Governing AI Assets at Scale with MCP Gateway and Registry

This article introduces MCP Gateway and Registry, an open source Apache 2.0 platform that enables enterprises to govern, discover, and secure AI assets including MCP servers, agents, and skills at scale.

• Provides centralized governance with fine-grained access control, audit logging, and security scanning using Cisco AI Defense
• Supports hybrid search combining semantic vector retrieval with keyword matching for discovering AI assets
• Integrates with enterprise identity providers (Entra ID, Okta, Auth0, Cognito, Keycloak) for authentication and authorization
• Federates with external registries including Anthropic MCP Registry, Workday ASOR, and Amazon Bedrock AgentCore
• Deploys on Amazon EKS with Helm charts, Amazon ECS Fargate with Terraform, or single EC2 instances
• Exposes AI Registry Tools MCP server for AI agents to discover and invoke capabilities programmatically
• Emits OpenTelemetry traces and metrics to existing observability backends without requiring separate infrastructure
• Supports custom entity types allowing organizations to define and govern any asset type beyond built-in MCP servers and agents

MCP Gateway and Registry enables enterprises to scale AI asset governance while maintaining security, discoverability, and compliance across distributed teams and AI agents.