Platform / Agent Gateway
The MCP Gateway that pays for itself.
Unmanaged MCP burns tokens and breaks trust. Agent Gateway is the enterprise control layer — governed MCP Servers, composite tools that reduce token costs by an order of magnitude, and full observability over every agent interaction with your stack.
What it does.
Managed MCP Servers
Spin up, version, publish, and deprecate MCP Servers on a governed path. IT approves what gets built, enforces policies, and retires servers safely — no shadow MCP, no rogue tool sprawl.
700+ MCP servers
Any Tray.ai connector becomes a managed MCP server — each with multiple tools, the right auth, and governed scope.
Agent permissions & RBAC
Centralised control over which agents and teams can access which MCP tools. Workspace-based isolation, team-level scopes, and monitoring across every tool call.
Observability + audit
Every MCP call traced to a user, agent, and purpose. Token costs, latencies, errors, and outcomes in one view.
Dynamic authentication
Prompt for auth as needed within composite tools — OAuth flows triggered in context, not pre-wired. API keys, JWT, and signed requests also supported.
Publish composite tools
Package multi-step workflows as a single MCP tool. Fewer tools, less token burn, and more deterministic agent behaviour when you need it.
500+ → ~20 MCP tools consolidated to governed workflows
“We can now use Tray.ai to spin up new MCP Tools on a managed path. IT approves what's built, enforces policies and permissions, versions it, and publishes. We get centralized visibility and auditability across the MCP Servers and Tools we deploy — reducing risk.”
What you can build
See what teams build with Agent Gateway.
See the MCP servers and tools teams are deploying — short walkthroughs of each build.
-
IT service desk
Governed tools for Okta, Jira, Active Directory, and ServiceNow — packaged so agents can reset passwords, provision software, and close tickets without raw API access.
-
Customer 360
One composite tool that queries Salesforce, Zendesk, and Stripe. Agents get the full customer picture in a single governed call — no token sprawl across three raw connectors.
-
HR self-service
Employees ask about benefits, time off, and payroll through an agent that queries your HRIS — governed MCP tools that answer without exposing raw HR system access.
-
Lead enrichment
Apollo, LinkedIn, and Salesforce composed into a single governed enrichment tool. Agents enrich and route leads without needing access to raw CRM APIs.
-
Incident response
PagerDuty, Slack, Jira, and monitoring tools packaged under IT-approved MCP. Agents respond to incidents within policy — every action logged and traceable.
-
Contract intelligence
Agents query DocuSign, Salesforce, and your CLM for contract terms, renewal dates, and obligations — governed MCP tools that answer questions without raw system access.
-
Procurement approvals
Agents check budgets, query vendor data, and route approvals — governed MCP tools across NetSuite, Coupa, and Slack so procurement moves fast without bypassing controls.
-
DevOps & infrastructure
Log queries, deployment monitoring, and config diffs across your toolchain — packaged as governed MCP tools so agents act without direct infrastructure access.
-
Conversational BI
Natural language queries against Snowflake, Databricks, and BigQuery as governed MCP. Agents answer data questions without raw warehouse access.
Why is Agent Gateway different?
Built different. By design.
10× lower token costs
Package multi-step workflows as a single MCP tool. Unmanaged MCP burns tokens fast — composite tools cut consumption by an order of magnitude.
Predictable execution, by design
Composite tools constrain exactly what an agent does — no reasoning through raw APIs, no unexpected actions. You define the behaviour; the agent executes it.
Auth that meets the moment
OAuth flows triggered in context, not pre-wired. Agents prompt for auth as needed within composite tools — the right credentials, at the right moment.
Teams already running on Agent Gateway
Real results from teams running in production.
Frequently asked questions
Do we have to use Merlin to use Agent Gateway? +
No. Agent Gateway governs MCP regardless of the client. Bring Copilot Studio, Claude, OpenAI, your own framework — Agent Gateway enforces the same policies across all of them.
How does token-cost optimization work? +
Agent Gateway exposes curated, composable tools instead of raw per-connector APIs. That typically cuts token consumption by an order of magnitude vs. hitting raw MCP servers directly.
What about on-prem or private connectivity? +
Region-specific hosting and on-premise connectors are available on Enterprise plans — so MCP Tools can operate on data that never leaves your network.
Why is MCP governance urgent now? +
2026 is the tipping point for enterprise MCP adoption — and the window to get governance right before it sprawls. Gartner predicts 40% of enterprise MCP deployments will be hit by security incidents by 2027. Agent Gateway is how enterprises move fast without inheriting the risk.
One platform
Built as one. Not stitched together.
Every capability runs on the same connector library, governance layer, and data model — designed together from day one.
See Agent Gateway in action.
Walk through a scenario from your stack with a Tray.ai expert.