Préproduction privée : site de recette, non indexé.

Launches New Agent Gateway to Mitigate Shadow MCP RiskWhen Using Unmanaged and Unapproved Tools

"Unmanaged
MCP use looks a lot like the API sprawl we saw in the early days of the cloud
era," said Alistair Russell, Co-founder and CTO of Tray.ai. "API management gave
enterprises the governance they needed over APIs. Agent Gateway does the same
for MCP, as IT can now standardize policies, permissions, and versioning while
giving developers and business teams the freedom to build what they
need."

"We’re
not slowing builders down, we’re making sure what ships is known, approved, and
safe," said Alistair Russell, Co-founder and CTO of Tray.ai. "Agent Gateway
gives IT one place to set policy, permissioning, and versioning for MCP servers
and to publish tools for secure agent use across the stack."

Agent
Gateway delivers governance and future-proofing for MCP

Agent
Gateway is a managed control plane for MCP and other emerging protocols that IT
teams use to bring rigor, governance and observability to the enterprise agent
stack. Teams can define, test, version and document MCP services, apply scope
and guardrails and share them selectively across their agent
landscape.

It
supports three core ways to use MCP:

Composite
MCP Tools:
Teams can create sophisticated composite tools in Merlin Agent Builder and
publish them as MCP services. These tools can perform complex processes
end-to-end, embed guardrails with Tray Guardian, and mitigate agent
non-determinism by encoding business logic.

Connector-backed
MCP Tools:
Tray’s library of 700+ managed connectors can now be published as MCP Tools,
instantly giving MCP-enabled agents secure reach across CRM, ERP, HR,
analytics and more, all with the governance enterprises
expect.

MCP
consumption for Tray Agents:
Tray Agents can securely consume external MCP servers while IT gains
centralized visibility, logging, and auditability.

Centralized
governance and control at enterprise scale

Agent
Gateway gives IT centralized command over every MCP service developed across the
organization. By defining MCP servers within Tray Workspaces and Projects, teams
can decide which tools are exposed and under what conditions, so each MCP
service aligns with enterprise policies and security scope.

Every
MCP tool and execution is instrumented in Tray Insights Hub, logged and
versioned for traceability, creating a complete audit trail that can be streamed
to observability platforms such as Datadog or Splunk, giving IT clear oversight
without slowing delivery. With clearly defined ownership, version control and
documentation, IT can maintain governance across hundreds of agents and tools,
replacing fragmented, ad hoc development with a single managed
environment.

Together,
Agent
Hub
and Agent Gateway are part of Merlin Agent Builder, creating a single
environment for teams to build, govern and scale enterprise agents. Agent Hub
provides the composable building blocks for agent creation, while Agent Gateway
delivers governance and control over how those tools are developed, shared and
maintained. With both capabilities in one experience, Merlin Agent Builder is
now the one-stop environment for designing, deploying and managing agents
securely at enterprise scale.

Future-proof
architecture for multi-agent interoperability

Agent
Gateway is built as a multi-protocol control plane, supporting MCP today and
engineered for Google’s A2A and future agent-to-agent interoperability
standards. This architecture lets Tray Agents communicate, delegate and
collaborate with third-party agents while maintaining enterprise consistency and
control.

By
unifying governance across protocols, Agent Gateway future-proofs the enterprise
tech stack, giving teams confidence that their agent orchestration strategy will
remain compatible as new standards emerge.

"Enterprises
want the freedom to extend agents without inheriting risk," said Rich Waldron,
Co-founder and CEO of Tray.ai. "Agent Gateway gives teams a safe and managed way
to build and share tools, from composite processes to connector-backed actions,
while keeping scope, audit, and control where they belong — with
IT."

À l’affiche

Événements

Tous les évènements

Prime Time

Articles similaires