Enterprise MCP Gateway Security in Practice with Agentgateway
Published by the Agentic AI Foundation: three security contracts for protocol translation, request inspection, and session reuse in enterprise MCP gateways.
Agentgateway
Your Session, My Policy: An MCP Gateway Authorization Bypass in Agentgateway, and the Move to Stateless MCP
An MCP session could reuse a restricted backend under another route’s permissive policy. A two-route reproduction explains the authorization bypass and Agentgateway v1.4.0’s fix.