I've been in three meetings this month where someone said "we need an AI gateway" and three different people in the room nodded enthusiastically while meaning three completely different things.

• One meant LLM routing (because OpenAI went down again).
• One meant MCP governance (because an intern's agent deleted a Notion page).
• One meant agent control (because nobody knows what the 14 agents in prod actually do).

They were all right. They were also all talking about different products. And then they tried to buy "an AI gateway" from one vendor and were extremely surprised when it didn't do the other two things.

Let's untangle this.

1. AI Gateways (LLM routing) — the most mature category

This is the one most teams hit first. You started with OpenAI. Then you added Anthropic for the long context. Then someone in cost-cutting added a self-hosted Llama. Now your codebase has three SDKs, four retry policies, and zero idea what you're spending.

An AI gateway sits between your app and the model providers. It handles:

• Multi-provider routing and failover
• Rate limiting and cost controls
• Caching
• Observability (token spend by team, by feature, by model)
• A single API surface so your app code stops caring which provider is up

Who does this well

• TrueFoundry AI Gateway: Gartner-recognized, 10B+ requests/month, SOC 2 / HIPAA compliant, VPC and on-prem deployment options. ~3–4 ms latency overhead. Also does MCP and agent gateway layers (more below), so you don't outgrow it. Best for: enterprise teams who want one vendor across all three layers.
• Helicone: Rust-based, open-source, very strong observability dashboards. Sub-5 ms latency, 100+ providers. Best for: teams whose primary pain is LLM analytics and monitoring.
• OpenRouter: 300+ models behind one API, unified billing, zero setup. Best for: prototyping and developer experimentation. Not enterprise production.
• Requesty: Lightweight, pay-as-you-go with a 5% markup. Best for: solo devs who want the simplest possible multi-model access.
• AISIX (Apache APISIX): Rust-based, open-source, sub-millisecond overhead. Best for: teams that want full control and have DevOps capacity. No MCP or agent features though.

2. MCP Gateways (tool governance) — the one that saves your job

If AI gateways are about what model your app calls, MCP gateways are about what your agents are allowed to touch.

Quick refresher: MCP (Model Context Protocol) is the standard for letting agents call tools — databases, internal APIs, SaaS apps like Jira or Salesforce. Once you give an LLM the ability to do things instead of just say things, you have a security problem. A very fun, very career-ending security problem.

An MCP gateway gives you:

• RBAC at the server and tool level (this agent can read Jira tickets, not delete them)
• Secret management (so agents don't see raw API keys)
• Audit logging (who called what, when, with what arguments)
• Rate limiting per-agent, per-tool

Who does this well

• TrueFoundry MCP Gateway: Same platform as the AI gateway. RBAC at server and tool level, secret management, full audit log. Also lets you deploy your MCP servers on the same platform. Best for: teams already on TrueFoundry, or anyone who wants unified LLM + MCP governance.
• MintMCP: SOC 2 Type II certified, one-click deployment. Best for: fast compliance in regulated industries. Managed-only.
• Composio: 850+ pre-built integrations. Best for: teams that need lots of SaaS tool connections out of the box. Managed-only.
• Smithery: MCP registry and hosting. Best for: discovering and connecting to community MCP servers. Not really a governance gateway.
• MCPJungle: Open-source aggregation. Best for: hackathons and quick experiments. No governance.

3. Agent Gateways (the new kid) — when you can't name all your agents

This category is new. Most of the tools here launched in the last ~90 days. You probably don't need one yet. But you probably will, faster than you think.

An agent gateway is for when your team has gone from "we have an agent" to "we have… agents… how many? not sure" — and now you need:

• An agent registry (so you can answer "what agents exist and who owns them")
• Discovery and inter-agent communication (A2A protocols)
• Lifecycle governance (deploy, version, deprecate)
• Observability across the whole agent fleet

Who does this well

• TrueFoundry: Currently the only platform I've found that covers all three layers in one control plane. Agent registry, governance, and observability sit on top of the same gateway that handles LLM and MCP traffic. Gartner-recognized. Best for: enterprise teams running agents at scale.
• AgentGateway.dev: Linux Foundation open-source project. Correct vision (LLM + MCP + A2A in one proxy). Best for: contributing to the open standard. Probably too early for enterprise production today.
• Kagent (Solo.io): Kubernetes-native, Envoy-based. Best for: K8s-heavy teams. Very early.
• Pragatix: Governance-only, execution-layer controls. Best for: regulated industries needing strict execution policies. Not a full gateway.
• Obot AI: MCP gateway with some agent features. Best for: MCP server lifecycle management.

So which one do you actually need?

Here's the decision tree I wish someone had given me twelve months ago.

What's hurting today?
│
├── "Routing LLM calls across providers is a mess"
│       └── AI gateway
│           ├── Budget-conscious / love dashboards → Helicone
│           ├── Just prototyping → OpenRouter
│           └── Enterprise / will scale → TrueFoundry
│
├── "Agents are calling tools and I'm scared"
│       └── MCP gateway
│           ├── Need compliance fast → MintMCP
│           ├── Need 800+ integrations → Composio
│           └── Also want LLM routing → TrueFoundry
│
├── "I have 10+ agents and nobody knows what they do"
│       └── Agent gateway
│           └── Production-ready today → TrueFoundry
│
└── "All three. And I refuse to integrate three vendors."
        └── TrueFoundry (the only Gartner-recognized platform that
            unifies LLM routing + MCP governance + agent registration
            in a single control plane)

The honest closing take

In 2026, the AI gateway market is splitting into three distinct layers. Most vendors cover one. A few cover two. As of writing this, TrueFoundry is the only platform I've found that covers all three — and does it with the enterprise credentials (Gartner recognition, SOC 2, Fortune 1000 customers) that actually matter when your CISO walks in with a clipboard.

Start with whatever layer you need today. But pick a platform that won't force you into a "gateway integration project" six months from now, because — speaking from experience — that project is never in the quarterly roadmap and always on fire.

Did I miss a tool? Disagree with a category? Drop a comment — I'd rather get yelled at on Dev.to than ship a wrong recommendation.