Skip to main content
Glama

MCP Scorecard: 86/100

Ai Gateway MCP

MEOK AI Labs GSPC License PyPI

Ai Gateway MCP — automation tooling for ai gateway

Ai Gateway MCP — automation tooling for ai gateway. MIT.


šŸš€ Quick Start

# Install via pip
pip install ai_gateway_mcp

# Or install via Smithery
npx -y @smithery/cli@latest install ai-gateway-mcp --client claude

Related MCP server: AI Ops MCP

✨ Features

  • MCP protocol compliant

  • Easy installation

  • Well-documented API

  • Production-ready

  • Active maintenance

šŸ“– Documentation

šŸ›”ļø Compliance

This MCP server is built with EU AI Act compliance built-in:

  • āœ… Article 9 — Risk Management System

  • āœ… Article 13 — Transparency & Instructions for Use

  • āœ… Article 15 — Bias Detection & Testing

  • āœ… Article 26 — FRIA Support (where applicable)

  • āœ… Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? Book a free 15-min diagnostic →

šŸ¢ Enterprise

Need custom development, SLA guarantees, or white-label deployment?

  • Pro: $99/mo — Full MCP suite + EU AI Act tracking

  • Enterprise: $499/mo — Custom dev + SLA + Dedicated support

View Pricing → | Contact Sales →

šŸ¤ Part of the MEOK Ecosystem

This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.

Domain

Purpose

councilof.ai

EU AI Act compliance marketplace

safetyof.ai

AI safety & monitoring

meok.ai

Sovereign AI platform

cobolbridge.ai

Legacy modernization

šŸ“œ License

MIT Ā© CSOAI-ORG


Build something that touches users? You need compliance. MEOK ships 38 governance MCPs that drop in alongside this tool — EU AI Act, DORA, NIS2, CRA, GDPR, ISO 42001, FDA SaMD, MDR, Basel, MiFID II, MiCA, COPPA, and more.

# One-shot install of the governance pack
npx meok-setup --pack governance

Free tier: 10 calls/day per MCP. Pro tier (Ā£79/mo): unlimited + cryptographically signed compliance attestations your auditor verifies independently.

→ Full catalogue: councilof.ai/catalogue → MEOK AI Labs: meok.ai

Protocol coverage + Universal PAYG

This MCP is part of MEOK's 47-MCP fleet that bridges every active agent-interop protocol and 30+ regulatory frameworks. See the full coverage matrix at meok.ai/protocols.

Agent interop protocols supported (8 live):

  • āœ… MCP (Anthropic) — native

  • āœ… A2A (Google + Linux Foundation, absorbed IBM ACP Sept 2025)

  • āœ… IBM ACP — covered via A2A merge

  • ◐ Stripe ACP (Agentic Commerce Protocol) — Q3 bridge via agent-commerce-protocol-mcp

  • ◐ AP2 (Google Agent Payments) — partial via agent-commerce-payments-mcp

  • ◐ x402 (Coinbase HTTP 402) — partial via api.meok.ai gateway

  • → OASF / AGNTCY (Cisco Outshift + Linux Foundation) — Q3 bridge

  • šŸ‘ ANP (Cisco Agent Network) — watch-list

Pricing options:

Option

Price

Best for

Self-host (this MCP)

Ā£0 — MIT

Devs

This MCP Starter

Ā£29/mo

One-MCP teams

This MCP Pro

Ā£79/mo

Production + 24h SLA

Universal PAYG

£29/mo + £0.0002/call

Spiky usage across many MCPs

Substrate bundle (this category)

Ā£99-Ā£499/mo

A whole pack

MEOK Universe

Ā£1,499/mo

All 47 MCPs, 500K calls

Each tier above the free self-host adds HMAC-signed attestations verifiable at verify.meok.ai. Linux Foundation governance on the A2A spine means EU regulated buyers can deploy without vendor-lock-in objections.

šŸ’ø Try MEOK in 30 seconds — instant buy ladder

Tier

Price

What you get

Stripe

Smoke test

Ā£1

Signed sample MCP-Hardening report + Article 50 PDF

https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t

Quick Kit

Ā£9

EU AI Act Article 50 implementation guide (C2PA + EU-Icon)

https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t

Founder Call

Ā£29

30-min 1-on-1 with the founder

https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t

Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.

Configuration

Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:

{
  "mcpServers": {
    "ai-gateway-mcp": {
      "command": "uvx",
      "args": ["ai-gateway-mcp"]
    }
  }
}

Or: pip install ai-gateway-mcp then run the ai-gateway-mcp command (stdio transport).

Examples

Once configured, ask your assistant, for example:

  • "Use route_request to …"

  • "Use list_models to …"

  • "Use cost_estimator to …"

Available Tools

4 tools
cost_estimatorA

Estimate cost for a specific request across models.

Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.

When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.

When NOT to use: Not suitable for real-time production decision-making without human review of results.

Args: prompt_tokens (int): The prompt tokens to analyze or process. completion_tokens (int): The completion tokens to analyze or process. model (str): The model to analyze or process. api_key (str): The api key to analyze or process.

Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

ParametersJSON Schema
NameRequiredDescriptionDefault
modelNoclaude-sonnet
api_keyNo
prompt_tokensYes
completion_tokensYes

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A3.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Since no annotations are provided, the description carries full burden and excels: it explicitly states the tool is read-only, stateless, idempotent, and details rate limits, authentication, error handling, and data privacy. This is comprehensive behavioral disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with clear sections but contains redundancy. For example, 'Behavior' and 'Behavioral Transparency' cover similar ground. It is longer than necessary but still organized.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (4 params, output schema exists), the description covers behavior, rate limits, and privacy well. However, parameter semantics are weak, and the description does not explicitly connect the parameters to cost calculation. It is mostly complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%. The 'Args:' section in the description provides generic descriptions like 'The prompt tokens to analyze or process' for each parameter, adding minimal meaning beyond the schema. It fails to specify how these parameters relate to cost estimation (e.g., token counts for input/output).

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description starts with 'Estimate cost for a specific request across models,' which clearly states the tool's purpose with a specific verb and resource. It distinguishes from siblings like get_gateway_stats, list_models, and route_request, which serve different functions (statistics, model listing, request routing).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description includes 'When to use' and 'When NOT to use' sections, but the 'When to use' is overly generic ('structured analysis or classification') and not tightly aligned with cost estimation. It does not mention alternatives among siblings, so the guidance is only moderately helpful.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_gateway_statsA

Get gateway usage statistics.

Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.

When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.

When NOT to use: Not suitable for real-time production decision-making without human review of results.

Args: api_key (str): The api key to analyze or process.

Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

ParametersJSON Schema
NameRequiredDescriptionDefault
api_keyNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.3/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description fully covers behavioral traits. It details read-only and stateless nature, authentication, rate limits, error handling, idempotency, and data privacy. This exceeds the minimum and provides comprehensive guidance.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with clear sections and bullet points. It front-loads the core purpose. However, it is lengthy for a simple tool with one parameter, and some information repeats (e.g., idempotency in both 'Behavior' and 'Behavioral Transparency'). Could be slightly more concise.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the low parameter count and presence of an output schema, the description is highly complete. It covers all relevant aspects: behavior, when to use/not use, error handling, rate limits, privacy, and idempotency. No critical gaps remain for an AI agent to invoke the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The parameter 'api_key' is described as 'The api key to analyze or process,' adding meaning beyond the schema (which only has a title and default). However, further details (e.g., format accepted) are embedded in the behavioral transparency section, not the param-specific line. Schema coverage is 0%, so the description compensates adequately.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first sentence clearly states 'Get gateway usage statistics.' This is a specific verb and resource. However, the 'When to use' section describes 'structured analysis or classification of inputs against established frameworks or standards,' which seems broader and may not directly align with the tool's name and primary function, introducing slight ambiguity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description includes explicit 'When to use' and 'When NOT to use' sections, providing clear context. However, the 'When to use' is generic and does not distinguish this tool from siblings like cost_estimator or list_models. It also lacks direct comparisons to alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_modelsC

List all available models with capabilities and pricing.

Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.

When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.

When NOT to use: Not suitable for real-time production decision-making without human review of results.

Args: filter_provider (str): The filter provider to analyze or process. filter_compliance (str): The filter compliance to analyze or process. api_key (str): The api key to analyze or process.

Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

ParametersJSON Schema
NameRequiredDescriptionDefault
api_keyNo
filter_providerNo
filter_complianceNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

C2.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries full burden. The 'Behavioral Transparency' section thoroughly covers side effects (none), authentication (none required for basic), rate limits (10/day free, unlimited pro), error handling, idempotency, and data privacy. This is exemplary disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Structured into sections (Behavior, When to use, Args, Behavioral Transparency) which is helpful, but it is verbose and contains repetition (e.g., side effects stated twice). The inclusion of analysis/classification content that does not align with the tool's name adds unnecessary length.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers behavioral traits well but lacks clarity on what the tool actually returns (output schema exists but not described). Misses differentiation from siblings and does not explain how optional parameters affect the result. Overall, it is incomplete for a tool with 3 optional parameters and no schema descriptions.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so description must compensate. The 'Args' section gives one-line descriptions for each parameter, but they are generic (e.g., 'The filter provider to analyze or process') and do not explain how they affect the listing of models. The parameter names are somewhat self-explanatory, but the descriptions add little value and are misleading due to the purpose inconsistency.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first sentence clearly states 'List all available models with capabilities and pricing,' but the subsequent 'When to use' section describes it as 'structured analysis or classification of inputs against established frameworks,' which is a different use case. This inconsistency undermines purpose clarity. No differentiation from sibling tools like cost_estimator or route_request.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides generic 'When to use' and 'When NOT to use' sections, but they are vague and conflict with the tool's name. Does not reference sibling tools or provide specific guidance on when to choose list_models over alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

route_requestA

Route an AI request to the optimal model based on task, cost, speed, and compliance requirements.

Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.

When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.

When NOT to use: Not suitable for real-time production decision-making without human review of results.

Args: task (str): The task to analyze or process. priority (str): The priority to analyze or process. max_cost (float): The max cost to analyze or process. require_compliance (str): The require compliance to analyze or process. prefer_local (bool): The prefer local to analyze or process. api_key (str): The api key to analyze or process.

Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

ParametersJSON Schema
NameRequiredDescriptionDefault
taskYes
api_keyNo
max_costNo
priorityNobalanced
prefer_localNo
require_complianceNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Despite no annotations, the description includes a comprehensive 'Behavioral Transparency' section detailing side effects (none), authentication needs, rate limits, error handling, idempotency, and data privacy. This fully compensates for the lack of annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with clear sections and front-loaded purpose. However, the 'Args' section is somewhat wordy and could be more concise. Overall, every section adds value and the structure aids readability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (6 parameters, 1 required, no enums, output schema exists), the description covers all key aspects: purpose, usage, behavioral traits, and parameter meanings. It also includes error handling and privacy details, making it highly complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The 'Args' section provides a one-line description for each parameter, but these descriptions are generic and repetitive (e.g., 'The task to analyze or process.'). They do not explain valid values, constraints, or how parameters affect routing. With 0% schema coverage, more detailed semantics would be beneficial.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The title and description clearly state the tool's purpose: routing AI requests to optimal models based on task, cost, speed, and compliance. This distinguishes it from sibling tools like cost_estimator, get_gateway_stats, and list_models.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit sections for 'When to use' and 'When NOT to use', offering clear guidance on appropriate contexts and limitations, such as not suitable for real-time production without human review.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 4 tool updatesv1.0.0
    • First observedcost_estimator
    • First observedget_gateway_stats
    • First observedlist_models
    • First observedroute_request

TDQS

A3.9/5.0

Scored across 4 tools

Disambiguation5/5

Each tool has a clearly distinct purpose: cost estimation, gateway stats, model listing, and request routing. No overlap in functionality.

Naming Consistency5/5

All tool names follow a consistent verb_noun pattern in snake_case (cost_estimator, get_gateway_stats, list_models, route_request).

Tool Count5/5

4 tools are well-scoped for an AI gateway server, covering essential capabilities without bloat or insufficiency.

Completeness4/5

The tools cover core gateway operations (cost, stats, model info, routing). Minor gaps like API key management or log retrieval are acceptable for a focused set.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers