price":"Provider API rates, e.g. Claude Sonnet 5 $2.00 in / $10.00 out; Glean Waldo $0.50 / $2.50","unit":"per million tokens, upfront commit","includes":"Required for deep research, canvas, agents API, MCP calls that use LLMs, etc.","source":"https://docs.glean.com/glean-core-suite-pricing"}],"extras":["Glean Protect+ (sensitive content, prompt injection, toxic content protection): annual site-wide fee","Premium Support (24x7, 1-hour critical SLA): annual fee","Glean Flexible Model Management: percentage of total LLM usage (percentage not published)","FlexCredit Packs for usage beyond the base pool","Learned memories consume FlexCredits from 2026-11-07"],"source":"https://docs.glean.com/glean-enterprise-flex-pricing"},"limits":[{"name":"Thinking Mode / Adaptive Reasoning (standard models) included in Flex seat","value":"100 queries per user per week","source":"https://docs.glean.com/glean-enterprise-flex-pricing"},{"name":"Skills Git sync interval","value":"about once a day, one-way GitHub to Glean","source":"https://docs.glean.com/user-guide/assistant/skills"}],"facts":{"catalogSize":{"value":"275+ connectors","source":"https://www.glean.com/platform/connectors","quote":"275+ out-of-the-box connectors","note":"Same site elsewhere says 'more than 250'. Mostly indexing connectors, not MCP tool servers."},"verifiedServers":{"value":"not-published","source":null,"quote":null},"byoMcpServer":{"value":"yes","source":"https://www.glean.com/platform/connectors","quote":"Connect to MCP-enabled tools to bring in custom data or actions."},"remoteMcpServers":{"value":"yes","source":"https://docs.glean.com/administration/tools/connect-remote-mcp-servers-to-glean","quote":"After users authorize the action on first use, Glean uses the token for subsequent requests.","note":"Admin adds remote MCP servers under Platform > Tools; tools then usable in Glean Assistant and agents."},"localOrDockerServers":{"value":"not-published","source":null,"quote":null,"note":"Glean publishes an open-source local MCP server package (gleanwork) that exposes Glean, but no hosting of customer local/Docker servers."},"singleUrlAllTools":{"value":"not-published","source":null,"quote":null},"versionPinning":{"value":"not-published","source":null,"quote":null},"schemaChangeMonitoring":{"value":"not-published","source":null,"quote":null},"worksInClaude":{"value":"yes","source":"https://www.glean.com/blog/glean-ai-gateway","quote":"MCP supported across a broad set of AI front doors including Claude, ChatGPT, and more."},"worksInClaudeCode":{"value":"yes","source":"https://docs.glean.com/release-notes/releases/2026-08-31-august-release","quote":"build, test, and run Glean agents directly from coding assistants such as Cursor, Claude, or Codex","note":"Glean plug-in for coding hosts lists Claude Code, Codex, Cursor."},"worksInChatGPT":{"value":"yes","source":"https://www.glean.com/blog/glean-ai-gateway","quote":"MCP supported across a broad set of AI front doors including Claude, ChatGPT, and more."},"worksInCursor":{"value":"yes","source":"https://docs.glean.com/release-notes/releases/2026-08-31-august-release","quote":"build, test, and run Glean agents directly from coding assistants such as Cursor, Claude, or Codex"},"worksInCodex":{"value":"yes","source":"https://docs.glean.com/release-notes/releases/2026-08-31-august-release","quote":"build, test, and run Glean agents directly from coding assistants such as Cursor, Claude, or Codex"},"worksInCopilot":{"value":"partial","source":"https://docs.glean.com/administration/platform/mcp/host-guides/copilot-studio","quote":"Once the Glean MCP server is configured, users can interact with Glean data through your Copilot Studio agent.","note":"Copilot Studio supported via MCP; Glean coding plug-in states GitHub Copilot isn't supported (a separate GitHub Copilot extension exists)."},"customAgentsSdk":{"value":"yes","source":"https://developers.glean.com/","quote":"The agent toolkit exposes Glean retrieval as tools for whatever you build with.","note":"LangChain, OpenAI Agents SDK, Google ADK, MCP; client libraries in Python, TypeScript, Java, Go."},"ownChatUiRequired":{"value":"no","source":"https://www.glean.com/blog/glean-ai-gateway","quote":"MCP supported across a broad set of AI front doors including Claude, ChatGPT, and more.","note":"Own assistant UI exists but is not required; MCP server exposes search/chat/read tools."},"perUserOAuth":{"value":"yes","source":"https://docs.glean.com/administration/tools/connect-remote-mcp-servers-to-glean","quote":"After users authorize the action on first use, Glean uses the token for subsequent requests.","note":"Also OAuth Admin, API key, client credentials options."},"managedOAuthApps":{"value":"not-published","source":null,"quote":null},"byoOAuthApp":{"value":"not-published","source":null,"quote":null},"sso":{"value":"yes","source":"https://docs.glean.com/administration/identity/sso/about","quote":"Single Sign-On (SSO) is mandatory for Glean","note":"OIDC or SAML."},"scim":{"value":"partial","source":"https://docs.glean.com/administration/identity/sso/about","quote":"OIDC also enables Glean to asynchronously synchronize directory information from your IdP.","note":"Directory sync via OIDC; SCIM not named in the docs."},"roleBasedToolAccess":{"value":"partial","source":"https://docs.glean.com/administration/tools/connect-remote-mcp-servers-to-glean","quote":"who can add or configure sensitive tools in agents","note":"RBAC limits which creators/departments can configure tools; per-user MCP tool access is part of AI Gateway (private beta)."},"toolLevelAllowDeny":{"value":"yes","source":"https://docs.glean.com/administration/platform/mcp/enable-mcp-servers","quote":"Design MCP servers with specific tools for different use cases and teams.","note":"Admins enable each remote MCP tool individually for Agents and/or Assistant."},"readOnlyModes":{"value":"not-published","source":null,"quote":null},"auditLogPerPerson":{"value":"yes","source":"https://www.glean.com/security","quote":"Every control point is logged to an end-to-end audit trail as it happens.","note":"Admin audit logs exclude end-user activity; user events are in separate Customer Event logs."},"callTracing":{"value":"not-published","source":null,"quote":null},"logExportSiem":{"value":"partial","source":"https://docs.glean.com/administration/management/audit-logs/admin-audit-logs","quote":"For Glean-hosted deployments, Glean can also configure ongoing delivery of your logs to a destination you manage.","note":"Not self-serve; CSV export in console."},"dlpRedaction":{"value":"yes","source":"https://www.glean.com/security","quote":"Detects and blocks sensitive content for both structured and unstructured data across apps.","note":"Part of Glean Protect+ add-on per pricing docs."},"promptInjectionDetection":{"value":"yes","source":"https://www.glean.com/security","quote":"Detect prompt injection attacks with 96.9% accuracy.","note":"Protect+ add-on."},"toolPoisoningProtection":{"value":"not-published","source":null,"quote":null},"skillsAuthoring":{"value":"yes","source":"https://docs.glean.com/user-guide/assistant/skills","quote":"Glean asks clarifying questions about the task, then scaffolds the Skill in canvas.","note":"Supports Agent Skills standard (announced 2026-02-09); upload .zip/.md/.skill."},"skillsGitSync":{"value":"partial","source":"https://docs.glean.com/user-guide/assistant/skills","quote":"Glean automatically checks the source repository for upstream changes about once a day.","note":"One-way import from GitHub; no push back."},"skillsByRole":{"value":"yes","source":"https://docs.glean.com/release-notes/releases/2026-08-31-august-release","quote":"consistently enforce platform audience permissions across skill discovery, skill-file disclosure, and tool execution","note":"Share to people, departments, groups as Viewer/Editor."},"skillsOverMcp":{"value":"yes","source":"https://docs.glean.com/administration/platform/mcp/glean-plugin","quote":"access to Glean Skills and tools","note":"Via Glean plug-in for Claude Code, Codex, Cursor; not Claude Cowork or GitHub Copilot."},"openSource":{"value":"not-published","source":null,"quote":null,"note":"Core product is closed SaaS; indexing SDK and local MCP server are open source."},"selfHost":{"value":"partial","source":"https://docs.glean.com/get-started/prepare/about-deployment","quote":"Not a traditional self-hosted model.","note":"Customer Hosted (formerly Cloud-Prem): Glean-managed tenant inside customer's GCP or AWS."},"vpcOnPrem":{"value":"yes","source":"https://www.glean.com/security","quote":"host Glean within its own cloud tenant","note":"Customer-cloud (GCP/AWS) only; no on-prem."},"airGapped":{"value":"not-published","source":null,"quote":null},"euRegion":{"value":"not-published","source":null,"quote":null,"note":"Docs say alternative geographic regions are available in SaaS but don't name the EU."},"soc2Type2":{"value":"yes","source":"https://www.glean.com/security","quote":"SOC 2 Type II"},"iso27001":{"value":"yes","source":"https://www.glean.com/security","quote":"ISO 27001","note":"Also ISO 42001."},"hipaa":{"value":"yes","source":"https://www.glean.com/security","quote":"HIPAA"},"gdprDpa":{"value":"yes","source":"https://www.glean.com/security","quote":"GDPR"},"publicPricing":{"value":"partial","source":"https://docs.glean.com/glean-core-suite-pricing","quote":"Licensed on a per-user, per-month basis","note":"Structure and token rates public; seat price not published (pricing page is demo-only)."},"freeTier":{"value":"not-published","source":null,"quote":null},"startingPrice":{"value":"not-published","source":null,"quote":null},"pricingModel":{"value":"Per user per month seats plus pooled usage credits / per-million-token model usage","source":"https://docs.glean.com/glean-core-suite-pricing","quote":"Licensed on a per-user, per-month basis"},"llmGateway":{"value":"partial","source":"https://www.glean.com/platform/model-hub","quote":"Glean's Model Hub gives teams 40+ open and proprietary LLMs","note":"Model Hub serves Glean's own surfaces; Glean AI Gateway for external tools (Claude Code, Codex LLM traffic) is private beta since 2026-07-08."},"costTrackingPerPerson":{"value":"partial","source":"https://www.glean.com/platform/model-hub","quote":"set usage limits to manage spend by user, agent, or department.","note":"Per-user budgets/quotas also in AI Gateway (private beta)."}},"sourcesVisited":["https://www.glean.com/pricing","https://docs.glean.com/administration/platform/mcp/connecting-to-glean-mcp-server","https://docs.glean.com/administration/tools/connect-remote-mcp-servers-to-glean","https://www.glean.com/security","https://www.glean.com/platform/connectors","https://docs.glean.com/user-guide/assistant/skills","https://glean.com/blog/glean-skills-launch-2026","https://docs.glean.com/get-started/prepare/about-deployment","https://en.wikipedia.org/wiki/Glean_Technologies","https://docs.glean.com/administration/platform/mcp/glean-plugin","https://docs.glean.com/administration/platform/mcp/host-guides/copilot-studio","https://docs.glean.com/release-notes/releases/2026-08-31-august-release","https://www.glean.com/blog/glean-ai-gateway","https://docs.glean.com/glean-core-suite-pricing","https://docs.glean.com/glean-enterprise-flex-pricing","https://docs.glean.com/administration/management/audit-logs/admin-audit-logs","https://docs.glean.com/administration/identity/sso/about","https://docs.glean.com/administration/platform/mcp/enable-mcp-servers","https://developers.glean.com/","https://www.glean.com/platform/model-hub"]},{"id":"gumloop","name":"Gumloop","vendor":"Gumloop","url":"https://www.gumloop.com","category":"agent-builder","frame":"different-client","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"Hosted AI agent builder with 400+ connectors, credit-based billing, MCP hosting/proxying, org skills and model routing.","whereTheyWin":[{"text":"Non-technical teams build and run agents in Gumloop itself (plus Slack and Teams), so the buyer gets the agent runtime, not only a tool endpoint.","source":"https://www.gumloop.com/"},{"text":"Built-in model layer: Auto mode routes each message to a model and reasoning effort, with BYO provider keys and per-role model restrictions.","source":"https://www.gumloop.com/blog/gumloop-model-router"},{"text":"Spend governance tied to roles: per-role monthly credit caps, per-chat credit warnings that pause for approval, and a capped overage default on Pro.","source":"https://docs.gumloop.com/core-concepts/credits.md"}],"company":{"founded":"2023 (Vancouver)","hq":"San Francisco, CA","funding":"$50M Series B led by Benchmark (2026-03-12); prior $17M Series A","ownership":"Private, venture-backed","source":"https://thelogic.co/briefing/gumloop-raises-us50m-series-b-for-ai-agent-building-tools/"},"pricing":{"public":true,"model":"platform fee + usage credits + 8% orchestration fee","freeTier":"not-published","plans":[{"name":"Pro","price":"Starts at $37 / month","unit":"per month (org), includes 20k credits/month; 14-day free trial","includes":"Unlimited agents and seats, 35+ models, GitHub skill sync, one hosted MCP server, agent-scoped connector policies; 8% orchestration fee","source":"https://www.gumloop.com/pricing"},{"name":"Enterprise","price":"Custom Pricing","unit":"contact sales","includes":"Custom credits, custom MCP hosting limits, org-wide connector policies, custom model proxy, optional VPC, SCIM/SAML, audit logs; orchestration fee discounts","source":"https://www.gumloop.com/pricing"}],"extras":["Overage credits billed at $0.005 per credit (Pro overage capped, default 1,000,000 credits / $5,000 per period)","Orchestration fee 8% of chat, compute and tool-call credits; 16% on BYOK chats","Compute 5 credits per session-minute; each successful connector tool call at least 1 credit"],"source":"https://www.gumloop.com/pricing"},"limits":[{"name":"Pro included credits","value":"20,000 per month","source":"https://www.gumloop.com/pricing"},{"name":"Credit value","value":"$0.005 per credit (200 credits per $1)","source":"https://docs.gumloop.com/core-concepts/credits.md"},{"name":"Pro default overage cap","value":"1,000,000 credits ($5,000) per billing period; can be set lower","source":"https://docs.gumloop.com/core-concepts/credits.md"},{"name":"Hosted MCP servers","value":"Pro: 1; Enterprise: custom","source":"https://docs.gumloop.com/enterprise-features/hosted_mcps.md"},{"name":"Gumloop MCP server tools","value":"46 tools","source":"https://docs.gumloop.com/mcp-server/overview"}],"facts":{"catalogSize":{"value":"400+ connectors","source":"https://www.gumloop.com/","quote":"400+ Connectors"},"verifiedServers":{"value":"not-published","source":null,"quote":null},"byoMcpServer":{"value":"yes","source":"https://docs.gumloop.com/enterprise-features/proxied_mcps.md","quote":"Proxied MCPs let you connect existing, external MCP servers to Gumloop through a managed proxy.","note":"Pro and Enterprise."},"remoteMcpServers":{"value":"yes","source":"https://docs.gumloop.com/enterprise-features/proxied_mcps.md","quote":"Proxied MCPs let you connect existing, external MCP servers to Gumloop through a managed proxy.","note":"Streamable HTTP or SSE endpoints; managed tunnel for servers inside private networks."},"localOrDockerServers":{"value":"partial","source":"https://docs.gumloop.com/enterprise-features/hosted_mcps.md","quote":"Gumloop builds a container from your code.","note":"Hosted MCPs deploy custom servers from GitHub repos; Pro limited to one server. No stdio/local runtime described."},"singleUrlAllTools":{"value":"yes","source":"https://docs.gumloop.com/mcp-server/centralized-auth.md","quote":"Connect apps to Gumloop once, then use their tools from any MCP client connected to Gumloop.","note":"Via Gumloop MCP server at mcp.gumloop.com/gumloop/mcp."},"versionPinning":{"value":"partial","source":"https://docs.gumloop.com/enterprise-features/hosted_mcps.md","quote":"choosing a specific branch or commit","note":"For hosted MCPs; server URL always routes to latest production deployment, rollback by redeploy."},"schemaChangeMonitoring":{"value":"not-published","source":null,"quote":null},"worksInClaude":{"value":"yes","source":"https://docs.gumloop.com/mcp-server/overview","quote":"Connect natively in Claude, Cursor, and other clients."},"worksInClaudeCode":{"value":"not-published","source":null,"quote":null},"worksInChatGPT":{"value":"yes","source":"https://www.gumloop.com/changelog","quote":"Agent sessions opened from ChatGPT, Claude, Cursor, or Grok now show that app as the task icon and origin.","note":"Changelog 2026-09-29; no ChatGPT setup guide in docs."},"worksInCursor":{"value":"yes","source":"https://docs.gumloop.com/mcp-server/overview","quote":"Connect natively in Claude, Cursor, and other clients."},"worksInCodex":{"value":"not-published","source":null,"quote":null},"worksInCopilot":{"value":"partial","source":"https://docs.gumloop.com/mcp-server/setup.md","quote":"Add this configuration to your `.vscode/mcp.json`.","note":"VS Code setup via mcp-remote; Copilot not named explicitly."},"customAgentsSdk":{"value":"not-published","source":null,"quote":null,"note":"REST API, CLI and MCP exist for driving Gumloop agents; no SDK for building agents outside Gumloop found."},"ownChatUiRequired":{"value":"no","source":"https://docs.gumloop.com/mcp-server/centralized-auth.md","quote":"Your MCP client receives tool results, never the app's OAuth tokens.","note":"Agents are built and run in Gumloop; external MCP clients can drive agents and call connected-app tools."},"perUserOAuth":{"value":"yes","source":"https://docs.gumloop.com/enterprise-features/proxied_mcps.md","quote":"Can be per user (OAuth, personal API keys)."},"managedOAuthApps":{"value":"yes","source":"https://docs.gumloop.com/mcp-server/centralized-auth.md","quote":"Connect apps to Gumloop once, then use their tools from any MCP client connected to Gumloop."},"byoOAuthApp":{"value":"not-published","source":null,"quote":null},"sso":{"value":"yes","source":"https://docs.gumloop.com/enterprise-features/overview.md","quote":"Single sign-on and automatic user provisioning","note":"SAML/OIDC; Enterprise."},"scim":{"value":"yes","source":"https://docs.gumloop.com/enterprise-features/overview.md","quote":"Single sign-on and automatic user provisioning","note":"SCIM guide covers Okta, Entra ID; Enterprise."},"roleBasedToolAccess":{"value":"yes","source":"https://docs.gumloop.com/enterprise-features/overview.md","quote":"Control which connectors, tools, and AI models each group of members can access.","note":"Custom roles; org-wide policies on Enterprise, agent-scoped on Pro."},"toolLevelAllowDeny":{"value":"yes","source":"https://www.gumloop.com/changelog","quote":"Custom roles now show every connector policy in one list, with bulk allow and deny."},"readOnlyModes":{"value":"partial","source":"https://docs.gumloop.com/core-concepts/human_in_the_loop.md","quote":"Read-only tools run freely. Write, delete, and unknown-risk operations require approval.","note":"Approval mode that gates writes, not a strict read-only mode."},"auditLogPerPerson":{"value":"yes","source":"https://docs.gumloop.com/enterprise-features/overview.md","quote":"Track user actions across your organization for security and compliance.","note":"Enterprise; also available via API and Gumloop MCP."},"callTracing":{"value":"yes","source":"https://www.gumloop.com/","quote":"Trace every tool call through one logging and analytics layer."},"logExportSiem":{"value":"partial","source":"https://docs.gumloop.com/enterprise-features/overview.md","quote":"Export your organization's usage data for your own analysis.","note":"Audit logs retrievable via API; no SIEM integration named."},"dlpRedaction":{"value":"not-published","source":null,"quote":null,"note":"Incognito mode and data retention rules listed on pricing page, not DLP."},"promptInjectionDetection":{"value":"not-published","source":null,"quote":null},"toolPoisoningProtection":{"value":"not-published","source":null,"quote":null},"skillsAuthoring":{"value":"yes","source":"https://www.gumloop.com/","quote":"Artifacts, skills, and agents can now be shared across teams."},"skillsGitSync":{"value":"yes","source":"https://docs.gumloop.com/core-concepts/organization_skills.md","quote":"Imported from a GitHub repository and kept in sync automatically.","note":"New commits on the selected branch trigger sync; Pro and Enterprise."},"skillsByRole":{"value":"yes","source":"https://docs.gumloop.com/core-concepts/organization_skills.md","quote":"Members can attach and use the skill on agents, but not view its files","note":"Share with teams or org as Use only / Viewer."},"skillsOverMcp":{"value":"not-published","source":null,"quote":null,"note":"Gumloop MCP can create/manage skills, but skills are used by Gumloop agents; serving skills to external clients not documented."},"openSource":{"value":"not-published","source":null,"quote":null,"note":"Closed SaaS."},"selfHost":{"value":"not-published","source":null,"quote":null},"vpcOnPrem":{"value":"partial","source":"https://www.gumloop.com/pricing","quote":"Virtual Private Cloud","note":"Listed as Optional on Enterprise; details not published."},"airGapped":{"value":"not-published","source":null,"quote":null},"euRegion":{"value":"not-published","source":null,"quote":null},"soc2Type2":{"value":"yes","source":"https://www.gumloop.com/","quote":"SOC 2 Type II. Independently audited and compliant."},"iso27001":{"value":"not-published","source":null,"quote":null},"hipaa":{"value":"not-published","source":null,"quote":null},"gdprDpa":{"value":"yes","source":"https://www.gumloop.com/","quote":"GDPR. Zero Data Retention agreements for third-party models."},"publicPricing":{"value":"yes","source":"https://www.gumloop.com/pricing","quote":"Starts at $37 / month","note":"Enterprise is custom."},"freeTier":{"value":"not-published","source":null,"quote":null,"note":"No free plan listed; Pro has a 14-day free trial."},"startingPrice":{"value":"$37/month (Pro, 20k credits)","source":"https://www.gumloop.com/pricing","quote":"Starts at $37 / month"},"pricingModel":{"value":"Monthly plan with included credits, usage-based overage at $0.005/credit, plus 8% orchestration fee","source":"https://docs.gumloop.com/core-concepts/credits.md","quote":"Orchestration Fee = 8% x (Chat & Reasoning + Compute + Tool Calls)"},"llmGateway":{"value":"partial","source":"https://www.gumloop.com/blog/gumloop-model-router","quote":"a new Auto mode for all Gumloop agents","note":"Model router, BYO keys, custom proxy and per-role model restrictions apply to Gumloop agents; router API gives recommendations to your own code; not a proxy for external LLM traffic."},"costTrackingPerPerson":{"value":"yes","source":"https://www.gumloop.com/changelog","quote":"Organization Usage in Insights shows each member's monthly credit cap next to their spend.","note":"Per-role credit caps manageable via API (2026-08-18)."}},"sourcesVisited":["https://www.gumloop.com/pricing","https://www.gumloop.com/blog/gumloop-model-router","https://www.gumloop.com/","https://www.gumloop.com/changelog","https://trust.gumloop.com","https://docs.gumloop.com/getting-started/introduction","https://docs.gumloop.com/llms.txt","https://docs.gumloop.com/mcp-server/overview","https://docs.gumloop.com/mcp-server/centralized-auth.md","https://docs.gumloop.com/enterprise-features/overview.md","https://docs.gumloop.com/core-concepts/organization_skills.md","https://docs.gumloop.com/core-concepts/credits.md","https://docs.gumloop.com/core-concepts/human_in_the_loop.md","https://thelogic.co/briefing/gumloop-raises-us50m-series-b-for-ai-agent-building-tools/","https://docs.gumloop.com/enterprise-features/proxied_mcps.md","https://docs.gumloop.com/enterprise-features/hosted_mcps.md","https://docs.gumloop.com/mcp-server/setup.md","https://docs.gumloop.com/core-concepts/ai_models.md"]},{"id":"ibm-contextforge","name":"ContextForge MCP Gateway","vendor":"IBM","url":"https://github.com/IBM/mcp-context-forge","category":"mcp-gateway","frame":"direct","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"Apache-2.0 self-hosted gateway and registry federating MCP, A2A, REST and gRPC behind one endpoint.","whereTheyWin":[{"text":"Broader protocol coverage: federates MCP, A2A agents, REST and gRPC services, with REST/gRPC-to-MCP translation in the same gateway.","source":"https://github.com/IBM/mcp-context-forge"},{"text":"Large plugin library (40+) including PII filter, secrets detection, schema guard, rate limiter, and LLM Guard / Granite Guardian content moderation.","source":"https://ibm.github.io/mcp-context-forge/latest/using/plugins/plugins/"},{"text":"IBM brand and deep OpenTelemetry integration (Phoenix, Jaeger, Langfuse, Datadog, any OTLP backend) appeal to infra teams already running IBM or Kubernetes stacks.","source":"https://ibm.github.io/mcp-context-forge/latest/manage/observability/"}],"company":{"founded":"not-published","hq":"Armonk, NY (IBM corporate)","funding":"n/a (IBM open-source project)","ownership":"IBM open-source project under Apache-2.0; no commercial support offering found on the repo","source":"https://github.com/IBM/mcp-context-forge"},"pricing":{"public":true,"model":"free open source (self-hosted)","freeTier":"yes","plans":[{"name":"Open source","price":"$0","unit":"self-hosted","includes":"Full gateway, Admin UI, plugins, SSO, RBAC under Apache-2.0","source":"https://github.com/IBM/mcp-context-forge"}],"extras":[],"source":"https://github.com/IBM/mcp-context-forge"},"limits":[{"name":"Built-in rate limiting","value":"Rate Limiter plugin: by user, tenant or tool (fixed-window, sliding-window, token-bucket)","source":"https://ibm.github.io/mcp-context-forge/latest/using/plugins/plugins/"}],"facts":{"catalogSize":{"value":"No hosted integration catalog; ships an mcp-catalog.yml of public servers and you register your own","source":"https://github.com/IBM/mcp-context-forge","quote":"including servers from public catalogs — perform your own security evaluation","note":"Not a managed integration library like Metorial's 1,000+."},"verifiedServers":{"value":"not-published","source":null,"quote":null},"byoMcpServer":{"value":"yes","source":"https://github.com/IBM/mcp-context-forge","quote":"An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs"},"remoteMcpServers":{"value":"yes","source":"https://github.com/IBM/mcp-context-forge","quote":"Federation across multiple MCP and REST services"},"localOrDockerServers":{"value":"yes","source":"https://github.com/IBM/mcp-context-forge","quote":"stdio transport available for server-side use"},"singleUrlAllTools":{"value":"yes","source":"https://ibm.github.io/mcp-context-forge/latest/","quote":"federates tools, agents, and APIs into one clean endpoint for your AI clients","note":"Virtual servers bundle selected tools behind one endpoint."},"versionPinning":{"value":"not-published","source":null,"quote":null,"note":"README only advises pinning the gateway container image version, not upstream MCP server versions."},"schemaChangeMonitoring":{"value":"not-published","source":null,"quote":null,"note":"Schema Guard plugin validates arguments/results against JSONSchema, but no change detection is described."},"worksInClaude":{"value":"yes","source":"https://ibm.github.io/mcp-context-forge/latest/using/clients/claude-desktop/","quote":"FastMCP's fastmcp-remote bridges one of those processes to your Gateway's Streamable HTTP endpoint.","note":"Documented for Claude Desktop via a local stdio bridge."},"worksInClaudeCode":{"value":"not-published","source":null,"quote":null},"worksInChatGPT":{"value":"not-published","source":null,"quote":null},"worksInCursor":{"value":"not-published","source":null,"quote":null},"worksInCodex":{"value":"not-published","source":null,"quote":null},"worksInCopilot":{"value":"yes","source":"https://ibm.github.io/mcp-context-forge/latest/using/clients/copilot/","quote":"Super-charge Copilot (or any VS Code chat agent that speaks MCP) with tools, prompts and resources from your own ContextForge"},"customAgentsSdk":{"value":"yes","source":"https://github.com/IBM/mcp-context-forge","quote":"A2A (Agent-to-Agent) integration for external AI agents"},"ownChatUiRequired":{"value":"no","source":"https://ibm.github.io/mcp-context-forge/latest/","quote":"federates tools, agents, and APIs into one clean endpoint for your AI clients","note":"Has an optional built-in LLM Chat for testing, but works with external MCP clients."},"perUserOAuth":{"value":"yes","source":"https://ibm.github.io/mcp-context-forge/latest/manage/oauth/","quote":"OAuth tokens are scoped per ContextForge user"},"managedOAuthApps":{"value":"not-published","source":null,"quote":null,"note":"Admins enter their own client ID/secret per gateway; no vendor-managed OAuth apps described."},"byoOAuthApp":{"value":"yes","source":"https://ibm.github.io/mcp-context-forge/latest/manage/oauth/","quote":"Per-gateway OAuth configuration with encrypted client secrets"},"sso":{"value":"yes","source":"https://ibm.github.io/mcp-context-forge/latest/manage/sso/","quote":"GitHub, Google, IBM Security Verify, Microsoft Entra ID, Keycloak, Okta, and generic OIDC"},"scim":{"value":"not-published","source":null,"quote":null,"note":"SSO docs describe just-in-time user creation on first login; no SCIM."},"roleBasedToolAccess":{"value":"yes","source":"https://ibm.github.io/mcp-context-forge/latest/manage/rbac/","quote":"Role-based access control (RBAC) defines which actions users or teams can perform in ContextForge."},"toolLevelAllowDeny":{"value":"partial","source":"https://ibm.github.io/mcp-context-forge/latest/manage/rbac/","quote":"A role granted tools.preview but not tools.execute can validate a tool call but never actually invoke it.","note":"Tool access is shaped via team-owned resources, virtual servers and tools.* permissions; no explicit per-tool allow/deny list plugin."},"readOnlyModes":{"value":"partial","source":"https://ibm.github.io/mcp-context-forge/latest/manage/rbac/","quote":"Grants read-only access to all platform resources.","note":"platform_viewer is read-only for the gateway admin plane, not a read-only mode for upstream tools."},"auditLogPerPerson":{"value":"partial","source":"https://ibm.github.io/mcp-context-forge/latest/architecture/security-features/","quote":"Every request records method, endpoint, IP, user-agent, latency, and block reason in TokenUsageLog","note":"Per-token request log; security event logging is disabled by default and user identifiers are hashed."},"callTracing":{"value":"yes","source":"https://ibm.github.io/mcp-context-forge/latest/manage/observability/","quote":"Full lifecycle with arguments, results, and timing"},"logExportSiem":{"value":"partial","source":"https://ibm.github.io/mcp-context-forge/latest/manage/observability/","quote":"Phoenix, Jaeger, Tempo, Langfuse, Zipkin, Datadog, New Relic, Honeycomb, and any OTLP-compatible backend","note":"OTLP trace export; no dedicated SIEM audit-log export described."},"dlpRedaction":{"value":"yes","source":"https://ibm.github.io/mcp-context-forge/latest/using/plugins/plugins/","quote":"Detects and masks sensitive information including SSN, credit cards, and emails with configurable masking strategies","note":"PII Filter plugin."},"promptInjectionDetection":{"value":"partial","source":"https://ibm.github.io/mcp-context-forge/latest/using/plugins/plugins/","quote":"Comprehensive AI guardrails utilizing LLM Guard library with filters and sanitizers for input prompts and model outputs","note":"Via external LLMGuard / content moderation plugins; no named prompt-injection feature."},"toolPoisoningProtection":{"value":"roadmap","source":"https://ibm.github.io/mcp-context-forge/latest/architecture/security-features/","quote":"Signing/verification workflow for MCP gateways and servers to establish trust before federation link-up","note":"Listed as planned."},"skillsAuthoring":{"value":"not-published","source":null,"quote":null},"skillsGitSync":{"value":"not-published","source":null,"quote":null},"skillsByRole":{"value":"not-published","source":null,"quote":null},"skillsOverMcp":{"value":"not-published","source":null,"quote":null},"openSource":{"value":"Apache-2.0","source":"https://github.com/IBM/mcp-context-forge","quote":"Licensed under the Apache License 2.0"},"selfHost":{"value":"yes","source":"https://ibm.github.io/mcp-context-forge/latest/","quote":"deployable via PyPI or Docker, and scales to multi-cluster environments on Kubernetes"},"vpcOnPrem":{"value":"yes","source":"https://ibm.github.io/mcp-context-forge/latest/","quote":"deployable via PyPI or Docker, and scales to multi-cluster environments on Kubernetes"},"airGapped":{"value":"yes","source":"https://github.com/IBM/mcp-context-forge","quote":"An Admin UI for real-time management, configuration, and log monitoring (with airgapped deployment support)"},"euRegion":{"value":"not-published","source":null,"quote":null,"note":"No hosted service; self-hosted deployments run in whatever region you choose."},"soc2Type2":{"value":"not-published","source":null,"quote":null,"note":"Self-hosted open source; no hosted service to certify."},"iso27001":{"value":"not-published","source":null,"quote":null},"hipaa":{"value":"not-published","source":null,"quote":null},"gdprDpa":{"value":"not-published","source":null,"quote":null},"publicPricing":{"value":"yes","source":"https://github.com/IBM/mcp-context-forge","quote":"Licensed under the Apache License 2.0","note":"Free open source; no paid tier found."},"freeTier":{"value":"yes","source":"https://github.com/IBM/mcp-context-forge","quote":"Licensed under the Apache License 2.0"},"startingPrice":{"value":"$0 (self-hosted open source)","source":"https://github.com/IBM/mcp-context-forge","quote":"Licensed under the Apache License 2.0"},"pricingModel":{"value":"Free open source; you pay your own infrastructure","source":"https://github.com/IBM/mcp-context-forge","quote":"deployable via PyPI or Docker"},"llmGateway":{"value":"partial","source":"https://ibm.github.io/mcp-context-forge/latest/","quote":"A2A protocol, OpenAI-compatible and Anthropic agent routing","note":"Agent routing plus a built-in LLM Chat with providers configured in Admin UI (OpenAI, Azure OpenAI, Anthropic, Bedrock, Ollama, watsonx); not positioned as a full LLM gateway."},"costTrackingPerPerson":{"value":"not-published","source":null,"quote":null,"note":"README mentions LLM token/cost metrics; LLM Chat docs list token usage per provider only as a potential extension. No per-person cost tracking."}},"sourcesVisited":["https://github.com/IBM/mcp-context-forge","https://github.com/IBM/mcp-context-forge/releases","https://ibm.github.io/mcp-context-forge/","https://ibm.github.io/mcp-context-forge/latest/","https://newreleases.io/project/github/IBM/mcp-context-forge/release/v1.0.11","https://ibm.github.io/mcp-context-forge/latest/using/plugins/plugins/","https://ibm.github.io/mcp-context-forge/latest/manage/rbac/","https://ibm.github.io/mcp-context-forge/latest/manage/sso/","https://ibm.github.io/mcp-context-forge/latest/using/clients/llm-chat/","https://ibm.github.io/mcp-context-forge/latest/manage/securing/","https://ibm.github.io/mcp-context-forge/latest/manage/oauth/","https://ibm.github.io/mcp-context-forge/latest/using/clients/copilot/","https://ibm.github.io/mcp-context-forge/latest/using/clients/claude-desktop/","https://ibm.github.io/mcp-context-forge/latest/manage/observability/","https://ibm.github.io/mcp-context-forge/latest/architecture/security-features/"],"github":{"repo":"IBM/mcp-context-forge","url":"https://github.com/IBM/mcp-context-forge","license":"Apache-2.0","licenseSource":"https://github.com/IBM/mcp-context-forge/blob/main/LICENSE","stars":4649,"starsCheckedAt":"2026-10-19","selfHostMethod":"PyPI, Docker, Helm","selfHostSource":"https://github.com/IBM/mcp-context-forge#-quick-start---docker-compose"}},{"id":"merge","name":"Merge Agent Handler / Merge for Workforce / Merge Gateway","vendor":"Merge","url":"https://www.merge.dev","category":"integration-platform","frame":"direct","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"Hosted MCP tool platform (Agent Handler), employee AI governance (Workforce) and LLM router (Gateway) from the Merge unified-API company.","whereTheyWin":[{"text":"Bundles MCP tools, skills, an LLM gateway with per-team budgets, and an MDM-deployed desktop client that blocks unapproved MCP servers on the device, in one $15/user/month Workforce plan.","source":"https://www.merge.dev/pricing/workforce"},{"text":"Built-in DLP on tool-call payloads (standard entity rules plus custom regex) and an LLM-judged AI Guardrails layer that blocks planted instructions in tool arguments.","source":"https://docs.merge.dev/merge-workforce/overview"},{"text":"Established vendor with SOC 2 Type 2, ISO/IEC 27001:2022 and HIPAA listed on its trust center, plus an existing unified-API customer base to sell into.","source":"https://trust.merge.dev/"}],"company":{"founded":"2020","hq":"San Francisco (offices in San Francisco, New York, Berlin)","funding":"Series B of $55M announced (total not stated on site); backed by Accel, Addition, NEA","ownership":"Private, venture-backed; founders Shensi Ding and Gil Feig","source":"https://www.merge.dev/about"},"pricing":{"public":true,"model":"usage (Agent Handler credits) + per seat (Workforce) + usage markup (Gateway)","freeTier":"yes","plans":[{"name":"Agent Handler Free","price":"$0 / month","unit":"per org/month","includes":"2,000 monthly credits (1 credit = 1 tool call), unlimited registered users, unlimited tool packs, pre-built connectors","source":"https://www.merge.dev/pricing/agent-handler"},{"name":"Agent Handler Pro","price":"$1000 / month","unit":"per org/month, 25,000 credits/month base (selectable up to 100,000); overages billed end of month","includes":"Free features plus email support","source":"https://www.merge.dev/pricing/agent-handler"},{"name":"Agent Handler Enterprise","price":"Custom pricing","unit":"contract","includes":"On-prem/custom deployments, custom connectors, SIEM log streaming, FDE services, dedicated Slack","source":"https://www.merge.dev/pricing/agent-handler"},{"name":"Workforce Pro","price":"$15 / user / month","unit":"per user/month","includes":"MCP connectors, skills library, model routing and cost controls, Merge desktop client, SCIM provisioning","source":"https://www.merge.dev/pricing/workforce"},{"name":"Workforce Enterprise","price":"Custom pricing","unit":"contract","includes":"On-prem deployments, custom connectors, stream audit logs to SIEM, premium support","source":"https://www.merge.dev/pricing/workforce"},{"name":"Gateway","price":"5% markup on top of underlying provider costs","unit":"usage; BYOK at $0.05 per million tokens","includes":"LLM routing, spend caps by project/team/customer tier","source":"https://www.merge.dev/gateway"}],"extras":["Agent Handler overages billed at end of month (rate not published)","Workforce 'Universal context layer' is an add-on on Pro","Gateway BYOK usage billed at $0.05 per million tokens"],"source":"https://www.merge.dev/pricing/agent-handler"},"limits":[{"name":"Agent Handler Free tool calls","value":"2,000 per month; calls beyond limit return 402 until next cycle","source":"https://docs.merge.dev/merge-workforce/settings/billing"},{"name":"Per-user rate limit","value":"Per-Registered-User per-minute rate limit on MCP tool calls on every plan; not self-serve configurable","source":"https://docs.merge.dev/merge-agent-handler/resources/faq"},{"name":"Log retention","value":"90 days by default","source":"https://docs.merge.dev/merge-agent-handler/resources/faq"},{"name":"Default data region","value":"AWS US-East; EU/APAC residency on Enterprise","source":"https://docs.merge.dev/merge-agent-handler/resources/faq"}],"facts":{"catalogSize":{"value":"hundreds of connectors / thousands of tools (no exact count)","source":"https://docs.merge.dev/merge-agent-handler/connectors/overview","quote":"Your agents can call hundreds of connectors through Agent Handler.","note":"Marketing page says 'thousands of enterprise tools'."},"verifiedServers":{"value":"yes","source":"https://docs.merge.dev/merge-agent-handler/connectors/overview","quote":"built and tested by Merge","note":"Merge-built connectors are distinguished from generic connectors maintained by external vendors."},"byoMcpServer":{"value":"yes","source":"https://docs.merge.dev/merge-agent-handler/build/connecting-agents/custom-mcp-servers","quote":"from the dashboard or from the API","note":"Remote server must be at a public HTTPS URL; OAuth 2.0 for custom servers must be enabled by Merge per org."},"remoteMcpServers":{"value":"yes","source":"https://docs.merge.dev/merge-agent-handler/build/connecting-agents/custom-mcp-servers","quote":"from the dashboard or from the API","note":"Must be reachable at a public HTTPS URL."},"localOrDockerServers":{"value":"no","source":"https://docs.merge.dev/merge-agent-handler/build/connecting-agents/custom-mcp-servers","quote":"CLI-launched servers (`npx <package>`) need to run on the same machine as the agent.","note":"Agent Handler is server-side and cannot reach stdio servers."},"singleUrlAllTools":{"value":"yes","source":"https://docs.merge.dev/merge-workforce/overview","quote":"One MCP endpoint, one SSO sign-in.","note":"Workforce. In Agent Handler each tool pack has its own MCP URL per registered user."},"versionPinning":{"value":"not-published","source":null,"quote":null},"schemaChangeMonitoring":{"value":"not-published","source":null,"quote":null},"worksInClaude":{"value":"yes","source":"https://www.merge.dev/merge-agent-handler","quote":"Install Agent Handler as a remote MCP server for Claude, Claude Code, Cursor, ChatGPT"},"worksInClaudeCode":{"value":"yes","source":"https://www.merge.dev/merge-agent-handler","quote":"Install Agent Handler as a remote MCP server for Claude, Claude Code, Cursor, ChatGPT"},"worksInChatGPT":{"value":"yes","source":"https://www.merge.dev/merge-agent-handler","quote":"Install Agent Handler as a remote MCP server for Claude, Claude Code, Cursor, ChatGPT"},"worksInCursor":{"value":"yes","source":"https://www.merge.dev/merge-agent-handler","quote":"Install Agent Handler as a remote MCP server for Claude, Claude Code, Cursor, ChatGPT"},"worksInCodex":{"value":"yes","source":"https://docs.merge.dev/merge-workforce/rollout/employee-clients","quote":"Claude Code, Codex, and Gemini CLI can each receive the endpoint through their own enterprise policy layer."},"worksInCopilot":{"value":"yes","source":"https://www.merge.dev/workforce","quote":"Merge works with Claude, ChatGPT, Cursor, Copilot, or anything your team adopts next","note":"Agent Handler docs also have an 'Integrating with Copilot Studio' guide."},"customAgentsSdk":{"value":"yes","source":"https://www.merge.dev/merge-agent-handler","quote":"Agent Handler is built on MCP and works with any agent framework."},"ownChatUiRequired":{"value":"no","source":"https://docs.merge.dev/merge-workforce/overview","quote":"Employees keep the tools they have (Claude, ChatGPT, Cursor, Claude Code)."},"perUserOAuth":{"value":"yes","source":"https://docs.merge.dev/merge-agent-handler/resources/faq","quote":"A tool call always runs against the credentials of exactly one Registered User."},"managedOAuthApps":{"value":"yes","source":"https://docs.merge.dev/merge-agent-handler/resources/faq","quote":"To switch to your own branding, register your OAuth app with the third party and add the credentials to Agent Handler.","note":"Implies Merge-branded OAuth apps by default; BYO app optional."},"byoOAuthApp":{"value":"yes","source":"https://docs.merge.dev/merge-agent-handler/resources/faq","quote":"To switch to your own branding, register your OAuth app with the third party and add the credentials to Agent Handler."},"sso":{"value":"yes","source":"https://docs.merge.dev/merge-workforce/provisioning/sso","quote":"The flow is the same for every OIDC-compliant IdP","note":"OIDC only; SAML not mentioned. Okta setup documented; Entra and Google Workspace listed."},"scim":{"value":"yes","source":"https://www.merge.dev/pricing/workforce","quote":"SCIM-based provisioning","note":"Included in Workforce Pro."},"roleBasedToolAccess":{"value":"yes","source":"https://docs.merge.dev/merge-workforce/overview","quote":"Assigns Tool Packs to Groups, with overrides for the people a Group does not fit."},"toolLevelAllowDeny":{"value":"yes","source":"https://docs.merge.dev/merge-agent-handler/build/tools/tool-packs","quote":"For each Connector, pick the specific tools you want the agent to see."},"readOnlyModes":{"value":"not-published","source":null,"quote":null},"auditLogPerPerson":{"value":"yes","source":"https://www.merge.dev/workforce","quote":"Every call is attributed to a person, a team, and a model, with cost attached."},"callTracing":{"value":"yes","source":"https://www.merge.dev/pricing/agent-handler","quote":"a full audit trail of every tool call"},"logExportSiem":{"value":"partial","source":"https://www.merge.dev/pricing/workforce","quote":"Stream audit logs to your SIEM","note":"Enterprise plan only (Agent Handler and Workforce)."},"dlpRedaction":{"value":"yes","source":"https://www.merge.dev/merge-agent-handler","quote":"policy-based guardrails that block, redact, or mask sensitive data before it reaches a model","note":"Workforce AI Guardrails docs say there is no redact action for guardrail verdicts (Block/Log only); DLP rules flag or block."},"promptInjectionDetection":{"value":"yes","source":"https://docs.merge.dev/merge-workforce/security/ai-guardrails","quote":"an instruction planted in a tool argument is judged rather than obeyed","note":"LLM-evaluated guardrail; term 'prompt injection' not used."},"toolPoisoningProtection":{"value":"partial","source":"https://www.merge.dev/workforce","quote":"applies policy on the device to block unapproved models and MCP servers","note":"Blocks unapproved MCP servers on device; no explicit tool-description poisoning detection published."},"skillsAuthoring":{"value":"yes","source":"https://docs.merge.dev/merge-workforce/skills/publishing-skills","quote":"Drop in a `SKILL.md`, or a zip bundle with `SKILL.md` at its root.","note":"Manual dashboard upload with review workflow."},"skillsGitSync":{"value":"not-published","source":null,"quote":null,"note":"Publishing docs describe manual upload only; no Git sync mentioned."},"skillsByRole":{"value":"yes","source":"https://docs.merge.dev/merge-workforce/skills/publishing-skills","quote":"Selected provisioning groups","note":"Scoped to SCIM-provisioned groups, whole org, or author only."},"skillsOverMcp":{"value":"yes","source":"https://docs.merge.dev/merge-workforce/skills/how-agents-load-skills","quote":"reaches skills through the same MCP endpoint it already uses for tools","note":"list_skills / retrieve_skill tools; must be enabled by Merge per org."},"openSource":{"value":"not-published","source":null,"quote":null,"note":"No public source repository found; hosted proprietary SaaS."},"selfHost":{"value":"partial","source":"https://www.merge.dev/pricing/agent-handler","quote":"Custom deployments, including on-prem","note":"Enterprise plan only."},"vpcOnPrem":{"value":"partial","source":"https://www.merge.dev/pricing/agent-handler","quote":"Custom deployment (On-prem, mVPC, etc.)","note":"Enterprise only; FAQ also mentions single-tenant instances and VPC peering."},"airGapped":{"value":"not-published","source":null,"quote":null},"euRegion":{"value":"partial","source":"https://docs.merge.dev/merge-agent-handler/resources/faq","quote":"Enterprise contracts can include single-tenant instances, regional residency (EU, APAC), and VPC peering.","note":"Standard plans hosted in AWS US-East."},"soc2Type2":{"value":"yes","source":"https://trust.merge.dev/","quote":"SOC 2 Type 2"},"iso27001":{"value":"yes","source":"https://trust.merge.dev/","quote":"ISO/IEC 27001:2022"},"hipaa":{"value":"yes","source":"https://trust.merge.dev/","quote":"HIPAA","note":"Listed under compliance on the trust center."},"gdprDpa":{"value":"yes","source":"https://trust.merge.dev/","quote":"GDPR"},"publicPricing":{"value":"yes","source":"https://www.merge.dev/pricing/workforce","quote":"$15 / user / month"},"freeTier":{"value":"yes","source":"https://www.merge.dev/pricing/agent-handler","quote":"2,000 monthly credits","note":"Agent Handler Free at $0/month; FAQ says free plan is for evaluation."},"startingPrice":{"value":"$15/user/month (Workforce Pro); $1000/month (Agent Handler Pro)","source":"https://www.merge.dev/pricing/workforce","quote":"$15 / user / month"},"pricingModel":{"value":"Per seat for Workforce; credit-based usage (1 credit per tool call) for Agent Handler; 5% markup for Gateway","source":"https://docs.merge.dev/merge-agent-handler/resources/faq","quote":"Billing runs on credits, one credit per tool call."},"llmGateway":{"value":"yes","source":"https://www.merge.dev/gateway","quote":"Access all LLMs through a single API, with intelligent routing, cost management, and security built-in."},"costTrackingPerPerson":{"value":"yes","source":"https://www.merge.dev/workforce","quote":"Every call is attributed to a person, a team, and a model, with cost attached.","note":"Gateway page itself attributes spend to model, provider and team."}},"sourcesVisited":["https://www.merge.dev/merge-agent-handler","https://docs.merge.dev/merge-agent-handler/resources/faq","https://merge.dev/agent-handler","https://www.merge.dev/pricing/agent-handler","https://www.merge.dev/pricing/agent-handler#workforce","https://www.merge.dev/workforce","https://www.merge.dev/pricing/workforce","https://docs.merge.dev/merge-workforce/overview","https://docs.merge.dev/merge-workforce/settings/billing","https://docs.merge.dev/merge-workforce/security/ai-guardrails","https://docs.merge.dev/merge-workforce/rollout/employee-clients","https://docs.merge.dev/merge-agent-handler/connectors/overview","https://trust.merge.dev/","https://docs.merge.dev/merge-workforce/skills/publishing-skills","https://docs.merge.dev/merge-workforce/skills/how-agents-load-skills","https://docs.merge.dev/merge-workforce/provisioning/sso","https://www.merge.dev/gateway","https://www.merge.dev/about","https://docs.merge.dev/merge-agent-handler/overview","https://docs.merge.dev/merge-agent-handler/build/connecting-agents/custom-mcp-servers","https://docs.merge.dev/merge-agent-handler/administer/managing-tool-access","https://docs.merge.dev/merge-agent-handler/build/tools/tool-packs"]},{"id":"microsoft-agent-365","name":"Microsoft Agent 365 + Copilot Studio (MCP support)","vendor":"Microsoft","url":"https://www.microsoft.com/en-us/microsoft-365-copilot/microsoft-copilot-studio","category":"platform-lab","frame":"different-client","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"Microsoft's agent control plane (registry, Entra, Purview, Defender) plus Copilot Studio agent builder that consumes MCP servers.","whereTheyWin":[{"text":"Already inside the Microsoft 365 tenant: Agent 365 ties agents to Entra access controls, Purview DLP and Defender threat detection, which security teams already run and trust.","source":"https://learn.microsoft.com/en-us/microsoft-agent-365/overview"},{"text":"Bundled into Microsoft 365 E7 ($99/user/month) or $15/user/month standalone, with no consumption charges for Agent 365 today, so it often arrives with an existing EA.","source":"https://www.microsoft.com/licensing/faqs/122"},{"text":"Discovers unmanaged local agents on Windows devices via Defender and Intune and syncs cloud agents from AWS Bedrock and Google Cloud into one registry.","source":"https://www.microsoft.com/en-us/security/blog/2026/05/01/microsoft-agent-365-now-generally-available-expands-capabilities-and-integrations/"}],"company":{"founded":"1975","hq":"Redmond, Washington, US","funding":"Public company","ownership":"Public (NASDAQ: MSFT)","source":null},"pricing":{"public":true,"model":"per seat (Agent 365, M365 Copilot) + usage/credits (Copilot Studio)","freeTier":"no","plans":[{"name":"Microsoft Agent 365 (standalone)","price":"$15/user/mo","unit":"per user/month list price; requires M365 E3/E5 + Defender Suite + Purview Suite (or equivalents)","includes":"Agent registry, observability, governance and security controls for all agents associated with that user","source":"https://www.microsoft.com/licensing/faqs/122"},{"name":"Microsoft 365 E7 (includes Agent 365)","price":"$99/user/mo","unit":"per user/month list price","includes":"Agent 365 bundled in E7 license","source":"https://www.microsoft.com/licensing/faqs/122"},{"name":"Microsoft 365 Copilot","price":"$30.00 per user","unit":"per user/month, billed yearly","includes":"Copilot Studio agents for Teams, SharePoint and M365 Copilot at no additional charge (fair use)","source":"https://www.microsoft.com/en-us/microsoft-365-copilot/microsoft-copilot-studio"},{"name":"Copilot Studio capacity pack","price":"$200 per pack","unit":"per month, billed annually; 25,000 Copilot Credits; unused credits don't roll over","includes":"Copilot Credits for agent usage","source":"https://www.microsoft.com/licensing/guidance/Microsoft-Copilot-Studio"},{"name":"Copilot Studio pay-as-you-go","price":"$0.01 per Copilot Credit","unit":"usage, billed in arrears monthly","includes":"Metered agent usage","source":"https://www.microsoft.com/licensing/guidance/Microsoft-Copilot-Studio"}],"extras":["Copilot Credit Pre-Purchase Plan: 1 CCCU = $1 = 100 credits, tiers from 3,000 CCCUs for $2,850 (5% off) to 3,000,000 for $2,400,000 (20% off)","Microsoft Agent Pre-Purchase Plan (also covers Foundry): 20,000 ACUs for $19,000 up to 500,000 for $425,000","Agent 365 prerequisites: M365 E3/E5 plus Defender Suite and Purview Suite (enterprise)"],"source":"https://www.microsoft.com/licensing/faqs/122"},"limits":[{"name":"Copilot Studio MCP transport","value":"Streamable HTTP only; SSE dropped after August 2025; stdio not mentioned","source":"https://learn.microsoft.com/microsoft-copilot-studio/mcp-add-existing-server-to-agent"},{"name":"Copilot Studio MCP prerequisite","value":"Generative orchestration must be on; supports MCP tools and resources (not prompts)","source":"https://learn.microsoft.com/en-us/microsoft-copilot-studio/agent-extend-action-mcp"},{"name":"Declarative agent custom skills","value":"Max 8 skills per agent; SKILL.md instructions under 20,000 characters; Frontier Preview only","source":"https://learn.microsoft.com/en-us/microsoft-365/copilot/extensibility/declarative-agent-skills"},{"name":"Agent 365 eligibility","value":"Users without prerequisites (e.g. ME3 + Copilot only) are not eligible","source":"https://www.microsoft.com/licensing/faqs/122"}],"facts":{"catalogSize":{"value":"1,400+ connectors (Copilot Studio / Power Platform)","source":"https://www.microsoft.com/en-us/microsoft-365-copilot/microsoft-copilot-studio","quote":"more than 1,400 external connectors","note":"Power Platform connectors, not MCP servers. Microsoft's own M365 MCP access is via Work IQ MCP (single endpoint, 10 generic tools)."},"verifiedServers":{"value":"yes","source":"https://learn.microsoft.com/microsoft-agent-365/tooling-servers-overview","quote":"A single MCP endpoint with 10 generic tools.","note":"Microsoft-published Work IQ MCP (GA); admin Registry filters by publisher (Microsoft vs others). Legacy per-workload servers are preview and not for production."},"byoMcpServer":{"value":"yes","source":"https://learn.microsoft.com/microsoft-agent-365/developer/tooling","quote":"allows you to register your own external MCP servers with Microsoft Agent 365 so they can be centrally governed, approved, and monitored","note":"Copilot Studio also connects to any existing MCP server via wizard."},"remoteMcpServers":{"value":"yes","source":"https://learn.microsoft.com/microsoft-copilot-studio/mcp-add-existing-server-to-agent","quote":"Currently, Copilot Studio supports the Streamable transport type."},"localOrDockerServers":{"value":"not-published","source":null,"quote":null,"note":"Copilot Studio docs mention only Streamable transport; stdio not mentioned."},"singleUrlAllTools":{"value":"partial","source":"https://learn.microsoft.com/microsoft-agent-365/developer/tooling","quote":"It routes these servers through the Agent 365 tooling gateway, giving admins control over approval, access, and policies","note":"Tooling gateway routes servers for Microsoft agents; not documented as one MCP URL usable from third-party clients. Work IQ MCP is one endpoint for M365 data only."},"versionPinning":{"value":"not-published","source":null,"quote":null},"schemaChangeMonitoring":{"value":"no","source":"https://learn.microsoft.com/en-us/microsoft-copilot-studio/agent-extend-action-mcp","quote":"Each tool or resource that a connected MCP server publishes is automatically available for use in Copilot Studio.","note":"Server-side tool changes are reflected automatically; no change review documented."},"worksInClaude":{"value":"not-published","source":null,"quote":null,"note":"Agent 365 governs Microsoft and partner agents; no docs for using its tooling gateway from Claude."},"worksInClaudeCode":{"value":"roadmap","source":"https://www.microsoft.com/en-us/security/blog/2026/05/01/microsoft-agent-365-now-generally-available-expands-capabilities-and-integrations/","quote":"other widely used agents like GitHub Copilot CLI and Claude Code","note":"Planned local agent discovery/governance, not tool delivery."},"worksInChatGPT":{"value":"not-published","source":null,"quote":null},"worksInCursor":{"value":"not-published","source":null,"quote":null},"worksInCodex":{"value":"not-published","source":null,"quote":null},"worksInCopilot":{"value":"yes","source":"https://www.microsoft.com/en-us/microsoft-365-copilot/microsoft-copilot-studio","quote":"such as Microsoft Teams, SharePoint, and Microsoft 365 Copilot"},"customAgentsSdk":{"value":"yes","source":"https://learn.microsoft.com/microsoft-agent-365/developer/tooling","quote":"The Tooling module helps developers discover, configure, and integrate Model Context Protocol (MCP) servers into AI agent workflows."},"ownChatUiRequired":{"value":"yes","source":"https://www.microsoft.com/en-us/microsoft-365-copilot/microsoft-copilot-studio","quote":"such as Microsoft Teams, SharePoint, and Microsoft 365 Copilot","note":"Copilot Studio agents run in Microsoft surfaces (Teams, M365 Copilot) or embedded web/social channels, not in Claude/ChatGPT/Cursor."},"perUserOAuth":{"value":"yes","source":"https://learn.microsoft.com/microsoft-copilot-studio/mcp-add-existing-server-to-agent","quote":"OAuth 2.0 lets individual users authenticate with the server and grant permissions to your application (agent) without sharing their credentials.","note":"Agent 365 tooling also supports On-Behalf-Of delegated user tokens."},"managedOAuthApps":{"value":"partial","source":"https://learn.microsoft.com/microsoft-copilot-studio/mcp-add-existing-server-to-agent","quote":"Select this option if your MCP server supports the OAuth 2.0 dynamic client registration (DCR) with discovery mechanism.","note":"Prebuilt Power Platform connectors handle auth; for MCP, DCR or manual OAuth config."},"byoOAuthApp":{"value":"yes","source":"https://learn.microsoft.com/microsoft-copilot-studio/mcp-add-existing-server-to-agent","quote":"Select this option if your MCP server requires manual configuration of OAuth 2.0 settings."},"sso":{"value":"yes","source":"https://learn.microsoft.com/en-us/microsoft-agent-365/overview","quote":"Microsoft Entra enforces consistent, risk‑based access controls for users and agents acting on their behalf","note":"Entra ID native; third-party IdPs not covered."},"scim":{"value":"not-published","source":null,"quote":null,"note":"Users come from Entra ID directly; SCIM not applicable/not documented for these products."},"roleBasedToolAccess":{"value":"not-published","source":null,"quote":null,"note":"Block/Unblock on the Tools page has no per-group scoping documented. Copilot publishing can target users/groups."},"toolLevelAllowDeny":{"value":"partial","source":"https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-tools-for-agent","quote":"Block: Prevents the selected tool from being used by agents or workflows","note":"Admin center Tools Registry with Requests tab for approval; per-user/group scoping not documented."},"readOnlyModes":{"value":"not-published","source":null,"quote":null},"auditLogPerPerson":{"value":"partial","source":"https://learn.microsoft.com/en-us/microsoft-agent-365/overview","quote":"Microsoft Agent 365 gives organizations real-time visibility into their agentic environment","note":"Observability per agent; per-person tool-call audit not documented."},"callTracing":{"value":"yes","source":"https://learn.microsoft.com/microsoft-agent-365/developer/tooling","quote":"enabling security teams to track usage through telemetry"},"logExportSiem":{"value":"not-published","source":null,"quote":null},"dlpRedaction":{"value":"yes","source":"https://learn.microsoft.com/en-us/microsoft-agent-365/overview","quote":"Microsoft Purview provides deep visibility into data risks with information protection, DLP, and risk safeguards.","note":"Purview Suite is a prerequisite. Copilot Studio Power Platform data policies also govern MCP connectors."},"promptInjectionDetection":{"value":"not-published","source":null,"quote":null,"note":"Defender 'real-time protection to block unsafe behaviors' is stated; prompt injection not named."},"toolPoisoningProtection":{"value":"not-published","source":null,"quote":null},"skillsAuthoring":{"value":"partial","source":"https://learn.microsoft.com/en-us/microsoft-365/copilot/extensibility/declarative-agent-skills","quote":"Custom skills in declarative agents are in preview for organizations that are part of the Microsoft Frontier Preview.","note":"SKILL.md-based, uploaded via Agent Builder (.zip) or Agents Toolkit; max 8 per agent."},"skillsGitSync":{"value":"not-published","source":null,"quote":null},"skillsByRole":{"value":"not-published","source":null,"quote":null,"note":"Skills attach per declarative agent; 'Reuse across agents: Not supported at this stage of the preview'."},"skillsOverMcp":{"value":"not-published","source":null,"quote":null},"openSource":{"value":"not-published","source":null,"quote":null,"note":"Proprietary Microsoft cloud services."},"selfHost":{"value":"not-published","source":null,"quote":null,"note":"SaaS only; no self-hosted option found."},"vpcOnPrem":{"value":"not-published","source":null,"quote":null},"airGapped":{"value":"not-published","source":null,"quote":null},"euRegion":{"value":"not-published","source":null,"quote":null},"soc2Type2":{"value":"partial","source":"https://learn.microsoft.com/microsoft-copilot-studio/admin-certification","quote":"System and Organization Controls (SOC)","note":"Copilot Studio; SOC type not specified."},"iso27001":{"value":"yes","source":"https://learn.microsoft.com/microsoft-copilot-studio/admin-certification","quote":"Various International Organization for Standardization (ISO) certifications","note":"Table lists ISO 27001:2013 for Copilot Studio."},"hipaa":{"value":"yes","source":"https://learn.microsoft.com/microsoft-copilot-studio/admin-certification","quote":"Health Insurance Portability and Accountability Act (HIPAA) coverage","note":"Copilot Studio."},"gdprDpa":{"value":"not-published","source":null,"quote":null,"note":"Microsoft Products and Services DPA exists generally."},"publicPricing":{"value":"yes","source":"https://www.microsoft.com/licensing/faqs/122","quote":"It can also be available standalone license with list price at $15/user/mo."},"freeTier":{"value":"no","source":"https://www.microsoft.com/licensing/faqs/122","quote":"Agent 365 is not included in M365 E3/E5 licenses.","note":"Copilot Studio has a free trial only."},"startingPrice":{"value":"$15/user/month (Agent 365 standalone, on top of M365 E3/E5 + Defender + Purview); $99/user/month for M365 E7","source":"https://www.microsoft.com/licensing/faqs/122","quote":"Agent 365 is available in the Microsoft 365 E7 license with list price $99/user/mo."},"pricingModel":{"value":"Per user (Agent 365, M365 Copilot) plus Copilot Credits for Copilot Studio usage","source":"https://www.microsoft.com/licensing/faqs/122","quote":"Agent 365 is licensed per user, whether purchased as part of Microsoft 365 E7 or as a standalone offering."},"llmGateway":{"value":"not-published","source":null,"quote":null,"note":"Azure API Management offers an AI gateway separately; not part of Agent 365/Copilot Studio."},"costTrackingPerPerson":{"value":"not-published","source":null,"quote":null}},"sourcesVisited":["https://www.microsoft.com/licensing/faqs/122","https://learn.microsoft.com/microsoft-agent-365/developer/tooling","https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-tools-for-agent","https://www.microsoft.com/en-us/security/blog/2026/05/01/microsoft-agent-365-now-generally-available-expands-capabilities-and-integrations/","https://techcommunity.microsoft.com/blog/agent-365-blog/whats-new-in-agent-365-%E2%80%93-june-2026/4535107","https://learn.microsoft.com/en-us/microsoft-copilot-studio/agent-extend-action-mcp","https://www.microsoft.com/licensing/guidance/Microsoft-Copilot-Studio","https://learn.microsoft.com/microsoft-agent-365/tooling-servers-overview","https://learn.microsoft.com/en-us/microsoft-365-copilot/extensibility/work-iq/mcp/overview","https://www.microsoft.com/en-us/microsoft-365-copilot/microsoft-copilot-studio","https://learn.microsoft.com/en-us/microsoft-agent-365/overview","https://learn.microsoft.com/microsoft-copilot-studio/mcp-add-existing-server-to-agent","https://learn.microsoft.com/en-us/microsoftteams/platform/m365-apps/agent-connectors","https://learn.microsoft.com/microsoft-copilot-studio/admin-certification","https://learn.microsoft.com/en-us/microsoft-365/copilot/extensibility/declarative-agent-skills"]},{"id":"microsoft-mcp-gateway","name":"Microsoft MCP Gateway / Azure API Management MCP","vendor":"Microsoft","url":"https://github.com/microsoft/mcp-gateway","category":"mcp-gateway","frame":"direct","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"MIT-licensed Kubernetes MCP reverse proxy, plus Azure API Management exposing REST APIs and MCP servers as governed MCP endpoints.","whereTheyWin":[{"text":"Azure API Management turns any REST API already managed in APIM into an MCP server, with existing APIM policies (rate limits, quotas, IP filtering, JWT validation) applied to tool calls.","source":"https://learn.microsoft.com/en-us/azure/api-management/mcp-server-overview"},{"text":"Same APIM instance doubles as an AI/LLM gateway: token limits per consumer, token metrics in Application Insights, semantic caching, Azure AI Content Safety moderation.","source":"https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities"},{"text":"Native Microsoft Entra ID auth and Azure API Center as a private MCP registry fit Microsoft-standardized enterprises with no new vendor procurement.","source":"https://learn.microsoft.com/en-us/azure/api-management/mcp-server-overview"}],"company":{"founded":"1975","hq":"Redmond, WA","funding":"Public company (NASDAQ: MSFT)","ownership":"Microsoft; microsoft/mcp-gateway is an MIT-licensed open-source repo, APIM is a paid Azure service","source":null},"pricing":{"public":true,"model":"Open-source gateway: free (self-hosted on Kubernetes/AKS). APIM: Azure tier-based (per unit/month) plus usage on Consumption and v2 overages","freeTier":"yes","plans":[{"name":"microsoft/mcp-gateway (open source)","price":"$0","unit":"self-hosted; you pay AKS/Azure infra","includes":"Reverse proxy, tool router, Entra ID auth with app roles","source":"https://github.com/microsoft/mcp-gateway"},{"name":"APIM Consumption","price":"0-1 million API operations per subscription included","unit":"usage, per 10,000 operations beyond free amount (price not rendered on page)","includes":"Free first 1M operations; MCP support not listed for Consumption tier","source":"https://azure.microsoft.com/en-us/pricing/details/api-management/"},{"name":"APIM Basic v2","price":"not captured (rendered dynamically)","unit":"per unit/month","includes":"10M API requests/month included; MCP-supported tier","source":"https://azure.microsoft.com/en-us/pricing/details/api-management/"},{"name":"APIM Standard v2","price":"not captured (rendered dynamically)","unit":"per unit/month","includes":"50M API requests/month included; MCP-supported tier","source":"https://azure.microsoft.com/en-us/pricing/details/api-management/"},{"name":"APIM Premium v2","price":"not captured (rendered dynamically)","unit":"per unit/month","includes":"Unlimited API requests included; MCP-supported tier","source":"https://azure.microsoft.com/en-us/pricing/details/api-management/"},{"name":"APIM classic Developer / Basic / Standard / Premium","price":"not captured (rendered dynamically)","unit":"per unit/month","includes":"MCP-supported classic tiers","source":"https://azure.microsoft.com/en-us/pricing/details/api-management/"}],"extras":["Basic v2 / Standard v2: charge per additional 1M API requests over included amount","Premium: incremental units charged at 50% of first unit","AI Gateway tier: 'Pricing details are coming soon!'"],"source":"https://azure.microsoft.com/en-us/pricing/details/api-management/"},"limits":[{"name":"MCP primitives (APIM, REST-as-MCP)","value":"Tools only; no MCP resources or prompts","source":"https://learn.microsoft.com/en-us/azure/api-management/mcp-server-overview"},{"name":"MCP primitives (APIM, external MCP passthrough)","value":"Tools and resources; no prompts; external server must be MCP 2025-06-18 or later","source":"https://docs.azure.cn/ja-jp/api-management/expose-existing-mcp-server"},{"name":"APIM workspaces","value":"MCP server capabilities not supported in workspaces","source":"https://learn.microsoft.com/en-us/azure/api-management/mcp-server-overview"},{"name":"APIM policy scope","value":"Policies apply to all API operations exposed as tools in an MCP server","source":"https://learn.microsoft.com/en-us/azure/api-management/mcp-server-overview"},{"name":"microsoft/mcp-gateway Agents and Sessions","value":"Preview / single-replica, for evaluation and single-pod deployments","source":"https://github.com/microsoft/mcp-gateway"},{"name":"microsoft/mcp-gateway client protocol","value":"Requires MCP 2026-07-28 clients and adapters","source":"https://github.com/microsoft/mcp-gateway"}],"facts":{"catalogSize":{"value":"No pre-built integration catalog; you expose your own APIs/servers and register them in Azure API Center","source":"https://learn.microsoft.com/en-us/azure/api-management/mcp-server-overview","quote":"Use Azure API Center to register and discover MCP servers in your organization."},"verifiedServers":{"value":"not-published","source":null,"quote":null},"byoMcpServer":{"value":"yes","source":"https://learn.microsoft.com/en-us/azure/api-management/mcp-server-overview","quote":"Expose an MCP-compatible server (for example, LangChain, LangServe, Azure Logic Apps, Azure Functions) via API Management."},"remoteMcpServers":{"value":"yes","source":"https://learn.microsoft.com/en-us/azure/api-management/mcp-server-overview","quote":"Azure API Management supports the remote MCP server mode."},"localOrDockerServers":{"value":"partial","source":"https://github.com/microsoft/mcp-gateway","quote":"Support for Proxying Local & Remote MCP Servers","note":"microsoft/mcp-gateway runs MCP servers as containers on Kubernetes (streamable HTTP); stdio not mentioned. APIM supports remote only."},"singleUrlAllTools":{"value":"partial","source":"https://github.com/microsoft/mcp-gateway","quote":"An MCP server that directs tool execution requests to registered tool servers.","note":"OSS gateway's tool router gives one endpoint over registered tools; APIM exposes one MCP endpoint per MCP server resource."},"versionPinning":{"value":"not-published","source":null,"quote":null},"schemaChangeMonitoring":{"value":"not-published","source":null,"quote":null,"note":"APIM docs recommend generating tools from OpenAPI to stay in sync; no change monitoring described."},"worksInClaude":{"value":"yes","source":"https://learn.microsoft.com/en-us/azure/api-management/mcp-server-overview","quote":"for LLMs and AI agents like GitHub Copilot, ChatGPT, Claude, and more.","note":"Named as an example, not a documented setup guide."},"worksInClaudeCode":{"value":"not-published","source":null,"quote":null},"worksInChatGPT":{"value":"yes","source":"https://learn.microsoft.com/en-us/azure/api-management/mcp-server-overview","quote":"for LLMs and AI agents like GitHub Copilot, ChatGPT, Claude, and more.","note":"Named as an example, not a documented setup guide."},"worksInCursor":{"value":"not-published","source":null,"quote":null},"worksInCodex":{"value":"not-published","source":null,"quote":null},"worksInCopilot":{"value":"yes","source":"https://learn.microsoft.com/en-us/azure/api-management/mcp-server-overview","quote":"like GitHub Copilot in Visual Studio Code."},"customAgentsSdk":{"value":"yes","source":"https://docs.azure.cn/ja-jp/api-management/expose-existing-mcp-server","quote":"To test an MCP server, you can use Visual Studio Code with GitHub Copilot or tools such as the MCP Inspector.","note":"Page also lists Semantic Kernel and Copilot Studio as clients (quote translated from the zh-CN page)."},"ownChatUiRequired":{"value":"no","source":"https://learn.microsoft.com/en-us/azure/api-management/mcp-server-overview","quote":"for LLMs and AI agents like GitHub Copilot, ChatGPT, Claude, and more."},"perUserOAuth":{"value":"partial","source":"https://learn.microsoft.com/azure/api-management/credentials-overview","quote":"you can enable access to a connection on behalf of a Microsoft Entra user or group identity.","note":"APIM credential manager supports user-delegated connections; MCP docs only describe injecting backend OAuth tokens, not a per-user consent flow for MCP tools."},"managedOAuthApps":{"value":"not-published","source":null,"quote":null,"note":"Credential manager docs imply you supply your own client secret per provider."},"byoOAuthApp":{"value":"yes","source":"https://learn.microsoft.com/azure/api-management/credentials-overview","quote":"If the connection is of type authorization code, the client secret needs to be updated on credential provider level."},"sso":{"value":"yes","source":"https://learn.microsoft.com/azure/api-management/secure-mcp-servers","quote":"MCP clients can present OAuth tokens or JWTs issued by Microsoft Entra ID by using an Authorization header and validated by API Management."},"scim":{"value":"not-published","source":null,"quote":null},"roleBasedToolAccess":{"value":"partial","source":"https://github.com/microsoft/mcp-gateway","quote":"The gateway provides entra id authentication and basic application role authorization for mcp servers and tools","note":"OSS gateway: Entra app roles (mcp.admin, requiredRoles like mcp.engineer). Fine-grained RBAC/ACLs listed as production to-do."},"toolLevelAllowDeny":{"value":"partial","source":"https://learn.microsoft.com/en-my/azUre/api-management/manage-mcp-servers-rest-api","quote":"You can add, rename, or remove tools without recreating the MCP server.","note":"Admins choose which API operations become tools; APIM policies apply to all tools in a server, not per tool per user."},"readOnlyModes":{"value":"not-published","source":null,"quote":null},"auditLogPerPerson":{"value":"not-published","source":null,"quote":null,"note":"Azure Monitor / Application Insights logging exists for APIM generally, but MCP docs do not describe per-person tool-call audit."},"callTracing":{"value":"partial","source":"https://github.com/microsoft/mcp-gateway","quote":"Enable advanced telemetry, detailed metrics, and alerts to support monitoring and troubleshooting in production.","note":"Listed in the OSS repo's production checklist; Application Insights provisioned in Azure deployment."},"logExportSiem":{"value":"not-published","source":null,"quote":null},"dlpRedaction":{"value":"not-published","source":null,"quote":null},"promptInjectionDetection":{"value":"partial","source":"https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities","quote":"Apply policies to automatically moderate LLM prompts by using Azure AI Content Safety.","note":"Applies to LLM APIs in APIM's AI gateway, not documented for MCP tool traffic."},"toolPoisoningProtection":{"value":"not-published","source":null,"quote":null},"skillsAuthoring":{"value":"not-published","source":null,"quote":null},"skillsGitSync":{"value":"not-published","source":null,"quote":null},"skillsByRole":{"value":"not-published","source":null,"quote":null},"skillsOverMcp":{"value":"not-published","source":null,"quote":null},"openSource":{"value":"MIT (microsoft/mcp-gateway); APIM is proprietary Azure service","source":"https://github.com/microsoft/mcp-gateway","quote":"MCP Gateway is a reverse proxy and management layer for MCP servers."},"selfHost":{"value":"yes","source":"https://learn.microsoft.com/en-us/azure/api-management/mcp-server-overview","quote":"You can also use the API Management self-hosted gateway to manage MCP servers in your own infrastructure.","note":"OSS gateway also self-hosts on Kubernetes (local Docker Desktop or AKS)."},"vpcOnPrem":{"value":"yes","source":"https://learn.microsoft.com/en-us/azure/api-management/mcp-server-overview","quote":"You can also use the API Management self-hosted gateway to manage MCP servers in your own infrastructure."},"airGapped":{"value":"not-published","source":null,"quote":null},"euRegion":{"value":"not-published","source":null,"quote":null,"note":"APIM is available in Azure EU regions generally."},"soc2Type2":{"value":"yes","source":"https://learn.microsoft.com/azure/compliance/offerings/offering-soc-2","quote":"Microsoft Azure, Dynamics 365, and other Microsoft cloud services undergo rigorous independent third-party SOC 2 Type 2 audits","note":"Azure-wide attestation; APIM-specific scope listed in the audit-scope appendix, which was not readable. Does not apply to self-hosted OSS gateway."},"iso27001":{"value":"not-published","source":null,"quote":null,"note":"Azure holds ISO 27001 broadly."},"hipaa":{"value":"not-published","source":null,"quote":null},"gdprDpa":{"value":"not-published","source":null,"quote":null},"publicPricing":{"value":"yes","source":"https://azure.microsoft.com/en-us/pricing/details/api-management/","quote":"0-1 million API operations per subscription - Included","note":"APIM pricing page is public but prices render dynamically; AI Gateway tier says 'Pricing details are coming soon!'"},"freeTier":{"value":"yes","source":"https://azure.microsoft.com/en-us/pricing/details/api-management/","quote":"0-1 million API operations per subscription - Included","note":"Consumption tier free allowance, but Consumption is not in the MCP-supported tier list. OSS gateway is free."},"startingPrice":{"value":"$0 for OSS gateway (plus infra); APIM MCP-capable tiers start at Developer / Basic v2 (price not captured)","source":"https://learn.microsoft.com/en-us/azure/api-management/mcp-server-overview","quote":"Classic tiers: Developer, Basic, Standard, Premium"},"pricingModel":{"value":"Azure consumption: per APIM unit/month plus request overages; OSS free","source":"https://azure.microsoft.com/en-us/pricing/details/api-management/","quote":"Unit cost of incremental units (>1) of the same service instance charged at 50% of the first unit purchased."},"llmGateway":{"value":"yes","source":"https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities","quote":"Configure a token limit policy on your LLM APIs to manage and enforce limits per API consumer based on the usage of AI service tokens.","note":"APIM AI gateway supports OpenAI, Anthropic Messages (v2 tiers), Vertex AI, Bedrock, self-hosted models."},"costTrackingPerPerson":{"value":"partial","source":"https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities","quote":"Track token metrics per consumer in Application Insights.","note":"Token metrics with custom dimensions (e.g. user ID header); not dollar cost per person out of the box."}},"sourcesVisited":["https://github.com/microsoft/mcp-gateway","https://learn.microsoft.com/en-us/azure/api-management/mcp-server-overview","https://azure.microsoft.com/en-us/pricing/details/api-management/","https://techcommunity.microsoft.com/blog/integrationsonazureblog/-/4440294","https://learn.microsoft.com/azure/api-management/secure-mcp-servers","https://learn.microsoft.com/azure/api-management/credentials-overview","https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities","https://learn.microsoft.com/azure/compliance/offerings/offering-soc-2","https://learn.microsoft.com/en-us/azure/compliance/offerings/cloud-services-in-audit-scope","https://docs.azure.cn/ja-jp/api-management/expose-existing-mcp-server","https://learn.microsoft.com/en-my/azUre/api-management/manage-mcp-servers-rest-api"],"github":{"repo":"microsoft/mcp-gateway","url":"https://github.com/microsoft/mcp-gateway","license":"MIT","licenseSource":"https://github.com/microsoft/mcp-gateway/blob/main/LICENSE","stars":885,"starsCheckedAt":"2026-10-19","selfHostMethod":"Kubernetes manifests","selfHostSource":"https://github.com/microsoft/mcp-gateway#getting-started---local-deployment"}},{"id":"mintmcp","name":"Mintive (formerly MintMCP)","vendor":"Mintive","url":"https://www.mintmcp.com","category":"mcp-gateway","frame":"direct","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"Hosted MCP gateway plus LLM gateway, agent monitoring, Mint Guard and coworker agents; renamed Mintive Oct 2026.","whereTheyWin":[{"text":"Hosts stdio MCP servers in managed containers behind OAuth, so teams share a stable URL without running anything locally.","source":"https://www.mintmcp.com/docs/stdio-oauth-howto"},{"text":"Bundles an LLM gateway with policy budgets and per-person/agent cost ranking across Claude Code, Cursor, Codex and Copilot, alongside the MCP gateway.","source":"https://www.mintmcp.com/docs/agent-monitor-usage"},{"text":"Native SIEM export over OTLP or Splunk HEC, plus EU and US data residency options.","source":"https://www.mintmcp.com/docs/siem-export"}],"company":{"founded":"not-published","hq":"not-published","funding":"not-published","ownership":"Private","source":"https://www.mintmcp.com/blog/meet-mintive"},"pricing":{"public":false,"model":"per seat + platform fee (custom quote)","freeTier":"not-published","plans":[],"extras":["Platform fees scale with usage and team size (no amounts published)"],"source":"https://www.mintmcp.com/pricing"},"limits":[],"facts":{"catalogSize":{"value":"not-published","source":null,"quote":null},"verifiedServers":{"value":"yes","source":"https://www.mintmcp.com/docs/add-remote-mcp","quote":"Some pre-vetted connectors in the MCP store ship a Mint-managed OAuth app."},"byoMcpServer":{"value":"yes","source":"https://www.mintmcp.com/docs/stdio-oauth-howto","quote":"Use the Hosted Server CLI to deploy directly from your project directory"},"remoteMcpServers":{"value":"yes","source":"https://www.mintmcp.com/docs/add-remote-mcp","quote":"Connect to an MCP by URL"},"localOrDockerServers":{"value":"yes","source":"https://www.mintmcp.com/docs/stdio-oauth-howto","quote":"Mintive hosts them in secure containers with OAuth authentication, so you can share a stable URL with your team.","note":"stdio servers are hosted by Mintive in containers rather than run on the user's machine."},"singleUrlAllTools":{"value":"yes","source":"https://www.mintmcp.com/docs/vmcp-concepts","quote":"A Virtual MCP server bundles multiple connectors into one endpoint.","note":"One endpoint per Virtual MCP (typically per role), not necessarily one URL for all tools."},"versionPinning":{"value":"not-published","source":null,"quote":null},"schemaChangeMonitoring":{"value":"not-published","source":null,"quote":null},"worksInClaude":{"value":"yes","source":"https://www.mintmcp.com/docs/clients-overview","quote":"Added as a custom connector in settings"},"worksInClaudeCode":{"value":"yes","source":"https://www.mintmcp.com/docs/clients-overview","quote":"Pair with Agent Monitor hooks for visibility into Bash, Edit, and Read"},"worksInChatGPT":{"value":"partial","source":"https://www.mintmcp.com/docs/clients-overview","quote":"MCP connectors require developer mode","note":"Requires ChatGPT developer mode."},"worksInCursor":{"value":"yes","source":"https://www.mintmcp.com/docs/clients-overview","quote":"Pair with hooks for shell, file, and prompt visibility"},"worksInCodex":{"value":"yes","source":"https://www.mintmcp.com/docs/clients-overview","quote":"Streamable HTTP servers in config.toml; the same config drives the Codex IDE extension"},"worksInCopilot":{"value":"yes","source":"https://www.mintmcp.com/docs/clients-overview","quote":"the cloud coding agent takes MCP configuration in repository settings"},"customAgentsSdk":{"value":"yes","source":"https://www.mintmcp.com/docs/clients-overview","quote":"any MCP-speaking client can connect to the VMCP URL","note":"Also agent identities, bearer keys, M2M tokens, workload identity federation."},"ownChatUiRequired":{"value":"no","source":"https://www.mintmcp.com/docs/clients-overview","quote":"any MCP-speaking client can connect to the VMCP URL"},"perUserOAuth":{"value":"yes","source":"https://www.mintmcp.com/docs/authentication-models","quote":"Mintive forwards each user's identity to the underlying service."},"managedOAuthApps":{"value":"yes","source":"https://www.mintmcp.com/docs/add-remote-mcp","quote":"Some pre-vetted connectors in the MCP store ship a Mint-managed OAuth app.","note":"Only some connectors."},"byoOAuthApp":{"value":"yes","source":"https://www.mintmcp.com/docs/authentication-models","quote":"An admin can also register one OAuth app for the whole organization and enter its client credentials on the connector."},"sso":{"value":"yes","source":"https://www.mintmcp.com/docs/enterprise-sso","quote":"MintMCP supports any identity provider that uses SAML 2.0 or OpenID Connect (OIDC) for SSO, and SCIM 2.0 for provisioning.","note":"Prerequisite: account with enterprise access."},"scim":{"value":"yes","source":"https://www.mintmcp.com/docs/enterprise-sso","quote":"MintMCP supports any identity provider that uses SAML 2.0 or OpenID Connect (OIDC) for SSO, and SCIM 2.0 for provisioning."},"roleBasedToolAccess":{"value":"yes","source":"https://www.mintmcp.com/docs/rbac","quote":"If Finance doesn't have a Virtual MCP, Finance can't see source control."},"toolLevelAllowDeny":{"value":"yes","source":"https://www.mintmcp.com/docs/rbac","quote":"Individual tool controls (enable/disable, redescribe) still exist inside a Virtual MCP"},"readOnlyModes":{"value":"yes","source":"https://www.mintmcp.com/docs/rbac","quote":"A user in the read-only group can't call write tools because those tools aren't present in their server's tool set","note":"Achieved by building a read-only Virtual MCP, not a toggle."},"auditLogPerPerson":{"value":"yes","source":"https://www.mintmcp.com/for-security","quote":"Each call is logged with the user, agent, server, and tool behind it, immutable"},"callTracing":{"value":"yes","source":"https://www.mintmcp.com","quote":"Every call traces back to a person, agent, server, and model, with spend and tokens broken out by team."},"logExportSiem":{"value":"yes","source":"https://www.mintmcp.com/docs/siem-export","quote":"MintMCP exports activity logs to your SIEM or observability platform in real time.","note":"OTLP or Splunk HEC."},"dlpRedaction":{"value":"partial","source":"https://www.mintmcp.com/docs/mint-guard","quote":"Mint Guard only blocks and logs; it never rewrites or redacts a call","note":"Masking via gateway middleware or integration with existing DLP tools; Mint Guard itself does not redact."},"promptInjectionDetection":{"value":"yes","source":"https://www.mintmcp.com/docs/mint-guard","quote":"Prompt injection blocks only at high confidence, so lower-confidence matches are recorded without stopping the call.","note":"Mint Guard is Enterprise plan only."},"toolPoisoningProtection":{"value":"not-published","source":null,"quote":null,"note":"Mint Guard screens tool arguments and results, not tool descriptions."},"skillsAuthoring":{"value":"not-published","source":null,"quote":null},"skillsGitSync":{"value":"not-published","source":null,"quote":null},"skillsByRole":{"value":"not-published","source":null,"quote":null},"skillsOverMcp":{"value":"not-published","source":null,"quote":null},"openSource":{"value":"not-published","source":null,"quote":null},"selfHost":{"value":"partial","source":"https://www.mintmcp.com/docs/intro","quote":"For on-premise or self-hosted requirements, contact us to discuss your needs.","note":"Primarily managed cloud; self-hosted by arrangement."},"vpcOnPrem":{"value":"partial","source":"https://www.mintmcp.com/docs/intro","quote":"For on-premise or self-hosted requirements, contact us to discuss your needs.","note":"Private tunnel/reverse proxy reaches internal systems without inbound rules."},"airGapped":{"value":"not-published","source":null,"quote":null},"euRegion":{"value":"yes","source":"https://www.mintmcp.com/for-security","quote":"with EU and US data residency options"},"soc2Type2":{"value":"yes","source":"https://www.mintmcp.com","quote":"SOC 2 Type II audited"},"iso27001":{"value":"not-published","source":null,"quote":null},"hipaa":{"value":"yes","source":"https://www.mintmcp.com/for-security","quote":"HIPAA attestation completed.","note":"Signs BAAs."},"gdprDpa":{"value":"partial","source":"https://trust.mintmcp.com","quote":"Data Processing Addendum","note":"DPA listed in trust center; GDPR not named."},"publicPricing":{"value":"no","source":"https://www.mintmcp.com/pricing","quote":"Per-user licensing based on active AI agent users","note":"Custom quote only; no prices."},"freeTier":{"value":"not-published","source":null,"quote":null},"startingPrice":{"value":"not-published","source":null,"quote":null},"pricingModel":{"value":"Per active user plus usage/team-size platform fee, custom quote","source":"https://www.mintmcp.com/pricing","quote":"Platform fees scale with usage and team size"},"llmGateway":{"value":"yes","source":"https://www.mintmcp.com/pricing","quote":"Governed access to open and closed models through one endpoint"},"costTrackingPerPerson":{"value":"yes","source":"https://www.mintmcp.com/docs/agent-monitor-usage","quote":"people and agents ranked by cost, so the heaviest consumers surface immediately.","note":"LLM gateway budgets are per policy, not per user."}},"sourcesVisited":["https://www.mintmcp.com","https://www.mintmcp.com/pricing","https://www.mintmcp.com/docs/intro","https://www.mintmcp.com/docs/clients-overview","https://www.mintmcp.com/docs/authentication-models","https://www.mintmcp.com/docs/vmcp-concepts","https://www.mintmcp.com/docs/enterprise-sso","https://www.mintmcp.com/docs/rbac","https://www.mintmcp.com/docs/stdio-oauth-howto","https://www.mintmcp.com/docs/siem-export","https://www.mintmcp.com/docs/mint-guard","https://trust.mintmcp.com","https://www.mintmcp.com/blog","https://www.mintmcp.com/blog/meet-mintive","https://www.mintmcp.com/for-security","https://www.mintmcp.com/docs/agent-monitor-usage","https://www.mintmcp.com/docs/add-remote-mcp","https://www.mintmcp.com/docs/llm-gateway-budgets","https://www.mintmcp.com/docs/security/tool-governance"]},{"id":"obot","name":"Obot","vendor":"Obot AI","url":"https://obot.ai","category":"mcp-gateway","frame":"direct","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"MIT-licensed MCP gateway, server host, skills registry and LLM gateway, self-hosted on Kubernetes or as Obot Cloud.","whereTheyWin":[{"text":"Ships an LLM gateway alongside the MCP gateway: OpenAI, Anthropic, Bedrock and Azure behind Obot API keys with per-user model access and token/cost analytics.","source":"https://docs.obot.ai/functionality/llm-gateway/"},{"text":"Runs MCP servers and agents itself in isolated execution environments (NPX, UVX or containers on Kubernetes) with domain-level egress control.","source":"https://docs.obot.ai/"},{"text":"Device management inventories local AI clients, MCP servers, skills and plugins on employee machines.","source":"https://docs.obot.ai/functionality/overview/"}],"company":{"founded":"not-published","hq":"not-published","funding":"$35M seed co-led by Mayfield Fund and Nexus Venture Partners (announced Sept 23, 2025)","ownership":"Private, venture-backed","source":"https://obot.ai/blog/obot-ai-secures-35m-seed-to-build-enterprise-mcp-gateway/"},"pricing":{"public":false,"model":"contact sales","freeTier":"yes","plans":[{"name":"Obot (default)","price":"Free","unit":"self-hosted","includes":"Up to 100 users and 100 devices; Local, GitHub, Google auth; all model providers","source":"https://docs.obot.ai/enterprise/overview/"},{"name":"Obot Community","price":"Free (one-time registration)","unit":"self-hosted","includes":"Adds Entra, Okta, JumpCloud, Auth0 auth; 100-user/100-device cap still applies","source":"https://docs.obot.ai/enterprise/overview/"},{"name":"Obot Cloud","price":"not-published (free trial)","unit":"hosted","includes":"Hosted edition, no user limit","source":"https://obot.ai"},{"name":"Obot Enterprise","price":"Contact sales","unit":"license key","includes":"Everything in Community, unlimited users and devices, enterprise support","source":"https://docs.obot.ai/enterprise/overview/"}],"extras":[],"source":"https://docs.obot.ai/enterprise/overview/"},"limits":[{"name":"Users on free editions","value":"100 users and 100 devices","source":"https://docs.obot.ai/enterprise/overview/"},{"name":"Skill source sync interval","value":"Hourly (plus manual sync)","source":"https://docs.obot.ai/functionality/skills/"}],"facts":{"catalogSize":{"value":"not-published","source":null,"quote":null,"note":"Curated catalog; no count given."},"verifiedServers":{"value":"not-published","source":null,"quote":null},"byoMcpServer":{"value":"yes","source":"https://obot.ai","quote":"Host any MCP server from the ecosystem and hand your team one endpoint."},"remoteMcpServers":{"value":"yes","source":"https://docs.obot.ai/functionality/overview/","quote":"Connect the gateway to remote MCP servers on private networks"},"localOrDockerServers":{"value":"yes","source":"https://docs.obot.ai/functionality/mcp-servers/","quote":"Containerized: For Docker-based deployments","note":"Runtimes: NPX, UVX, containerized."},"singleUrlAllTools":{"value":"yes","source":"https://docs.obot.ai/functionality/virtual-mcps/","quote":"exposes one or more MCP servers through one Obot Gateway endpoint"},"versionPinning":{"value":"not-published","source":null,"quote":null,"note":"Skill sources can be pinned to branch/tag/commit; no statement on MCP server version pinning."},"schemaChangeMonitoring":{"value":"not-published","source":null,"quote":null},"worksInClaude":{"value":"not-published","source":null,"quote":null},"worksInClaudeCode":{"value":"yes","source":"https://docs.obot.ai/","quote":"Obot does not require an organization to standardize on a single AI client, model provider, or tool ecosystem.","note":"Docs name Claude Code, Codex, Cursor and VS Code as example clients."},"worksInChatGPT":{"value":"not-published","source":null,"quote":null},"worksInCursor":{"value":"yes","source":"https://docs.obot.ai/","quote":"Obot does not require an organization to standardize on a single AI client, model provider, or tool ecosystem.","note":"Cursor named as example client on docs overview."},"worksInCodex":{"value":"yes","source":"https://docs.obot.ai/","quote":"Obot does not require an organization to standardize on a single AI client, model provider, or tool ecosystem.","note":"Codex named as example client on docs overview."},"worksInCopilot":{"value":"not-published","source":null,"quote":null,"note":"VS Code named as a client; Copilot not named explicitly."},"customAgentsSdk":{"value":"not-published","source":null,"quote":null},"ownChatUiRequired":{"value":"no","source":"https://docs.obot.ai/","quote":"Obot does not require an organization to standardize on a single AI client, model provider, or tool ecosystem.","note":"Has its own Obot Agent chat, but external clients are supported."},"perUserOAuth":{"value":"yes","source":"https://docs.obot.ai/functionality/mcp-servers/","quote":"authenticate using the built-in authentication or OAuth per the MCP specification"},"managedOAuthApps":{"value":"not-published","source":null,"quote":null},"byoOAuthApp":{"value":"not-published","source":null,"quote":null},"sso":{"value":"yes","source":"https://docs.obot.ai/configuration/auth-providers/","quote":"Require free Community registration or an Enterprise license.","note":"GitHub/Google included by default; Entra, Okta, JumpCloud, Auth0 need free Community registration."},"scim":{"value":"not-published","source":null,"quote":null},"roleBasedToolAccess":{"value":"yes","source":"https://docs.obot.ai/functionality/mcp-access-policies/","quote":"Assign users and groups to the access policy.","note":"Server-level by user/group; tool subsets via vMCP profiles."},"toolLevelAllowDeny":{"value":"yes","source":"https://docs.obot.ai/functionality/virtual-mcps/","quote":"You can disable tools, rename them, change their descriptions, or add a prefix to avoid name collisions."},"readOnlyModes":{"value":"not-published","source":null,"quote":null},"auditLogPerPerson":{"value":"yes","source":"https://docs.obot.ai/functionality/audit-logs-and-usage/","quote":"User Information: Who made the request"},"callTracing":{"value":"yes","source":"https://obot.ai","quote":"Capture full logs of every tool call and LLM request, exportable to your storage."},"logExportSiem":{"value":"partial","source":"https://obot.ai","quote":"Capture full logs of every tool call and LLM request, exportable to your storage.","note":"One-time or scheduled JSONL export to storage; no named SIEM integrations."},"dlpRedaction":{"value":"partial","source":"https://docs.obot.ai/functionality/filters/","quote":"Block execution and return an error to the user","note":"Webhook filters can accept/reject/mutate tool calls; DLP is BYO (example pii-filter repo linked), not built in."},"promptInjectionDetection":{"value":"partial","source":"https://docs.obot.ai/functionality/ai-judge-policies/","quote":"enforce content rules written in natural language on Obot Agent traffic at the LLM proxy layer","note":"Natural-language AI Judge policies on Obot Agent traffic; prompt injection not named."},"toolPoisoningProtection":{"value":"not-published","source":null,"quote":null},"skillsAuthoring":{"value":"partial","source":"https://docs.obot.ai/functionality/skills/","quote":"Each skill is a self-contained package stored in a GitHub repository.","note":"Authored in GitHub (SKILL.md); read-only inside Obot."},"skillsGitSync":{"value":"yes","source":"https://docs.obot.ai/functionality/skills/","quote":"Each skill is a self-contained package stored in a GitHub repository.","note":"Hourly sync, pin to branch/tag/commit."},"skillsByRole":{"value":"yes","source":"https://docs.obot.ai/functionality/skills/","quote":"Administrators must create Skill Access Policies to grant users and groups access to specific skills."},"skillsOverMcp":{"value":"not-published","source":null,"quote":null},"openSource":{"value":"MIT","source":"https://github.com/obot-platform/obot","quote":"Obot is licensed under the MIT License."},"selfHost":{"value":"yes","source":"https://obot.ai","quote":"Run Obot in your own cloud or on-prem — your data never leaves."},"vpcOnPrem":{"value":"yes","source":"https://obot.ai","quote":"Run Obot in your own cloud or on-prem — your data never leaves."},"airGapped":{"value":"not-published","source":null,"quote":null},"euRegion":{"value":"not-published","source":null,"quote":null},"soc2Type2":{"value":"roadmap","source":"https://obot.ai/?p=3459","quote":"SOC 2 Type II in progress – controls in independent observation period; MIT licensed."},"iso27001":{"value":"not-published","source":null,"quote":null},"hipaa":{"value":"not-published","source":null,"quote":null},"gdprDpa":{"value":"not-published","source":null,"quote":null},"publicPricing":{"value":"no","source":"https://docs.obot.ai/faq/","quote":"Contact the Obot team directly on Discord, Website, or email.","note":"Free editions documented; Enterprise and Cloud prices not listed."},"freeTier":{"value":"yes","source":"https://docs.obot.ai/enterprise/overview/","quote":"The default edition supports up to 100 users and 100 devices."},"startingPrice":{"value":"Free self-hosted up to 100 users; Enterprise contact sales","source":"https://docs.obot.ai/enterprise/overview/","quote":"Everything in Obot Community, with unlimited users and devices and enterprise support."},"pricingModel":{"value":"Open core by license key: free up to 100 users/devices, Enterprise license for unlimited","source":"https://obot.ai/?p=3459","quote":"single build, license-key to upgrade"},"llmGateway":{"value":"yes","source":"https://docs.obot.ai/","quote":"The LLM Gateway presents provider-compatible endpoints that AI clients use to reach approved models."},"costTrackingPerPerson":{"value":"yes","source":"https://docs.obot.ai/functionality/llm-gateway/","quote":"usage and cost analytics across users and models (admin only)","note":"No budgets or spend limits mentioned."}},"sourcesVisited":["https://obot.ai","https://github.com/obot-platform/obot","https://docs.obot.ai/","https://docs.obot.ai/enterprise/overview/","https://docs.obot.ai/configuration/auth-providers/","https://docs.obot.ai/functionality/overview/","https://docs.obot.ai/functionality/skills/","https://docs.obot.ai/functionality/llm-gateway/","https://docs.obot.ai/functionality/audit-logs-and-usage/","https://docs.obot.ai/functionality/filters/","https://docs.obot.ai/functionality/mcp-servers/","https://docs.obot.ai/functionality/mcp-access-policies/","https://docs.obot.ai/functionality/ai-judge-policies/","https://docs.obot.ai/functionality/virtual-mcps/","https://docs.obot.ai/faq/","https://obot.ai/?p=3459","https://obot.ai/blog/obot-ai-secures-35m-seed-to-build-enterprise-mcp-gateway/"],"github":{"repo":"obot-platform/obot","url":"https://github.com/obot-platform/obot","license":"MIT","licenseSource":"https://github.com/obot-platform/obot/blob/main/LICENSE","stars":1109,"starsCheckedAt":"2026-10-19","selfHostMethod":"Docker image, Kubernetes","selfHostSource":"https://github.com/obot-platform/obot#getting-started"}},{"id":"pipedream","name":"Pipedream Connect / MCP / Conduit","vendor":"Pipedream (a Workday company)","url":"https://pipedream.com/","category":"integration-platform","frame":"direct","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"Workday-owned integration layer: Connect SDK, hosted MCP for 3,000+ APIs, and Conduit, a self-hostable MCP gateway.","whereTheyWin":[{"text":"Larger managed-auth catalog: 3,000+ APIs and 10,000+ prebuilt tools, with 5,000+ customers per Workday's acquisition release.","source":"https://pipedream.com/connect"},{"text":"Conduit is a close feature match to an MCP gateway (single endpoint, OIDC SSO, SCIM, group policies with tool-level grants, per-call audit, OTel export, Docker/Kubernetes self-host), and Conduit Cloud is free up to 100 users.","source":"https://pipedream.com/docs/conduit/cloud.md"},{"text":"Backed by Workday (acquisition closed by Feb 2026) and offers HIPAA BAAs on the Business plan.","source":"https://pipedream.com/docs/privacy-and-security"}],"company":{"founded":"not-published","hq":"not-published","funding":"Acquired by Workday; terms not disclosed (agreement Nov 19, 2025)","ownership":"Workday, Inc. (acquisition closed; reported in Workday FY2026 Q4 results, Feb 24, 2026)","source":"https://newsroom.workday.com/2026-02-24-Workday-Announces-Fiscal-2026-Fourth-Quarter-and-Full-Year-Financial-Results"},"pricing":{"public":true,"model":"platform fee + per external user + usage credits (Connect); Conduit Cloud free up to 100 users, contact sales above","freeTier":"yes","plans":[{"name":"Free","price":"$0","unit":"per month","includes":"Development only; 3,000+ connectors, 10,000+ tools; unlimited team members; no production","source":"https://pipedream.com/pricing"},{"name":"Startup","price":"$99 per month billed annually, or $150 per month billed monthly","unit":"per month","includes":"100 external users then $2/user/month; 10,000 credits/month then $0.012/credit; production environment; email support","source":"https://pipedream.com/pricing"},{"name":"Business","price":"Custom","unit":"annual","includes":"Volume pricing, SSO, SCIM, HIPAA, static egress IPs, SLAs, dedicated Slack support","source":"https://pipedream.com/pricing"},{"name":"Conduit Cloud","price":"Free up to 100 users; contact for larger teams","unit":"per user count","includes":"Hosted Conduit gateway","source":"https://pipedream.com/docs/conduit/cloud.md"}],"extras":["$2 per external user per month beyond 100 (Startup)","$0.012 per credit beyond 10,000/month (Startup); 1 credit per 30 seconds of compute per action, MCP tool call or proxy request"],"source":"https://pipedream.com/pricing"},"limits":[{"name":"Startup included external users","value":"100","source":"https://pipedream.com/pricing"},{"name":"Startup included credits","value":"10,000/month","source":"https://pipedream.com/pricing"},{"name":"Free plan","value":"Development environment only","source":"https://pipedream.com/pricing"},{"name":"Conduit Cloud free tier","value":"Up to 100 users","source":"https://pipedream.com/docs/conduit/cloud.md"}],"facts":{"catalogSize":{"value":"3,000+ APIs, 10,000+ tools","source":"https://pipedream.com/docs/connect/mcp/developers","quote":"Pipedream provides 3,000+ APIs as MCP servers"},"verifiedServers":{"value":"not-published","source":null,"quote":null},"byoMcpServer":{"value":"yes","source":"https://pipedream.com/docs/conduit/configure/connectors.md","quote":"An MCP server reached over HTTP or SSE","note":"Via Conduit; Conduit also supports OpenAPI-described APIs and a built-in catalog of known remote MCP servers (Linear, Supabase, Atlassian)."},"remoteMcpServers":{"value":"yes","source":"https://pipedream.com/docs/conduit/configure/connectors.md","quote":"An MCP server reached over HTTP or SSE"},"localOrDockerServers":{"value":"yes","source":"https://pipedream.com/docs/conduit/configure/connectors.md","quote":"An MCP server defined by launch command, run on each member's machine by the Conduit CLI"},"singleUrlAllTools":{"value":"yes","source":"https://pipedream.com/conduit","quote":"Point any MCP client at a single endpoint, users sign in through the identity provider with SSO.","note":"Consumer Pipedream MCP also uses one URL (mcp.pipedream.net/v2); developer MCP is one server per app."},"versionPinning":{"value":"not-published","source":null,"quote":null,"note":"Conduit explicit tool-list grants keep new upstream tools off until an admin adds them."},"schemaChangeMonitoring":{"value":"not-published","source":null,"quote":null},"worksInClaude":{"value":"yes","source":"https://pipedream.com/docs/llms.txt","quote":"Add Conduit to Claude and use it in a conversation."},"worksInClaudeCode":{"value":"yes","source":"https://pipedream.com/docs/llms.txt","quote":"Register Conduit with Claude Code and sign in."},"worksInChatGPT":{"value":"yes","source":"https://pipedream.com/docs/llms.txt","quote":"Add Conduit as an app in ChatGPT."},"worksInCursor":{"value":"yes","source":"https://pipedream.com/docs/llms.txt","quote":"Add Conduit to Cursor from Connect a client on your Conduit home page."},"worksInCodex":{"value":"yes","source":"https://pipedream.com/docs/llms.txt","quote":"Connect the Codex CLI to your Conduit workspace."},"worksInCopilot":{"value":"partial","source":"https://pipedream.com/docs/llms.txt","quote":"Add Conduit to VS Code and sign in.","note":"VS Code documented; GitHub Copilot not named."},"customAgentsSdk":{"value":"yes","source":"https://pipedream.com/docs/changelog","quote":"Python, TypeScript, and Java SDKs for Connect"},"ownChatUiRequired":{"value":"no","source":"https://pipedream.com/conduit","quote":"Conduit gives you 3,000+ connectors for Claude, Cursor, ChatGPT, or any other AI assistant"},"perUserOAuth":{"value":"yes","source":"https://pipedream.com/docs/conduit/configure/connectors.md","quote":"Per-user OAuth grants (access and refresh tokens) are stored per member and refreshed automatically"},"managedOAuthApps":{"value":"yes","source":"https://pipedream.com/docs/llms.txt","quote":"Thousands of app integrations with managed OAuth, configured once per workspace."},"byoOAuthApp":{"value":"yes","source":"https://pipedream.com/connect","quote":"Bring your own OAuth clients when you want them."},"sso":{"value":"yes","source":"https://pipedream.com/conduit","quote":"SSO through Okta or any OIDC provider.","note":"Pipedream workspace SSO (SAML/Google) requires the Business plan."},"scim":{"value":"yes","source":"https://pipedream.com/docs/llms.txt","quote":"Let an identity provider push users and groups into a workspace.","note":"Conduit SCIM added in v0.13.0; Pipedream workspace SCIM is Business plan only."},"roleBasedToolAccess":{"value":"yes","source":"https://pipedream.com/conduit","quote":"Groups and policies decide who can use which connectors and tools."},"toolLevelAllowDeny":{"value":"yes","source":"https://pipedream.com/docs/conduit/configure/access-control.md","quote":"An explicit tool list — new upstream tools stay unavailable until an admin adds them.","note":"Allow-list policies only; no explicit deny rules (no policy = no access)."},"readOnlyModes":{"value":"not-published","source":null,"quote":null},"auditLogPerPerson":{"value":"yes","source":"https://pipedream.com/conduit","quote":"Every admin change and every tool call lands in the audit log, scoped per workspace.","note":"Entries carry actor_user_id (Conduit v0.13.0)."},"callTracing":{"value":"yes","source":"https://pipedream.com/conduit","quote":"OpenTelemetry traces and events export to your existing stack — Datadog, Grafana, anything OTel."},"logExportSiem":{"value":"partial","source":"https://pipedream.com/conduit","quote":"OpenTelemetry traces and events export to your existing stack — Datadog, Grafana, anything OTel.","note":"OTel export and audit log API; no named SIEM integration."},"dlpRedaction":{"value":"not-published","source":null,"quote":null},"promptInjectionDetection":{"value":"not-published","source":null,"quote":null},"toolPoisoningProtection":{"value":"not-published","source":null,"quote":null},"skillsAuthoring":{"value":"not-published","source":null,"quote":null},"skillsGitSync":{"value":"not-published","source":null,"quote":null},"skillsByRole":{"value":"not-published","source":null,"quote":null},"skillsOverMcp":{"value":"not-published","source":null,"quote":null},"openSource":{"value":"not-published","source":null,"quote":null,"note":"Conduit build docs clone from https://github.com/PipedreamHQ/conduit.git; no license stated."},"selfHost":{"value":"yes","source":"https://pipedream.com/conduit","quote":"Self-host a single Docker image in your own infrastructure, or use the managed cloud.","note":"Conduit only; Pipedream connectors still call Pipedream's hosted Connect API."},"vpcOnPrem":{"value":"yes","source":"https://pipedream.com/docs/llms.txt","quote":"Run Conduit on Kubernetes with the Helm chart or raw manifests."},"airGapped":{"value":"not-published","source":null,"quote":null},"euRegion":{"value":"partial","source":"https://pipedream.com/docs/privacy-and-security","quote":"in the `us-east-1` region","note":"Pipedream cloud is US-only; self-hosted Conduit can run in any region, but Pipedream connector calls route through Pipedream's US service."},"soc2Type2":{"value":"yes","source":"https://pipedream.com/docs/privacy-and-security","quote":"can provide a SOC 2 Type 2 report upon request"},"iso27001":{"value":"not-published","source":null,"quote":null},"hipaa":{"value":"yes","source":"https://pipedream.com/docs/privacy-and-security","quote":"Pipedream can sign Business Associate Addendum (BAAs) for customers intending to pass PHI to Pipedream.","note":"Business plan only per pricing page."},"gdprDpa":{"value":"yes","source":"https://pipedream.com/docs/privacy-and-security","quote":"includes a Data Protection Addendum as part of our standard Terms of Service"},"publicPricing":{"value":"yes","source":"https://pipedream.com/pricing","quote":"$99 per month"},"freeTier":{"value":"yes","source":"https://pipedream.com/pricing","quote":"Free, no credit card required","note":"Connect Free is development-only; Conduit Cloud free up to 100 users."},"startingPrice":{"value":"$99/month billed annually ($150 monthly) for Connect Startup; Conduit Cloud free up to 100 users","source":"https://pipedream.com/pricing","quote":"$99 per month"},"pricingModel":{"value":"Connect: platform fee + $2 per external user/month beyond 100 + usage credits ($0.012/credit beyond 10,000); Business custom. Conduit: free up to 100 users, then contact sales","source":"https://pipedream.com/pricing","quote":"Each distinct user of your app who connects at least one account through Connect."},"llmGateway":{"value":"not-published","source":null,"quote":null},"costTrackingPerPerson":{"value":"not-published","source":null,"quote":null}},"sourcesVisited":["https://pipedream.com/pricing","https://pipedream.com/connect","https://pipedream.com/docs/connect/mcp/users","https://pipedream.com/docs/connect/mcp/developers","https://investor.workday.com/files/doc_news/Workday-Signs-Definitive-Agreement-to-Acquire-Pipedream-11-19-2025-2025.pdf","https://s21.q4cdn.com/950027458/files/doc_news/Workday-Signs-Definitive-Agreement-to-Acquire-Pipedream-11-19-2025-2025.pdf","https://pipedream.com/docs/changelog","https://pipedream.com/docs/privacy-and-security","https://pipedream.com/docs/connect/mcp","https://github.com/PipedreamHQ/pipedream/pull/16595/files","https://pipedream.com/conduit","https://pipedream.com/","https://pipedream.com/docs/workspaces/sso","https://pipedream.com/docs/conduit","https://pipedream.com/docs/conduit/configure/pipedream","https://pipedream.com/docs/conduit/use/start.md","https://pipedream.com/docs/llms.txt","https://pipedream.com/docs/conduit/cloud.md","https://pipedream.com/docs/conduit/configure/connectors.md","https://pipedream.com/docs/conduit/changelog.md","https://pipedream.com/docs/conduit/configure/access-control.md","https://pipedream.com/docs/conduit/deploy/build-from-source.md","https://newsroom.workday.com/2026-02-24-Workday-Announces-Fiscal-2026-Fourth-Quarter-and-Full-Year-Financial-Results"]},{"id":"rippling","name":"Rippling AI Governance (MCP Gateway, AI Gateway, Agent Identity, Shadow AI Detection, AI Spend Console)","vendor":"Rippling","url":"https://www.rippling.com/solutions/it/ai-governance","category":"identity-security","frame":"security-first","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"AI governance add-ons to Rippling's HR/IT platform: MCP gateway, agent identities, LLM spend tracking, shadow-AI discovery.","whereTheyWin":[{"text":"Tool access follows the HR record: permissions change automatically when an employee joins, changes team or role, or leaves, without a separate identity sync.","source":"https://www.rippling.com/blog/introducing-rippling-ai-governance"},{"text":"Bundles AI spend reporting by team/department (Anthropic, OpenAI, Cursor) with the gateway, tied to output data from GitHub and Salesforce; included for Rippling AI customers.","source":"https://www.rippling.com/platform/ai/ai-spend-console"},{"text":"Agents are managed as first-class identities with owners, scoped permissions and provisioning into third-party apps from the same system used for employees.","source":"https://www.rippling.com/solutions/it/ai-governance"}],"company":{"founded":"2016-2017 (sources conflict)","hq":"San Francisco, CA","funding":"~$1.85B total; $450M Series G at $16.8B valuation (May 2025)","ownership":"Private, venture-backed","source":"https://en.wikipedia.org/wiki/Rippling_(company)"},"pricing":{"public":false,"model":"contact sales (Rippling platform is modular per employee/month plus base fee)","freeTier":"not-published","plans":[{"name":"Rippling platform (base)","price":"from $8","unit":"per employee per month, plus monthly base fee","includes":"Base platform; AI governance products not priced on page","source":"https://www.rippling.com/pricing"},{"name":"AI Spend Console","price":"Included for Rippling AI customers; 30-day free trial for non-customers","unit":"bundled","includes":"AI spend tracking by employee attributes","source":"https://www.rippling.com/platform/ai/ai-spend-console"}],"extras":[],"source":"https://www.rippling.com/pricing"},"limits":[],"facts":{"catalogSize":{"value":"not-published","source":null,"quote":null,"note":"Identity & Access lists 600+ pre-built apps for SSO/provisioning, but no MCP server catalog count is published."},"verifiedServers":{"value":"not-published","source":null,"quote":null},"byoMcpServer":{"value":"not-published","source":null,"quote":null},"remoteMcpServers":{"value":"yes","source":"https://www.rippling.com/solutions/it/ai-governance","quote":"Securely manage how employees are connecting LLMs to other third-party software tools","note":"Screenshot shows a 'My MCP servers' dashboard with Rippling, Tableau, Google Drive, Asana."},"localOrDockerServers":{"value":"not-published","source":null,"quote":null,"note":"Shadow AI Detection (waitlist) claims to discover local agents and MCP servers, but not to host them."},"singleUrlAllTools":{"value":"not-published","source":null,"quote":null},"versionPinning":{"value":"not-published","source":null,"quote":null},"schemaChangeMonitoring":{"value":"not-published","source":null,"quote":null},"worksInClaude":{"value":"yes","source":"https://www.rippling.com/platform/ai/rippling-mcp","quote":"lets external AI agents like Claude, ChatGPT, Cursor, and Gemini safely use Rippling data and tools","note":"Stated for the Rippling MCP (accessed via MCP Gateway); client list for third-party servers through the gateway is not published."},"worksInClaudeCode":{"value":"yes","source":"https://www.rippling.com/blog/building-mcp-server","quote":"Shipping the action header improved Claude Code performance by 41% while not impacting Codex or Cursor.","note":"Engineering blog about Rippling's own MCP server."},"worksInChatGPT":{"value":"yes","source":"https://www.rippling.com/platform/ai/rippling-mcp","quote":"lets external AI agents like Claude, ChatGPT, Cursor, and Gemini safely use Rippling data and tools","note":"Stated for the Rippling MCP."},"worksInCursor":{"value":"yes","source":"https://www.rippling.com/platform/ai/rippling-mcp","quote":"lets external AI agents like Claude, ChatGPT, Cursor, and Gemini safely use Rippling data and tools","note":"Stated for the Rippling MCP."},"worksInCodex":{"value":"yes","source":"https://www.rippling.com/blog/building-mcp-server","quote":"Shipping the action header improved Claude Code performance by 41% while not impacting Codex or Cursor.","note":"Engineering blog about Rippling's own MCP server."},"worksInCopilot":{"value":"not-published","source":null,"quote":null},"customAgentsSdk":{"value":"not-published","source":null,"quote":null},"ownChatUiRequired":{"value":"no","source":"https://www.rippling.com/platform/ai/rippling-mcp","quote":"Give your existing AI tools the context they need."},"perUserOAuth":{"value":"not-published","source":null,"quote":null},"managedOAuthApps":{"value":"not-published","source":null,"quote":null},"byoOAuthApp":{"value":"not-published","source":null,"quote":null},"sso":{"value":"yes","source":"https://www.rippling.com/products/it/identity-access-management","quote":"Build custom integrations to provide SSO with SAML, provisioning with JIT or SCIM.","note":"Rippling is itself an identity provider."},"scim":{"value":"yes","source":"https://www.rippling.com/products/it/identity-access-management","quote":"Build custom integrations to provide SSO with SAML, provisioning with JIT or SCIM."},"roleBasedToolAccess":{"value":"yes","source":"https://www.rippling.com/blog/introducing-rippling-ai-governance","quote":"access updates automatically when employees join, change roles or teams, or leave the company."},"toolLevelAllowDeny":{"value":"yes","source":"https://www.rippling.com/solutions/it/ai-governance","quote":"Set access policies at the tool level with MCP Gateway"},"readOnlyModes":{"value":"not-published","source":null,"quote":null,"note":"Blog example blocks destructive GitHub actions (delete branches, force-push), but no named read-only mode."},"auditLogPerPerson":{"value":"yes","source":"https://www.rippling.com/blog/introducing-rippling-ai-governance","quote":"Before a tool call runs, Rippling checks who is making the request and whether the relevant policy allows it.","note":"Same post: 'The call is then recorded for review.'"},"callTracing":{"value":"not-published","source":null,"quote":null},"logExportSiem":{"value":"not-published","source":null,"quote":null},"dlpRedaction":{"value":"not-published","source":null,"quote":null},"promptInjectionDetection":{"value":"not-published","source":null,"quote":null},"toolPoisoningProtection":{"value":"not-published","source":null,"quote":null},"skillsAuthoring":{"value":"not-published","source":null,"quote":null},"skillsGitSync":{"value":"not-published","source":null,"quote":null},"skillsByRole":{"value":"not-published","source":null,"quote":null},"skillsOverMcp":{"value":"not-published","source":null,"quote":null},"openSource":{"value":"not-published","source":null,"quote":null,"note":"Closed SaaS; no public repo for the gateway found."},"selfHost":{"value":"not-published","source":null,"quote":null},"vpcOnPrem":{"value":"not-published","source":null,"quote":null},"airGapped":{"value":"not-published","source":null,"quote":null},"euRegion":{"value":"no","source":"https://www.rippling.com/trust/security","quote":"All data is housed in physically secure, US-based AWS data centers across multiple availability zones.","note":"Platform-wide statement; no EU region mentioned."},"soc2Type2":{"value":"yes","source":"https://www.rippling.com/trust/security","quote":"SOC 2 Type 2 report covers the trust services categories of Security, Confidentiality, and Availability."},"iso27001":{"value":"yes","source":"https://www.rippling.com/trust/security","quote":"Rippling's ISO 27001 certification demonstrates our commitment to operating a mature security program."},"hipaa":{"value":"not-published","source":null,"quote":null},"gdprDpa":{"value":"yes","source":"https://www.rippling.com/trust/security","quote":"Rippling complies with all applicable privacy and data protection laws, including GDPR and CCPA.","note":"GDPR compliance stated."},"publicPricing":{"value":"partial","source":"https://www.rippling.com/pricing","quote":"Rippling plans start at $8 per employee per month, with a monthly base fee.","note":"Only platform starting price is public; MCP Gateway / AI governance pricing not listed (demo request)."},"freeTier":{"value":"not-published","source":null,"quote":null,"note":"AI Spend Console offers a 30-day free trial to non-customers; US VC-backed startups can get 6 months free."},"startingPrice":{"value":"$8 per employee per month plus base fee (Rippling platform); AI governance not priced","source":"https://www.rippling.com/pricing","quote":"Rippling plans start at $8 per employee per month, with a monthly base fee."},"pricingModel":{"value":"Modular per employee per month, some products with base fee; AI governance via sales","source":"https://www.rippling.com/pricing","quote":"Most products are priced per employee per month, while some may include a monthly base fee."},"llmGateway":{"value":"roadmap","source":"https://www.rippling.com/platform/ai/ai-spend-console","quote":"This capability is coming soon.","note":"AI Gateway (budgets, spend limits, model routing) is waitlist-only as of 2026-10."},"costTrackingPerPerson":{"value":"yes","source":"https://www.rippling.com/platform/ai/ai-spend-console","quote":"Every request gets logged, so you can see who made it, how much it cost, and how it impacted the business."}},"sourcesVisited":["https://www.rippling.com/","https://www.rippling.com/blog/introducing-rippling-ai-governance","https://www.rippling.com/solutions/it/ai-governance","https://www.rippling.com/platform/ai","https://www.rippling.com/platform/ai/ai-spend-console","https://www.rippling.com/platform/ai/rippling-mcp","https://www.rippling.com/blog/building-mcp-server","https://www.rippling.com/trust/compliance","https://www.rippling.com/trust/security","https://www.rippling.com/pricing","https://www.rippling.com/products/it/identity-access-management","https://developer.rippling.com/documentation/rippling-platform/rippling-mcp/setup","https://developer.rippling.com/documentation/rippling-platform/rippling-mcp/overview","https://www.businesswire.com/news/home/20260806764198/en/","https://techcrunch.com/2026/08/20/runlayer-rippling-drop-lawsuits-but-the-brouhaha-is-still-a-cautionary-tale-for-founders/","https://en.wikipedia.org/wiki/Rippling_(company)"]},{"id":"speakeasy-gram","name":"Speakeasy AI Control Plane (formerly Gram)","vendor":"Speakeasy","url":"https://www.speakeasy.com/","category":"mcp-gateway","frame":"direct","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"AGPL-3.0 MCP gateway, skills and plugin distribution, AI security guardrails and cost tracking; formerly Gram, rebranded Oct 2026.","whereTheyWin":[{"text":"Device agent plus plugin marketplace pushes skills and MCP servers into Claude Code, Cowork, Cursor, Codex, Copilot and others, assigned by role, directory group or attribute.","source":"https://www.speakeasy.com/docs/ai-control-plane/mcp-gateway/plugins"},{"text":"Built-in guardrails detect prompt injection (LLM judge), PII and secrets, with deny or warn-and-confirm actions, plus shadow-AI and shadow-MCP detection.","source":"https://www.speakeasy.com/docs/ai-control-plane/secure/guardrails"},{"text":"Per-member and per-role AI spend tracking across Claude Code, Codex/ChatGPT and Cursor, with budgets in preview; turns OpenAPI specs into MCP tools.","source":"https://www.speakeasy.com/docs/ai-control-plane/observe/costs"}],"company":{"founded":"not-published","hq":"not-published","funding":"$15M Series A led by FPV Ventures with GV and Quiet Capital (Oct 30, 2024)","ownership":"Private, venture-backed","source":"https://www.speakeasy.com/post/fundraising-series-a"},"pricing":{"public":false,"model":"contact sales","freeTier":"not-published","plans":[{"name":"Enterprise","price":"Tailored","unit":"not-published (usage counted as requests = tool calls)","includes":"OpenAPI import, toolsets, OAuth 2.1 proxy + DCR, BYO authorization server, version tracking, SSO, audit logs, SLAs","source":"https://www.speakeasy.com/pricing"}],"extras":[],"source":"https://www.speakeasy.com/pricing"},"limits":[{"name":"Usage unit","value":"A request is a tool call made by an LLM to your MCP server; LLM playground requests count","source":"https://www.speakeasy.com/pricing"}],"facts":{"catalogSize":{"value":"~45 hosted MCP servers (counted on integrations page; no stated total)","source":"https://www.speakeasy.com/docs/ai-control-plane/integrations","quote":"Every hosted MCP server on the platform, ready to permission, govern, and deploy to any connected AI client.","note":"Count made by researcher from page listing."},"verifiedServers":{"value":"partial","source":"https://www.speakeasy.com/docs/ai-control-plane/integrations","quote":"Official Notion MCP server.","note":"Some entries are vendor-official; no 'verified' label."},"byoMcpServer":{"value":"yes","source":"https://www.speakeasy.com/docs/ai-control-plane","quote":"Run MCP servers behind one governed endpoint.","note":"Remote, tunneled and private-network servers; build from OpenAPI or functions."},"remoteMcpServers":{"value":"yes","source":"https://www.speakeasy.com/changelog","quote":"Remote MCP servers get their upstream tokens from your identity provider, so users stop connecting each one by hand"},"localOrDockerServers":{"value":"partial","source":"https://www.speakeasy.com/pricing","quote":"Serverless hosting","note":"Hosts servers built from OpenAPI/functions and tunnels private servers; no documented Docker/stdio hosting."},"singleUrlAllTools":{"value":"yes","source":"https://www.speakeasy.com/changelog","quote":"One MCP URL now connects every server in your organization","note":"Shipped Oct 15, 2026."},"versionPinning":{"value":"partial","source":"https://www.speakeasy.com/pricing","quote":"Version tracking","note":"Version tracking listed; explicit pinning not documented."},"schemaChangeMonitoring":{"value":"partial","source":"https://www.speakeasy.com/changelog","quote":"Agent Identity reaches every organization, and OpenAPI uploads get a change review","note":"Pre-deploy impact review for OpenAPI updates (Oct 13, 2026); not monitoring of third-party servers."},"worksInClaude":{"value":"yes","source":"https://www.speakeasy.com/","quote":"Claude, ChatGPT, Cursor, and the agents your teams build reach every MCP server through one URL."},"worksInClaudeCode":{"value":"yes","source":"https://www.speakeasy.com/docs/ai-control-plane/mcp-gateway/plugins","quote":"Claude Code, Claude Cowork, Cursor, OpenAI Codex, opencode, OpenClaw, GitHub Copilot, and Pi."},"worksInChatGPT":{"value":"yes","source":"https://www.speakeasy.com/changelog","quote":"Install an MCP server into ChatGPT Desktop, and open an install link shared from anywhere"},"worksInCursor":{"value":"yes","source":"https://www.speakeasy.com/","quote":"Claude, ChatGPT, Cursor, and the agents your teams build reach every MCP server through one URL."},"worksInCodex":{"value":"yes","source":"https://www.speakeasy.com/docs/ai-control-plane/mcp-gateway/plugins","quote":"Claude Code, Claude Cowork, Cursor, OpenAI Codex, opencode, OpenClaw, GitHub Copilot, and Pi."},"worksInCopilot":{"value":"yes","source":"https://www.speakeasy.com/docs/ai-control-plane/mcp-gateway/plugins","quote":"Claude Code, Claude Cowork, Cursor, OpenAI Codex, opencode, OpenClaw, GitHub Copilot, and Pi."},"customAgentsSdk":{"value":"yes","source":"https://www.speakeasy.com/","quote":"Claude, ChatGPT, Cursor, and the agents your teams build reach every MCP server through one URL."},"ownChatUiRequired":{"value":"no","source":"https://www.speakeasy.com/","quote":"Claude, ChatGPT, Cursor, and the agents your teams build reach every MCP server through one URL."},"perUserOAuth":{"value":"yes","source":"https://www.speakeasy.com/docs/ai-control-plane/mcp-gateway/access","quote":"per-user tokens from remote identity providers"},"managedOAuthApps":{"value":"partial","source":"https://www.speakeasy.com/pricing","quote":"OAuth 2.1 proxy + DCR","note":"OAuth proxy with DCR; no catalog of vendor-managed OAuth apps documented."},"byoOAuthApp":{"value":"yes","source":"https://www.speakeasy.com/pricing","quote":"BYO authorization server"},"sso":{"value":"yes","source":"https://speakeasy.com/enterprise","quote":"Enterprise SSO with Okta, Azure AD, or any SAML 2.0 provider."},"scim":{"value":"partial","source":"https://www.speakeasy.com/docs/ai-control-plane/identity","quote":"single sign-on and directory sync","note":"Directory sync documented; SCIM not named."},"roleBasedToolAccess":{"value":"yes","source":"https://www.speakeasy.com/docs/ai-control-plane/mcp-gateway/access","quote":"granting and blocking access per server, narrowing tools, and resolving conflicting roles"},"toolLevelAllowDeny":{"value":"yes","source":"https://www.speakeasy.com/docs/ai-control-plane/mcp-gateway/access","quote":"grant or block people, roles, and agents and narrow what they can call"},"readOnlyModes":{"value":"not-published","source":null,"quote":null},"auditLogPerPerson":{"value":"yes","source":"https://www.speakeasy.com/docs/ai-control-plane","quote":"Attribute spend, tool calls, and agent sessions to people and teams, and export telemetry to existing backends."},"callTracing":{"value":"yes","source":"https://www.speakeasy.com/docs/ai-control-plane/observe/opentelemetry","quote":"Any destination that accepts OTLP/HTTP Protobuf at the standard signal paths can receive exported telemetry.","note":"Tool logs and agent sessions; OTLP traces export."},"logExportSiem":{"value":"yes","source":"https://www.speakeasy.com/docs/ai-control-plane/observe/opentelemetry","quote":"Any destination that accepts OTLP/HTTP Protobuf at the standard signal paths can receive exported telemetry.","note":"Names Langfuse, Datadog, Grafana Cloud, OTel Collector; no named Splunk/SIEM."},"dlpRedaction":{"value":"partial","source":"https://www.speakeasy.com/docs/ai-control-plane/secure/guardrails","quote":"a data loss prevention control for what reaches an MCP server","note":"Detects PII/secrets and blocks; in-flight redaction not described."},"promptInjectionDetection":{"value":"yes","source":"https://www.speakeasy.com/docs/ai-control-plane/secure/guardrails","quote":"Indirect injection through tool output and hidden instructions","note":"Evaluated by an LLM judge."},"toolPoisoningProtection":{"value":"not-published","source":null,"quote":null},"skillsAuthoring":{"value":"yes","source":"https://www.speakeasy.com/docs/ai-control-plane/mcp-gateway/skills","quote":"accepts a pasted `SKILL.md` manifest or an uploaded Markdown file","note":"Also captures skills used on devices and via Platform MCP create_skill."},"skillsGitSync":{"value":"not-published","source":null,"quote":null,"note":"Marketplace publishes to clients via GitHub, but no Git-to-platform skill sync documented."},"skillsByRole":{"value":"yes","source":"https://github.com/speakeasy-api/gram","quote":"Centralise distribution of MCPs, Skills, Plugins and Assistants to your team based on enterprise roles.","note":"Plugin assignments by role, directory group or attribute via device agent; marketplace installs not restricted."},"skillsOverMcp":{"value":"not-published","source":null,"quote":null,"note":"Delivered as plugin packages and to assistants; Platform MCP used for authoring only."},"openSource":{"value":"AGPL-3.0","source":"https://github.com/speakeasy-api/gram","quote":"AGPL-3.0 license"},"selfHost":{"value":"yes","source":"https://www.speakeasy.com/index.md","quote":"The self-hosted option has no external dependencies."},"vpcOnPrem":{"value":"yes","source":"https://www.speakeasy.com/index.md","quote":"Speakeasy can be deployed in your own cloud or on-premises for full data residency control."},"airGapped":{"value":"not-published","source":null,"quote":null},"euRegion":{"value":"not-published","source":null,"quote":null},"soc2Type2":{"value":"yes","source":"https://www.speakeasy.com/security/soc-2","quote":"Speakeasy has completed a SOC 2 Type II audit."},"iso27001":{"value":"yes","source":"https://www.speakeasy.com/index.md","quote":"SOC 2 Type II audited, ISO 27001 certified, and GDPR compliant."},"hipaa":{"value":"partial","source":"https://www.speakeasy.com/","quote":"Speakeasy is SOC 2 Type II, ISO 27001 and CSA STAR AI certified, GDPR compliant and HIPAA ready.","note":"'HIPAA ready'; BAA available per enterprise page."},"gdprDpa":{"value":"yes","source":"https://www.speakeasy.com/index.md","quote":"SOC 2 Type II audited, ISO 27001 certified, and GDPR compliant.","note":"Enterprise page says DPAs offered."},"publicPricing":{"value":"no","source":"https://www.speakeasy.com/pricing","quote":"Every AI transformation is different"},"freeTier":{"value":"not-published","source":null,"quote":null,"note":"Pricing metadata says 'Start for free' but no free plan listed."},"startingPrice":{"value":"Enterprise: Tailored (contact sales)","source":"https://www.speakeasy.com/pricing","quote":"Tailored"},"pricingModel":{"value":"Custom enterprise contract; usage measured in requests (tool calls)","source":"https://www.speakeasy.com/pricing","quote":"A request is a tool call made by an LLM to your MCP server."},"llmGateway":{"value":"not-published","source":null,"quote":null,"note":"Costs come from client telemetry and provider integrations, not a proxy. Model Provider Keys settings page exists (for assistants)."},"costTrackingPerPerson":{"value":"yes","source":"https://www.speakeasy.com/docs/ai-control-plane","quote":"Attribute spend, tool calls, and agent sessions to people and teams, and export telemetry to existing backends.","note":"Per-member and per-role spend tables; Budgets in Preview."}},"sourcesVisited":["https://getgram.ai","https://ai.speakeasy.com/","https://github.com/speakeasy-api/gram","https://www.speakeasy.com/pricing","https://www.speakeasy.com/","https://www.speakeasy.com/index.md","https://speakeasy.com/enterprise","https://www.speakeasy.com/docs/ai-control-plane","https://www.speakeasy.com/docs/ai-control-plane/integrations","https://www.speakeasy.com/changelog","https://www.speakeasy.com/docs/ai-control-plane/mcp-gateway/skills","https://www.speakeasy.com/docs/ai-control-plane/mcp-gateway/access","https://www.speakeasy.com/docs/ai-control-plane/identity","https://www.speakeasy.com/docs/ai-control-plane/mcp-gateway/plugins","https://www.speakeasy.com/docs/ai-control-plane/secure/guardrails","https://www.speakeasy.com/docs/ai-control-plane/observe/costs","https://www.speakeasy.com/docs/ai-control-plane/observe/opentelemetry","https://www.speakeasy.com/security/soc-2","https://www.speakeasy.com/post/fundraising-series-a"]},{"id":"truefoundry","name":"TrueFoundry AI Gateway (MCP Gateway)","vendor":"TrueFoundry (Ensemble Labs Inc)","url":"https://www.truefoundry.com/","category":"mcp-gateway","frame":"direct","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"Enterprise AI gateway combining LLM routing, MCP server registry, guardrails and agent tooling; SaaS or self-hosted.","whereTheyWin":[{"text":"One gateway for both LLM traffic and MCP tool calls, with per-user/team cost tracking and budget limits alongside tool governance.","source":"https://www.truefoundry.com/docs/ai-gateway/cost-tracking.md"},{"text":"Built-in pre-tool and post-tool guardrails on MCP calls, including PII redaction, prompt-injection detection and Cedar/OPA permission checks.","source":"https://www.truefoundry.com/docs/ai-gateway/guardrails-overview"},{"text":"Enterprise deployment into customer VPC, on-prem or air-gapped Kubernetes, with SOC 2 Type 2 and HIPAA claims.","source":"https://www.truefoundry.com/docs/platform/security-and-compliance"}],"company":{"founded":"not-published on vendor site (footer shows (c) 2022 ENSEMBLE Technologies)","hq":"San Francisco, CA (Ensemble Labs Inc, 355 Bryant Street, Suite 403)","funding":"$19M Series A led by Intel Capital (Feb 6, 2025); ~$21M total per press","ownership":"Private, VC-backed (Intel Capital, Eniac Ventures, Peak XV Surge, Jump Capital)","source":"https://pulse2.com/truefoundry-19-million-series-a-raised-to-transform-ai-deployment/amp/"},"pricing":{"public":true,"model":"per seat + usage overage","freeTier":"yes","plans":[{"name":"Developer","price":"$0 free forever","unit":"up to 3 users","includes":"10K requests and tool calls per user/month; LLM + MCP Gateway; 5 MCP servers, 1 virtual MCP; 7-day log retention; SaaS only; community support","source":"https://www.truefoundry.com/pricing"},{"name":"Pro","price":"$25 per user / month","unit":"per user/month","includes":"Unlimited users; 20K requests and tool calls per user/month; guardrails; budget limiting; SSO & custom roles; 30-day log retention","source":"https://www.truefoundry.com/pricing"},{"name":"Enterprise","price":"Custom annual commitment","unit":"annual contract","includes":"Custom log retention and audit exports; external IdP mapping; VPC, on-prem and data residency deployment; SLA","source":"https://www.truefoundry.com/pricing"}],"extras":["Pro overage: + $20 per additional 100K requests","Model provider costs are pass-through, billed separately","Agent Gateway / Agent Harness pricing custom"],"source":"https://www.truefoundry.com/pricing"},"limits":[{"name":"Developer plan users","value":"Up to 3 users","source":"https://www.truefoundry.com/pricing"},{"name":"Developer plan MCP servers","value":"5 MCP servers, 1 virtual MCP","source":"https://www.truefoundry.com/pricing"},{"name":"Developer requests","value":"10K requests and tool calls per user per month","source":"https://www.truefoundry.com/pricing"},{"name":"Pro requests","value":"20K requests and tool calls per user per month; +$20 per additional 100K","source":"https://www.truefoundry.com/pricing"},{"name":"Log retention","value":"7 days (Developer), 30 days (Pro), custom (Enterprise)","source":"https://www.truefoundry.com/pricing"},{"name":"Tool description override","value":"up to 20,000 characters","source":"https://www.truefoundry.com/docs/ai-gateway/mcp/mcp-tool-management"}],"facts":{"catalogSize":{"value":"not-published","source":null,"quote":null,"note":"Curated registry of prebuilt servers (Slack, Confluence, Sentry, Datadog named); no count published."},"verifiedServers":{"value":"partial","source":"https://www.truefoundry.com/docs/ai-gateway/mcp-overview","quote":"Registry provides discoverable, curated MCP servers for multi-tenant use","note":"Curated, but no explicit verification program described."},"byoMcpServer":{"value":"yes","source":"https://www.truefoundry.com/docs/ai-gateway/mcp-overview","quote":"Register MCP servers, configure collaborators, and make MCP servers available through the AI Gateway.","note":"Also OpenAPI-to-MCP conversion."},"remoteMcpServers":{"value":"yes","source":"https://www.truefoundry.com/docs/ai-gateway/mcp-overview","quote":"cloud-hosted MCP infrastructure via streamable HTTP"},"localOrDockerServers":{"value":"partial","source":"https://www.truefoundry.com/docs/ai-gateway/mcp/stdio-mcp-server","quote":"Run a hosted MCP server via stdio and expose it through the AI Gateway.","note":"Gateway runs stdio servers as processes (npx/uvx); docs say recommended for local development in IDEs only."},"singleUrlAllTools":{"value":"yes","source":"https://www.truefoundry.com/docs/ai-gateway/mcp/virtual-mcp-server","quote":"enables you to combine tools from multiple MCP servers into a single, curated MCP server","note":"Via Virtual MCP Servers; Developer plan limited to 1 virtual MCP."},"versionPinning":{"value":"not-published","source":null,"quote":null},"schemaChangeMonitoring":{"value":"not-published","source":null,"quote":null},"worksInClaude":{"value":"not-published","source":null,"quote":null,"note":"Claude Desktop/claude.ai not named in IDE connection docs."},"worksInClaudeCode":{"value":"yes","source":"https://www.truefoundry.com/docs/ai-gateway/mcp/connect-mcp-from-ide","quote":"Add the server with the Claude Code CLI:"},"worksInChatGPT":{"value":"not-published","source":null,"quote":null},"worksInCursor":{"value":"yes","source":"https://www.truefoundry.com/docs/ai-gateway/mcp/connect-mcp-from-ide","quote":"After adding it, Cursor prompts you to install the server:"},"worksInCodex":{"value":"not-published","source":null,"quote":null},"worksInCopilot":{"value":"partial","source":"https://www.truefoundry.com/docs/ai-gateway/mcp/connect-mcp-from-ide","quote":"Add the AI Gateway URL to `.vscode/mcp.json` in your workspace:","note":"VS Code documented; Copilot not named explicitly."},"customAgentsSdk":{"value":"yes","source":"https://www.truefoundry.com/docs/ai-gateway/mcp-overview","quote":"AI agents connect to one gateway, access multiple MCP servers."},"ownChatUiRequired":{"value":"no","source":"https://www.truefoundry.com/docs/ai-gateway/mcp/connect-mcp-from-ide","quote":"Developers use tools like Cursor, Claude Code, and VS Code to interact with MCP servers"},"perUserOAuth":{"value":"yes","source":"https://www.truefoundry.com/docs/ai-gateway/mcp/mcp-gateway-auth-security","quote":"With this approach, User A and User B get different data based on their own OAuth authorizations."},"managedOAuthApps":{"value":"not-published","source":null,"quote":null},"byoOAuthApp":{"value":"yes","source":"https://www.truefoundry.com/docs/ai-gateway/mcp/mcp-gateway-auth-security","quote":"Enter the Token URL, Client ID, and Client Secret from your Auth0 application.","note":"Admin supplies OAuth client credentials per server."},"sso":{"value":"partial","source":"https://www.truefoundry.com/mcp-gateway","quote":"Support federated login via Okta, Azure AD, and other IdPs","note":"Pricing lists SSO & custom roles on Pro and above; not on free Developer plan."},"scim":{"value":"yes","source":"https://www.truefoundry.com/docs/platform/sso/okta/scim","quote":"This guide explains how to push users and groups from Okta into TrueFoundry automatically using SCIM 2.0.","note":"Pricing FAQ ties SCIM to Enterprise."},"roleBasedToolAccess":{"value":"yes","source":"https://www.truefoundry.com/mcp-gateway","quote":"Apply RBAC policies per MCP Server for fine-grained control","note":"RBAC is per MCP server; tool-level curation via virtual servers."},"toolLevelAllowDeny":{"value":"yes","source":"https://www.truefoundry.com/docs/ai-gateway/mcp/mcp-tool-management","quote":"Toggle a tool on or off on its row."},"readOnlyModes":{"value":"partial","source":"https://www.truefoundry.com/docs/ai-gateway/mcp/mcp-tool-management","quote":"sets `readOnlyHint` or `destructiveHint` for clients that respect MCP tool annotations","note":"Annotation hint only, not an enforced read-only mode."},"auditLogPerPerson":{"value":"yes","source":"https://www.truefoundry.com/docs/ai-gateway/mcp-overview","quote":"Complete visibility and audit trail for all tools usage.","note":"Access resolved to user, team or virtual account identity."},"callTracing":{"value":"yes","source":"https://www.truefoundry.com/mcp-gateway","quote":"Trace every MCP Server call, agent decision, and LLM request"},"logExportSiem":{"value":"yes","source":"https://www.truefoundry.com/docs/ai-gateway/splunk","quote":"TrueFoundry AI Gateway supports exporting OpenTelemetry traces to Splunk over OTLP/HTTP","note":"OTel trace export; audit exports listed as Enterprise on pricing."},"dlpRedaction":{"value":"yes","source":"https://www.truefoundry.com/docs/ai-gateway/guardrails-overview","quote":"Finds and redacts personally identifiable information with configurable entity categories."},"promptInjectionDetection":{"value":"yes","source":"https://www.truefoundry.com/docs/ai-gateway/guardrails-overview","quote":"Detects prompt injection attacks and jailbreak attempts using model-based analysis."},"toolPoisoningProtection":{"value":"partial","source":"https://www.truefoundry.com/docs/ai-gateway/guardrails-overview","quote":"Post Tool guardrails check (and optionally rewrite) the tool's output.","note":"No explicit tool-poisoning feature; post-tool guardrails can inspect outputs."},"skillsAuthoring":{"value":"yes","source":"https://truefoundry.com/agent-skills-registry","quote":"Teams can create Skills through the TrueFoundry UI"},"skillsGitSync":{"value":"not-published","source":null,"quote":null,"note":"CLI upload and declarative tfy apply via CI/CD described; no Git sync."},"skillsByRole":{"value":"partial","source":"https://truefoundry.com/agent-skills-registry","quote":"Skills are versioned artifacts with built-in access control and auditability.","note":"Access control mentioned; role/team assignment not detailed."},"skillsOverMcp":{"value":"not-published","source":null,"quote":null},"openSource":{"value":"not-published","source":null,"quote":null,"note":"Vendor open-sources other projects (TrueForge agent harness, KubeElasti, CruiseKube)."},"selfHost":{"value":"partial","source":"https://www.truefoundry.com/docs/platform/security-and-compliance","quote":"ControlPlane can be selfhosted within your VPC in our enterprise plan.","note":"Enterprise only."},"vpcOnPrem":{"value":"partial","source":"https://www.truefoundry.com/mcp-gateway","quote":"VPC, on-prem, air-gapped, or across multiple clouds.","note":"Enterprise plan per pricing page."},"airGapped":{"value":"partial","source":"https://www.truefoundry.com/mcp-gateway","quote":"VPC, on-prem, air-gapped, or across multiple clouds.","note":"Enterprise plan."},"euRegion":{"value":"yes","source":"https://www.truefoundry.com/docs/platform/security-and-compliance","quote":"In our SAAS hosted gateway, you can choose the region of the AI Gateway deployment and the logs storage.","note":"Control plane primary in eu-west-1."},"soc2Type2":{"value":"yes","source":"https://www.truefoundry.com/docs/platform/security-and-compliance","quote":"Certified for security, availability, processing integrity, confidentiality, and privacy","note":"Listed under SOC 2 Type II."},"iso27001":{"value":"not-published","source":null,"quote":null},"hipaa":{"value":"yes","source":"https://www.truefoundry.com/docs/platform/security-and-compliance","quote":"Compliant with Health Insurance Portability and Accountability Act for healthcare data"},"gdprDpa":{"value":"yes","source":"https://www.truefoundry.com/docs/platform/security-and-compliance","quote":"TrueFoundry is GDPR compliant and provides:","note":"Customer-facing DPA availability not explicitly stated; DPAs signed with sub-processors."},"publicPricing":{"value":"yes","source":"https://www.truefoundry.com/pricing","quote":"$25 per user / month"},"freeTier":{"value":"yes","source":"https://www.truefoundry.com/pricing","quote":"$0 free forever","note":"Up to 3 users, SaaS only."},"startingPrice":{"value":"$25 per user/month (Pro); $0 Developer up to 3 users","source":"https://www.truefoundry.com/pricing","quote":"$25 per user / month"},"pricingModel":{"value":"Per user/month plus request overage ($20 per additional 100K requests); Enterprise custom annual","source":"https://www.truefoundry.com/pricing","quote":"+ $20 per additional 100K requests"},"llmGateway":{"value":"yes","source":"https://www.truefoundry.com/","quote":"The Enterprise AI Gateway for LLMs, MCPs & Agents"},"costTrackingPerPerson":{"value":"yes","source":"https://www.truefoundry.com/docs/ai-gateway/cost-tracking.md","quote":"Metrics shows total cost and usage trends, filterable by user, virtual account, team, and model."}},"sourcesVisited":["https://www.truefoundry.com/docs/ai-gateway/mcp-overview","https://www.truefoundry.com/pricing-copy","https://www.truefoundry.com/pricing","https://www.truefoundry.com/docs/ai-gateway/mcp/mcp-gateway-auth-security","https://www.truefoundry.com/docs/ai-gateway/mcp/connect-mcp-from-ide","https://www.truefoundry.com/docs/ai-gateway/mcp/mcp-tool-management","https://www.truefoundry.com/docs/ai-gateway/mcp/virtual-mcp-server","https://www.truefoundry.com/docs/platform/security-and-compliance","https://truefoundry.com/agent-skills-registry","https://www.truefoundry.com/","https://pulse2.com/truefoundry-19-million-series-a-raised-to-transform-ai-deployment/amp/","https://www.truefoundry.com/mcp-gateway","https://www.truefoundry.com/about","https://www.truefoundry.com/docs/ai-gateway/guardrails-overview","https://www.truefoundry.com/blog/mcp-tool-approval-human-gate-call-path","https://www.truefoundry.com/docs/platform/sso/okta/scim","https://www.truefoundry.com/docs/ai-gateway/splunk","https://www.truefoundry.com/docs/ai-gateway/cost-tracking.md","https://www.truefoundry.com/docs/ai-gateway/mcp/stdio-mcp-server"]},{"id":"workato","name":"Workato Enterprise MCP (MCP Gateway + MCP Registry)","vendor":"Workato","url":"https://www.workato.com","category":"integration-platform","frame":"direct","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"iPaaS vendor that turns recipes, APIs and prebuilt connectors into hosted MCP servers, governed by an MCP Gateway and Registry.","whereTheyWin":[{"text":"MCP tools can be built from existing Workato recipes, API collections and skills, so customers already running Workato automations get multi-step, deterministic workflows as MCP tools without new code.","source":"https://docs.workato.com/en/mcp/mcp-servers"},{"text":"Broad compliance stack beyond SOC 2/ISO 27001: SOC 1 Type II, PCI-DSS Level 1, HIPAA with BAAs, IRAP PROTECTED and NIST 800-171A, which matters in regulated and public-sector deals.","source":"https://docs.workato.com/en/security/security-compliance"},{"text":"Multi-region hosting (US, EU, AU, SG, JP) for MCP and an established enterprise iPaaS install base with procurement already in place.","source":"https://docs.workato.com/en/mcp/faqs"}],"company":{"founded":"2013","hq":"Mountain View, California, US","funding":"Series E (Nov 2021) at $5.7B valuation; Wikipedia states over $200M in Series E","ownership":"Private, venture-backed; acquired DeepConverse (Mar 2025) and XMAD.ai (Aug 2025)","source":"https://en.wikipedia.org/wiki/Workato"},"pricing":{"public":true,"model":"usage (Workato credits) + platform edition; Enterprise editions contact sales","freeTier":"yes","plans":[{"name":"Workato Free","price":"$0","unit":"50,000-credit one-time grant","includes":"Self-service sign-up; MCP inclusion not stated","source":"https://docs.workato.com/en/pricing/self-service/self-service"},{"name":"Workato Pro","price":"$75/month (2,500 credits) to $1,275/month (50,000 credits)","unit":"per month, credit card, credits expire monthly","includes":"Tiers: $75/2,500, $100/3,500, $275/10,000, $780/30,000, $1,275/50,000 credits; MCP inclusion not stated","source":"https://docs.workato.com/en/pricing/self-service/self-service"},{"name":"Workato Enterprise editions","price":"not published","unit":"platform edition + credits + add-ons (contract)","includes":"Enterprise MCP access via Customer Success / contract","source":"https://docs.workato.com/en/pricing/overview"}],"extras":["Optional add-ons referenced on billing overview; prices not published"],"source":"https://docs.workato.com/en/pricing/overview"},"limits":[{"name":"Named tokens per MCP server","value":"Up to 100","source":"https://www.workato.com/product-hub/product-scoop-july-2026/"},{"name":"IP allow/block list entries","value":"500 per list","source":"https://docs.workato.com/en/mcp/mcp-gateway"},{"name":"Default rate limits","value":"None enforced by default; admin-configurable","source":"https://docs.workato.com/en/mcp/faqs"},{"name":"Registry scope","value":"Registry available only within the environment where it was created","source":"https://docs.workato.com/en/mcp/mcp-registry"}],"facts":{"catalogSize":{"value":"12,000+ apps (connectors); first-party prebuilt MCP servers launched with 8 in Feb 2026","source":"https://www.workato.com/agentic/mcp","quote":"Workato Enterprise MCP provides AI agents secure, governed access to 12,000+ apps","note":"12,000+ is app connectivity, not ready-made MCP servers. Workato blog claims 'hundreds of pre-built MCP servers'."},"verifiedServers":{"value":"yes","source":"https://docs.workato.com/mcp/mcp-server-registry.html","quote":"Workato provides a registry of prebuilt MCP servers that you can add to your projects.","note":"Workato-built and hosted prebuilt servers."},"byoMcpServer":{"value":"yes","source":"https://docs.workato.com/en/mcp/mcp-gateway","quote":"Proxy servers enable MCP clients to connect to remote third-party MCP servers through Workato."},"remoteMcpServers":{"value":"yes","source":"https://docs.workato.com/en/mcp/mcp-servers","quote":"Select External MCP Server as your tool source"},"localOrDockerServers":{"value":"not-published","source":null,"quote":null},"singleUrlAllTools":{"value":"partial","source":"https://docs.workato.com/en/mcp/mcp-servers","quote":"Your API recipe collections and AI gateway collections generate unique, authenticated MCP URLs.","note":"Each MCP server has its own URL; a server can combine tools from a project, but no single org-wide URL for all tools is documented."},"versionPinning":{"value":"partial","source":"https://www.workato.com/product-hub/product-scoop-july-2026/","quote":"only approved versions become visible to developers and agents","note":"Registry lifecycle governs approved server versions (Aug 2026); client-side pinning not documented."},"schemaChangeMonitoring":{"value":"not-published","source":null,"quote":null},"worksInClaude":{"value":"yes","source":"https://docs.workato.com/en/mcp/ai-model-publication","quote":"The connector is available to everyone in your team to connect and authenticate."},"worksInClaudeCode":{"value":"yes","source":"https://www.workato.com/product-hub/product-scoop-july-2026/","quote":"Connect from Claude Code, Claude Desktop, Cursor, or ChatGPT via the AIRO MCP server","note":"Quote refers to the AIRO builder MCP server; other Workato MCP servers are standard remote MCP URLs."},"worksInChatGPT":{"value":"yes","source":"https://www.workato.com/agentic/mcp","quote":"Works with Claude Desktop, ChatGPT, Workato Genies, Cursor, and any MCP-compatible agent"},"worksInCursor":{"value":"yes","source":"https://www.workato.com/agentic/mcp","quote":"Works with Claude Desktop, ChatGPT, Workato Genies, Cursor, and any MCP-compatible agent"},"worksInCodex":{"value":"not-published","source":null,"quote":null},"worksInCopilot":{"value":"yes","source":"https://docs.workato.com/en/mcp/ai-model-publication","quote":"Upload the ZIP file and select the users or groups who can access the MCP server tools.","note":"Microsoft Copilot via published agent ZIP in M365 admin center."},"customAgentsSdk":{"value":"yes","source":"https://www.workato.com/agentic/mcp","quote":"Works with Claude Desktop, ChatGPT, Workato Genies, Cursor, and any MCP-compatible agent"},"ownChatUiRequired":{"value":"no","source":"https://www.workato.com/agentic/mcp","quote":"Works with Claude Desktop, ChatGPT, Workato Genies, Cursor, and any MCP-compatible agent"},"perUserOAuth":{"value":"yes","source":"https://docs.workato.com/en/mcp/faqs","quote":"enables end users to authenticate with their own credentials when interacting with MCP tools","note":"Verified User Access (VUA); requires OAuth 2.0 auth-code connections."},"managedOAuthApps":{"value":"not-published","source":null,"quote":null},"byoOAuthApp":{"value":"not-published","source":null,"quote":null},"sso":{"value":"yes","source":"https://docs.workato.com/en/workato-identity","quote":"Workato Identity supports SAML-based SSO","note":"Workato Identity governs access for Agent Studio, Workato GO, MCP and API portal."},"scim":{"value":"yes","source":"https://docs.workato.com/en/workato-identity/scim-provisioning","quote":"Refer to the following IdP resources for IdP-specific SCIM provisioning configuration information and examples:","note":"Okta, Microsoft Entra ID and OneLogin guides linked."},"roleBasedToolAccess":{"value":"yes","source":"https://www.workato.com/agentic/mcp","quote":"enforcing role-based access control","note":"Gateway docs: access controlled through end-user groups and tool-level subgroups."},"toolLevelAllowDeny":{"value":"yes","source":"https://docs.workato.com/mcp/mcp-server-registry.html","quote":"Your LLM can only access active tools in your MCP server connector."},"readOnlyModes":{"value":"partial","source":"https://www.workato.com/product-hub/product-scoop-july-2026/","quote":"Let AI agents use these hints to decide how to act","note":"Tool annotations (hints) added Jul/Aug 2026; no enforced read-only mode documented."},"auditLogPerPerson":{"value":"yes","source":"https://www.workato.com/product-hub/product-scoop-july-2026/","quote":"every action an agent takes is secure, traceable, and attributed to the person who authorized it","note":"Gateway server logs record calling user, auth method, source IP, tool, inputs/outputs."},"callTracing":{"value":"yes","source":"https://www.workato.com/agentic/mcp","quote":"Track every agent request, response, and system event with searchable logs"},"logExportSiem":{"value":"yes","source":"https://docs.workato.com/en/mcp/mcp-gateway","quote":"You can stream logs to any Security Information and Event Management (SIEM) app."},"dlpRedaction":{"value":"yes","source":"https://www.workato.com/platform/ai-gateway","quote":"PII masking, prompt-injection screening, and content moderation are defined once.","note":"Workato AI Gateway policy layer; not described in MCP Gateway docs."},"promptInjectionDetection":{"value":"yes","source":"https://www.workato.com/platform/ai-gateway","quote":"PII masking, prompt-injection screening, and content moderation are defined once."},"toolPoisoningProtection":{"value":"not-published","source":null,"quote":null},"skillsAuthoring":{"value":"partial","source":"https://www.workato.com/agentic/mcp","quote":"Convert existing Recipe Functions and Skills into MCP servers with zero code","note":"Workato 'skills' are recipe-based workflows exposed as tools, not SKILL.md instruction files."},"skillsGitSync":{"value":"not-published","source":null,"quote":null},"skillsByRole":{"value":"not-published","source":null,"quote":null},"skillsOverMcp":{"value":"partial","source":"https://www.workato.com/agentic/mcp","quote":"Convert existing Recipe Functions and Skills into MCP servers with zero code","note":"Skills become MCP tools; no SKILL.md-style skill delivery documented."},"openSource":{"value":"not-published","source":null,"quote":null,"note":"Proprietary SaaS; no public source repo found."},"selfHost":{"value":"not-published","source":null,"quote":null,"note":"Workato hosts MCP servers; an on-prem agent connects to on-prem systems."},"vpcOnPrem":{"value":"not-published","source":null,"quote":null},"airGapped":{"value":"not-published","source":null,"quote":null},"euRegion":{"value":"yes","source":"https://docs.workato.com/en/mcp/faqs","quote":"MCP is available in the US, EU, AU, SG, and JP data centers."},"soc2Type2":{"value":"yes","source":"https://docs.workato.com/en/security/security-compliance","quote":"SOC 2 Type II"},"iso27001":{"value":"yes","source":"https://docs.workato.com/en/security/security-compliance","quote":"ISO 27001"},"hipaa":{"value":"yes","source":"https://docs.workato.com/en/security/security-compliance","quote":"HIPAA","note":"Business Associate Agreements available."},"gdprDpa":{"value":"yes","source":"https://www.workato.com/legal/dpa","quote":"Data Processing Addendum for the Workato Platform","note":"DPA published; GDPR not named."},"publicPricing":{"value":"partial","source":"https://docs.workato.com/en/pricing/self-service/self-service","quote":"2,500–50,000 credits/month, recurring","note":"Self-service Pro tiers published; Enterprise editions (where Enterprise MCP is sold) are contract-only."},"freeTier":{"value":"yes","source":"https://docs.workato.com/en/pricing/self-service/self-service","quote":"50,000-credit one-time grant","note":"Whether MCP is usable on Free is not stated."},"startingPrice":{"value":"$75/month (Workato Pro, 2,500 credits); Enterprise MCP pricing not published","source":"https://docs.workato.com/en/pricing/self-service/self-service","quote":"2,500–50,000 credits/month, recurring"},"pricingModel":{"value":"Usage-based: platform edition + Workato credits + add-ons","source":"https://docs.workato.com/en/pricing/overview","quote":"Workato uses a usage-based billing model with the following components:"},"llmGateway":{"value":"yes","source":"https://www.workato.com/platform/ai-gateway","quote":"One layer that governs every model call, every tool, every agent, and every API request."},"costTrackingPerPerson":{"value":"not-published","source":null,"quote":null}},"sourcesVisited":["https://www.workato.com/agentic/mcp","https://docs.workato.com/en/mcp/faqs","https://docs.workato.com/mcp/mcp-server-registry.html","https://docs.workato.com/en/mcp/ai-model-publication","https://workato.com/enterprise-skills","https://docs.workato.com/en/pricing/overview","https://docs.workato.com/en/security/security-compliance","https://www.workato.com/product-hub/product-scoop-july-2026/","https://www.businesswire.com/news/home/20260205680021/en","https://docs.workato.com/en/mcp/mcp-registry","https://docs.workato.com/en/mcp/manage-mcp-registry","https://docs.workato.com/en/mcp/mcp-gateway","https://docs.workato.com/en/mcp/mcp-servers","https://docs.workato.com/en/workato-identity","https://docs.workato.com/en/workato-identity/scim-provisioning","https://www.workato.com/platform/ai-gateway","https://en.wikipedia.org/wiki/Workato","https://docs.workato.com/en/pricing","https://docs.workato.com/en/pricing/self-service/self-service","https://www.workato.com/legal/dpa","https://www.workato.com/the-connector/enterprise-mcp-guide/"]},{"id":"zapier-mcp","name":"Zapier MCP","vendor":"Zapier","url":"https://zapier.com/mcp","category":"integration-platform","frame":"direct","checkedAt":"2026-10-17","reviewedBy":"Karim Rahme","summary":"Zapier's MCP server exposing actions across 9,000+ apps to AI clients, billed at two Zapier tasks per call.","whereTheyWin":[{"text":"Broadest app catalog (9,000+ apps, 30,000-40,000+ actions) and an existing Zapier install base of 2M+ businesses.","source":"https://docs.zapier.com/mcp/home"},{"text":"Included in every Zapier plan, including Free; companies already paying for Zapier get MCP with no new vendor or contract.","source":"https://zapier.com/mcp"},{"text":"Documented setup for 30+ MCP clients, plus guided org rollouts for Claude, ChatGPT, Cursor and Slack workspaces.","source":"https://docs.zapier.com/mcp/get-started/connect"}],"company":{"founded":"not-published","hq":"not-published (remote company, 800+ people across 38 countries)","funding":"not-published","ownership":"Private","source":"https://zapier.com/about"},"pricing":{"public":true,"model":"usage (task quota per plan; MCP tool call = 2 tasks)","freeTier":"yes","plans":[{"name":"Free","price":"$0","unit":"per month","includes":"100 tasks/month; Zapier MCP included","source":"https://zapier.com/pricing"},{"name":"Professional","price":"Starting from $19.99","unit":"per month (task tiers; yearly billing saves 33%)","includes":"Task tiers from 100 up to 2M tasks/month","source":"https://zapier.com/pricing"},{"name":"Team","price":"Starting from $69","unit":"per month (task tiers; yearly billing saves 33%)","includes":"SAML SSO listed; MCP server sharing","source":"https://zapier.com/pricing"},{"name":"Enterprise","price":"Contact for pricing","unit":"annual task limits","includes":"Unlimited users, advanced admin permissions and app controls, SCIM, audit log, observability, TAM","source":"https://zapier.com/pricing"}],"extras":["Pay-per-task overage billed at a higher per-task rate than base subscription tasks (rate not published)","Each MCP tool call consumes 2 tasks; failed calls don't count"],"source":"https://zapier.com/pricing"},"limits":[{"name":"Task cost per MCP tool call","value":"2 tasks per successful call","source":"https://zapier.com/mcp"},{"name":"Free plan tasks","value":"100/month","source":"https://zapier.com/pricing"},{"name":"Servers per client","value":"Unlimited servers, but one per named MCP client","source":"https://docs.zapier.com/mcp/home"},{"name":"Transport","value":"Streamable HTTP only; SSE not supported","source":"https://docs.zapier.com/mcp/home"},{"name":"Server sharing","value":"Team and Enterprise plans only","source":"https://docs.zapier.com/mcp/manage/server-access"}],"facts":{"catalogSize":{"value":"9,000+ apps, 40,000+ actions","source":"https://docs.zapier.com/mcp/home","quote":"9,000+ apps and 40,000+ actions","note":"zapier.com/mcp cites 30,000+ actions in one place and 66,000+ triggers and actions in another."},"verifiedServers":{"value":"not-published","source":null,"quote":null},"byoMcpServer":{"value":"not-published","source":null,"quote":null,"note":"Docs only cover Zapier's own server; no way to add third-party MCP servers found."},"remoteMcpServers":{"value":"not-published","source":null,"quote":null},"localOrDockerServers":{"value":"not-published","source":null,"quote":null},"singleUrlAllTools":{"value":"yes","source":"https://docs.zapier.com/mcp/get-started/connect","quote":"pre-enables actions for the apps already connected to your own Zapier account","note":"One server per user/client; the agent can discover and enable more actions dynamically."},"versionPinning":{"value":"not-published","source":null,"quote":null},"schemaChangeMonitoring":{"value":"not-published","source":null,"quote":null},"worksInClaude":{"value":"yes","source":"https://docs.zapier.com/mcp/get-started/connect","quote":"Claude, Claude Code, ChatGPT, Cursor, Codex"},"worksInClaudeCode":{"value":"yes","source":"https://docs.zapier.com/mcp/get-started/connect","quote":"Claude, Claude Code, ChatGPT, Cursor, Codex"},"worksInChatGPT":{"value":"yes","source":"https://docs.zapier.com/mcp/get-started/connect","quote":"Claude, Claude Code, ChatGPT, Cursor, Codex"},"worksInCursor":{"value":"yes","source":"https://docs.zapier.com/mcp/get-started/connect","quote":"Claude, Claude Code, ChatGPT, Cursor, Codex"},"worksInCodex":{"value":"yes","source":"https://docs.zapier.com/mcp/get-started/connect","quote":"Claude, Claude Code, ChatGPT, Cursor, Codex"},"worksInCopilot":{"value":"partial","source":"https://docs.zapier.com/mcp/get-started/connect","quote":"Microsoft Copilot Studio","note":"Copilot Studio and VS Code are listed; GitHub Copilot CLI mentioned only for programmatic installs."},"customAgentsSdk":{"value":"yes","source":"https://docs.zapier.com/mcp/get-started/connect","quote":"Anthropic API, OpenAI API, Python, TypeScript","note":"Code integrations use a long-lived connection token."},"ownChatUiRequired":{"value":"no","source":"https://docs.zapier.com/mcp/get-started/connect","quote":"Zapier MCP works with any MCP client that supports Streamable HTTP."},"perUserOAuth":{"value":"yes","source":"https://docs.zapier.com/mcp/get-started/rollout/overview","quote":"each member still signs in and runs tool calls as themselves","note":"Users authenticate to Zapier; app access runs through each user's own Zapier app connections (or account-shared connections)."},"managedOAuthApps":{"value":"yes","source":"https://zapier.com/mcp","quote":"Your app credentials stay in Zapier's managed connection layer instead of being passed into the model."},"byoOAuthApp":{"value":"not-published","source":null,"quote":null},"sso":{"value":"partial","source":"https://docs.zapier.com/mcp/manage/security","quote":"is supported and extends to MCP access","note":"SAML SSO; security page says 'Enterprise adds SSO (SAML) and SCIM provisioning'; pricing page lists SAML SSO for Team and Enterprise."},"scim":{"value":"partial","source":"https://zapier.com/security-compliance","quote":"Enterprise adds SSO (SAML) and SCIM provisioning.","note":"Enterprise only."},"roleBasedToolAccess":{"value":"partial","source":"https://docs.zapier.com/mcp/get-started/rollout/overview","quote":"lets you decide which members it applies to and what policy, if any, is set","note":"Controls are account/workspace-level app and action restrictions (Enterprise), not per-role tool sets."},"toolLevelAllowDeny":{"value":"partial","source":"https://docs.zapier.com/mcp/manage/security","quote":"Zapier MCP automatically enforces any app and action restrictions set at the account level.","note":"App/action restrictions are an Enterprise admin control."},"readOnlyModes":{"value":"not-published","source":null,"quote":null},"auditLogPerPerson":{"value":"yes","source":"https://docs.zapier.com/mcp/manage/security","quote":"displays user-level activity logs for tool calls","note":"History tab; superadmins can review any user. MCP events also go to the account audit log (Enterprise)."},"callTracing":{"value":"yes","source":"https://zapier.com/mcp","quote":"a record of what ran"},"logExportSiem":{"value":"not-published","source":null,"quote":null},"dlpRedaction":{"value":"not-published","source":null,"quote":null},"promptInjectionDetection":{"value":"not-published","source":null,"quote":null},"toolPoisoningProtection":{"value":"not-published","source":null,"quote":null},"skillsAuthoring":{"value":"partial","source":"https://docs.zapier.com/mcp/home","quote":"as skills on their Zapier MCP server so their MCP client can run them again","note":"'Skills' are saved Zapier workflows (Next Gen Zaps, early access, paid plans), not SKILL.md-style agent skills."},"skillsGitSync":{"value":"not-published","source":null,"quote":null},"skillsByRole":{"value":"not-published","source":null,"quote":null},"skillsOverMcp":{"value":"partial","source":"https://docs.zapier.com/mcp/home","quote":"as skills on their Zapier MCP server so their MCP client can run them again","note":"Saved workflows exposed on the user's MCP server; early access."},"openSource":{"value":"not-published","source":null,"quote":null,"note":"Closed SaaS; github.com/zapier/zapier-mcp holds plugin manifests and onboarding skills only."},"selfHost":{"value":"not-published","source":null,"quote":null},"vpcOnPrem":{"value":"not-published","source":null,"quote":null,"note":"Enterprise lists 'Advanced deployment options' without detail."},"airGapped":{"value":"not-published","source":null,"quote":null},"euRegion":{"value":"no","source":"https://zapier.com/security-compliance","quote":"Zapier stores data on Amazon Web Services (AWS) in the United States.","note":"No EU region mentioned."},"soc2Type2":{"value":"yes","source":"https://zapier.com/security-compliance","quote":"SOC 2 (Type II) and SOC 3 certified, audited annually by an independent firm."},"iso27001":{"value":"not-published","source":null,"quote":null},"hipaa":{"value":"no","source":"https://zapier.com/blog/is-zapier-hipaa-compliant/","quote":"No, Zapier isn't HIPAA compliant.","note":"Will not sign a BAA (Oct 9, 2025 post)."},"gdprDpa":{"value":"yes","source":"https://zapier.com/security-compliance","quote":"supports compliance through a DPA included in your agreement"},"publicPricing":{"value":"yes","source":"https://zapier.com/pricing","quote":"Starting from $19.99/month"},"freeTier":{"value":"yes","source":"https://zapier.com/pricing","quote":"Free forever"},"startingPrice":{"value":"$19.99/month (Professional); Free plan with 100 tasks/month","source":"https://zapier.com/pricing","quote":"Starting from $19.99/month"},"pricingModel":{"value":"Task-based: plan task quota shared with Zaps; each MCP tool call uses 2 tasks","source":"https://zapier.com/mcp","quote":"Each tool call uses two tasks from your existing task quota—the same bucket your Zaps use."},"llmGateway":{"value":"not-published","source":null,"quote":null,"note":"No LLM routing; model is whatever the connected AI client uses (BYO client/model by design)."},"costTrackingPerPerson":{"value":"not-published","source":null,"quote":null}},"sourcesVisited":["https://zapier.com/mcp","https://zapier.com/pricing","https://docs.zapier.com/mcp/get-started/connect","https://docs.zapier.com/mcp/overview/how-connections-work","https://zapier.com/security-compliance","https://zapier.com/blog/is-zapier-hipaa-compliant/","https://docs.zapier.com/mcp/manage/security","https://docs.zapier.com/mcp/get-started/rollout/overview","https://docs.zapier.com/mcp/home","https://docs.zapier.com/mcp/manage/server-access","https://zapier.com/about"]}]}