Community Apps

Agentgateway

By OrcVole

Open source proxy for MCP and LLM traffic

1.5.0 1024MB Updated 2 Sep 2026
Package Website Documentation
chat
Install this app
In your Cloudron dashboard, open the App Store, choose "Community apps" and paste this URL:
https://raw.githubusercontent.com/OrcVole/agentgateway-cloudron/main/CloudronVersions.json

Description

`1.5.0

agentgateway is an open source proxy for AI traffic. It sits in front of your model providers and tool servers and gives agents a single, governed entry point.

This package runs agentgateway on Cloudron with a clean, secure topology:

  • The admin interface and UI run on the app's primary domain, behind Cloudron login, so only your Cloudron users can configure the gateway.
  • The data plane (the Model Context Protocol endpoint and the OpenAI-compatible LLM endpoint) runs on a separate subdomain that programmatic clients reach directly, protected by an API key that is generated for you on first install.

Use it to:

  • Expose MCP tool servers (stdio, SSE, streamable HTTP, or remote) to your agents through one endpoint, with authentication and access policies.
  • Put an OpenAI-compatible front door in front of one or more LLM providers, with key management, failover, and cost visibility.

agentgateway is an Apache-2.0 licensed Linux Foundation project. This package tracks its stable releases and keeps the upstream binary unmodified.

Issues and questions about this package go to its public issue tracker.

Screenshot

Recent Changes

  • Update agentgateway 1.4.1 -> 1.5.0

  • Security: Go runtime updated to 1.26.5 to fix a CVE, JWT issuer and audience claims are now enforced, cross-namespace route delegation requires an explicit ReferenceGrant, sensitive request headers are redacted from trace and debug output, client-supplied moderation and routing headers are no longer trusted, JWKS targets are restricted, and Helm RBAC roles are scoped to the namespace

  • LLM token counts now include prompt-cache tokens; set AGENTGATEWAY_LEGACY_LLM_USAGE_TOKEN_SEMANTICS=true to restore previous behaviour

  • Backend and attached LLM policies now merge field by field instead of the backend policy fully replacing the attached policy; managed API key metadata now uses the agentgateway.dev/ prefix

  • Legacy Istio identity TLV support has been removed; native mTLS must be used for workload identity in sandwich topologies

  • Packaging: pin moved in Dockerfile ARG and the upstream FROM digest; no manifest, addon or start.sh change

  • Changelog

  • All notable changes to this Cloudron package are recorded here. The package version is our own

  • semver and is independent of the upstream agentgateway version.