Your Session, My Policy: An MCP Gateway Session Reuse Bypass in Agentgateway
MCP gateways become enterprise security boundaries Companies now run MCP in production beyond its original local-tool use case. The 2026 MCP roadmap identifies four enterprise concerns: audit trails, SSO authentication, gateway behavior, and configuration portability. The Enterprise-Managed Authorization extension lets organizations control MCP server access through their identity provider. Organizations use MCP gateways to implement these controls. MintMCP centralizes server hosting, OAuth and SSO, role-based access, and audit logs. Open-source Agentgateway routes MCP requests, validates JWT and OIDC identities, calls external authorization services, and enforces CEL policies for tool access. Teams can buy this layer, deploy an open-source gateway, or build one into an internal platform. ...