ai provides two open source gateways designed to deliver identity-first, zero-trust connectivity for AI applications. These gateways—MCP Gateway and LLM Gateway—are built on the OpenZiti platform and aim to address the challenge of securely connecting AI tools to internal resources, models, and APIs without compromising either security or development speed. The system uses cryptographic identity and end-to-end encryption, eliminating the need for shared API keys, open ports, or VPNs. A single OpenZiti identity enables unified access control across both gateways, simplifying credential management and policy enforcement.
The MCP Gateway offers zero-trust access to MCP tool servers from clients such as Claude Desktop, Cursor, and VS Code. Its setup process is streamlined, requiring only a single command to wrap any MCP server without modifying server code. The gateway supports aggregation of multiple backends, allowing users to combine local and remote servers into a unified toolset with automatic namespacing to prevent conflicts. Security features include permission filtering, session isolation, and a "dark by default" architecture where unauthorized users cannot detect the service. Each client session is isolated, ensuring stability and privacy across connections.
The LLM Gateway functions as an OpenAI-compatible proxy with support for semantic routing and zero-trust networking. It allows routing across multiple providers—including OpenAI, Anthropic, Azure OpenAI, AWS Bedrock, Google Vertex AI, Ollama, and any OpenAI-compatible endpoint—without requiring changes to client code. Its semantic routing selects the optimal model per request using heuristics, embeddings, and optionally an LLM classifier. Additional features include load balancing for Ollama instances, private model mesh connectivity via zrok, guardrails for PII detection and content safety, and consistent streaming across providers. The gateway supports public, private, and reserved deployment modes.
0 license. They integrate with existing tools and workflows without requiring code changes or new SDKs. The zrok platform, also open source and sponsored by NetFoundry, provides a user experience layer for network configuration and identity provisioning, with both hosted and self-hosted options available.
openziti.ai sits in PulseGate's Other AI category. It focuses on securing and managing access to AI models and tools with unified identity and zero-trust connectivity. It is built as an open-source project for AI developers and infrastructure teams. openziti.ai is open source under the Apache-2.0 license. The product ships for the web, and it can be self-hosted.
NetFoundry builds and maintains openziti.ai, and the product first shipped in 2026. Development happens publicly on GitHub with 38 stars and 27 commits in the last 90 days. PulseGate's similarity index finds few close equivalents — openziti.ai occupies a relatively distinct niche. Key capabilities include zero-trust access, identity management, and end-to-end encryption. It exposes integrations via an MCP server.
Latest indexed changes and source events
openziti.ai discovered by the PulseGate indexer
Other apps tracked under the same category.
