AI Gateway MCP
This server provides MCP tools for AI gateway automation, letting you route requests, explore models, estimate costs, and monitor gateway stats.
route_request: Analyze and route an AI request to an optimal model based on task, priority, max cost, compliance needs, and local preference.list_models: List available models with capabilities and pricing, optionally filtered by provider or compliance.cost_estimator: Estimate cost for a specific request across models using prompt and completion token counts.get_gateway_stats: Get gateway usage statistics.All tools are read-only, stateless, idempotent, and safe to call repeatedly.
Rate limits apply (free tier: 10 calls/day; pro/enterprise unlimited).
Ai Gateway MCP
Ai Gateway MCP ā automation tooling for ai gateway
Ai Gateway MCP ā automation tooling for ai gateway. MIT.
š Quick Start
# Install via pip
pip install ai_gateway_mcp
# Or install via Smithery
npx -y @smithery/cli@latest install ai-gateway-mcp --client claudeRelated MCP server: AI Ops MCP
⨠Features
MCP protocol compliant
Easy installation
Well-documented API
Production-ready
Active maintenance
š Documentation
š”ļø Compliance
This MCP server is built with EU AI Act compliance built-in:
ā Article 9 ā Risk Management System
ā Article 13 ā Transparency & Instructions for Use
ā Article 15 ā Bias Detection & Testing
ā Article 26 ā FRIA Support (where applicable)
ā Article 50 ā AI Content Watermarking (where applicable)
Need help getting compliant? Book a free 15-min diagnostic ā
š¢ Enterprise
Need custom development, SLA guarantees, or white-label deployment?
Pro: $99/mo ā Full MCP suite + EU AI Act tracking
Enterprise: $499/mo ā Custom dev + SLA + Dedicated support
View Pricing ā | Contact Sales ā
š¤ Part of the MEOK Ecosystem
This server is part of the MEOK AI Labs ecosystem ā 300+ MCP servers for sovereign AI governance.
Domain | Purpose |
EU AI Act compliance marketplace | |
AI safety & monitoring | |
Sovereign AI platform | |
Legacy modernization |
š License
MIT Ā© CSOAI-ORG
Build something that touches users? You need compliance. MEOK ships 38 governance MCPs that drop in alongside this tool ā EU AI Act, DORA, NIS2, CRA, GDPR, ISO 42001, FDA SaMD, MDR, Basel, MiFID II, MiCA, COPPA, and more.
# One-shot install of the governance pack
npx meok-setup --pack governanceFree tier: 10 calls/day per MCP. Pro tier (Ā£79/mo): unlimited + cryptographically signed compliance attestations your auditor verifies independently.
ā Full catalogue: councilof.ai/catalogue ā MEOK AI Labs: meok.ai
Protocol coverage + Universal PAYG
This MCP is part of MEOK's 47-MCP fleet that bridges every active agent-interop protocol and 30+ regulatory frameworks. See the full coverage matrix at meok.ai/protocols.
Agent interop protocols supported (8 live):
ā MCP (Anthropic) ā native
ā A2A (Google + Linux Foundation, absorbed IBM ACP Sept 2025)
ā IBM ACP ā covered via A2A merge
ā Stripe ACP (Agentic Commerce Protocol) ā Q3 bridge via agent-commerce-protocol-mcp
ā AP2 (Google Agent Payments) ā partial via agent-commerce-payments-mcp
ā x402 (Coinbase HTTP 402) ā partial via api.meok.ai gateway
ā OASF / AGNTCY (Cisco Outshift + Linux Foundation) ā Q3 bridge
š ANP (Cisco Agent Network) ā watch-list
Pricing options:
Option | Price | Best for |
Self-host (this MCP) | Ā£0 ā MIT | Devs |
This MCP Starter | £29/mo | One-MCP teams |
This MCP Pro | £79/mo | Production + 24h SLA |
£29/mo + £0.0002/call | Spiky usage across many MCPs | |
Substrate bundle (this category) | £99-£499/mo | A whole pack |
Ā£1,499/mo | All 47 MCPs, 500K calls |
Each tier above the free self-host adds HMAC-signed attestations verifiable at
verify.meok.ai. Linux Foundation governance on the A2A spine means EU regulated
buyers can deploy without vendor-lock-in objections.
šø Try MEOK in 30 seconds ā instant buy ladder
Tier | Price | What you get | Stripe |
Smoke test | £1 | Signed sample MCP-Hardening report + Article 50 PDF | |
Quick Kit | £9 | EU AI Act Article 50 implementation guide (C2PA + EU-Icon) | |
Founder Call | £29 | 30-min 1-on-1 with the founder |
Refundable. UK Stripe ā VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.
Configuration
Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:
{
"mcpServers": {
"ai-gateway-mcp": {
"command": "uvx",
"args": ["ai-gateway-mcp"]
}
}
}Or: pip install ai-gateway-mcp then run the ai-gateway-mcp command (stdio transport).
Examples
Once configured, ask your assistant, for example:
"Use
route_requestto ā¦""Use
list_modelsto ā¦""Use
cost_estimatorto ā¦"
Available Tools
4 toolscost_estimatorA
Estimate cost for a specific request across models.
Behavior: This tool is read-only and stateless ā it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: prompt_tokens (int): The prompt tokens to analyze or process. completion_tokens (int): The completion tokens to analyze or process. model (str): The model to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent ā calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| model | No | claude-sonnet | |
| api_key | No | ||
| prompt_tokens | Yes | ||
| completion_tokens | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Since no annotations are provided, the description carries full burden and excels: it explicitly states the tool is read-only, stateless, idempotent, and details rate limits, authentication, error handling, and data privacy. This is comprehensive behavioral disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with clear sections but contains redundancy. For example, 'Behavior' and 'Behavioral Transparency' cover similar ground. It is longer than necessary but still organized.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (4 params, output schema exists), the description covers behavior, rate limits, and privacy well. However, parameter semantics are weak, and the description does not explicitly connect the parameters to cost calculation. It is mostly complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%. The 'Args:' section in the description provides generic descriptions like 'The prompt tokens to analyze or process' for each parameter, adding minimal meaning beyond the schema. It fails to specify how these parameters relate to cost estimation (e.g., token counts for input/output).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description starts with 'Estimate cost for a specific request across models,' which clearly states the tool's purpose with a specific verb and resource. It distinguishes from siblings like get_gateway_stats, list_models, and route_request, which serve different functions (statistics, model listing, request routing).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description includes 'When to use' and 'When NOT to use' sections, but the 'When to use' is overly generic ('structured analysis or classification') and not tightly aligned with cost estimation. It does not mention alternatives among siblings, so the guidance is only moderately helpful.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_gateway_statsA
Get gateway usage statistics.
Behavior: This tool is read-only and stateless ā it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent ā calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| api_key | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description fully covers behavioral traits. It details read-only and stateless nature, authentication, rate limits, error handling, idempotency, and data privacy. This exceeds the minimum and provides comprehensive guidance.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with clear sections and bullet points. It front-loads the core purpose. However, it is lengthy for a simple tool with one parameter, and some information repeats (e.g., idempotency in both 'Behavior' and 'Behavioral Transparency'). Could be slightly more concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the low parameter count and presence of an output schema, the description is highly complete. It covers all relevant aspects: behavior, when to use/not use, error handling, rate limits, privacy, and idempotency. No critical gaps remain for an AI agent to invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The parameter 'api_key' is described as 'The api key to analyze or process,' adding meaning beyond the schema (which only has a title and default). However, further details (e.g., format accepted) are embedded in the behavioral transparency section, not the param-specific line. Schema coverage is 0%, so the description compensates adequately.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The first sentence clearly states 'Get gateway usage statistics.' This is a specific verb and resource. However, the 'When to use' section describes 'structured analysis or classification of inputs against established frameworks or standards,' which seems broader and may not directly align with the tool's name and primary function, introducing slight ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description includes explicit 'When to use' and 'When NOT to use' sections, providing clear context. However, the 'When to use' is generic and does not distinguish this tool from siblings like cost_estimator or list_models. It also lacks direct comparisons to alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_modelsC
List all available models with capabilities and pricing.
Behavior: This tool is read-only and stateless ā it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: filter_provider (str): The filter provider to analyze or process. filter_compliance (str): The filter compliance to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent ā calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| api_key | No | ||
| filter_provider | No | ||
| filter_compliance | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. The 'Behavioral Transparency' section thoroughly covers side effects (none), authentication (none required for basic), rate limits (10/day free, unlimited pro), error handling, idempotency, and data privacy. This is exemplary disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Structured into sections (Behavior, When to use, Args, Behavioral Transparency) which is helpful, but it is verbose and contains repetition (e.g., side effects stated twice). The inclusion of analysis/classification content that does not align with the tool's name adds unnecessary length.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers behavioral traits well but lacks clarity on what the tool actually returns (output schema exists but not described). Misses differentiation from siblings and does not explain how optional parameters affect the result. Overall, it is incomplete for a tool with 3 optional parameters and no schema descriptions.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so description must compensate. The 'Args' section gives one-line descriptions for each parameter, but they are generic (e.g., 'The filter provider to analyze or process') and do not explain how they affect the listing of models. The parameter names are somewhat self-explanatory, but the descriptions add little value and are misleading due to the purpose inconsistency.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The first sentence clearly states 'List all available models with capabilities and pricing,' but the subsequent 'When to use' section describes it as 'structured analysis or classification of inputs against established frameworks,' which is a different use case. This inconsistency undermines purpose clarity. No differentiation from sibling tools like cost_estimator or route_request.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides generic 'When to use' and 'When NOT to use' sections, but they are vague and conflict with the tool's name. Does not reference sibling tools or provide specific guidance on when to choose list_models over alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
route_requestA
Route an AI request to the optimal model based on task, cost, speed, and compliance requirements.
Behavior: This tool is read-only and stateless ā it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: task (str): The task to analyze or process. priority (str): The priority to analyze or process. max_cost (float): The max cost to analyze or process. require_compliance (str): The require compliance to analyze or process. prefer_local (bool): The prefer local to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent ā calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| task | Yes | ||
| api_key | No | ||
| max_cost | No | ||
| priority | No | balanced | |
| prefer_local | No | ||
| require_compliance | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Despite no annotations, the description includes a comprehensive 'Behavioral Transparency' section detailing side effects (none), authentication needs, rate limits, error handling, idempotency, and data privacy. This fully compensates for the lack of annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with clear sections and front-loaded purpose. However, the 'Args' section is somewhat wordy and could be more concise. Overall, every section adds value and the structure aids readability.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (6 parameters, 1 required, no enums, output schema exists), the description covers all key aspects: purpose, usage, behavioral traits, and parameter meanings. It also includes error handling and privacy details, making it highly complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The 'Args' section provides a one-line description for each parameter, but these descriptions are generic and repetitive (e.g., 'The task to analyze or process.'). They do not explain valid values, constraints, or how parameters affect routing. With 0% schema coverage, more detailed semantics would be beneficial.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The title and description clearly state the tool's purpose: routing AI requests to optimal models based on task, cost, speed, and compliance. This distinguishes it from sibling tools like cost_estimator, get_gateway_stats, and list_models.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit sections for 'When to use' and 'When NOT to use', offering clear guidance on appropriate contexts and limitations, such as not suitable for real-time production without human review.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
v1.0.0- First observed
cost_estimator - First observed
get_gateway_stats - First observed
list_models - First observed
route_request
TDQS
Scored across 4 tools
Each tool has a clearly distinct purpose: cost estimation, gateway stats, model listing, and request routing. No overlap in functionality.
All tool names follow a consistent verb_noun pattern in snake_case (cost_estimator, get_gateway_stats, list_models, route_request).
4 tools are well-scoped for an AI gateway server, covering essential capabilities without bloat or insufficiency.
The tools cover core gateway operations (cost, stats, model info, routing). Minor gaps like API key management or log retrieval are acceptable for a focused set.
Maintenance
Related MCP Connectors
Zero-setup MCP gateway securely connecting AI to your tools with authentication and workflows
Agent Orchestrator MCP Server by MEOK AI Labs
Self-hosted MCP gateway: turn any API, database or MCP server into AI connectors ā no code.
A2a Governance Bridge MCP Server by MEOK AI Labs
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceDevops AI - MCP server providing AI-powered tools and automation by MEOK AI Labs10 npm99 PyPIMIT
- AlicenseNot gradedqualityBmaintenanceAI Ops - MCP server providing AI-powered tools and automation by MEOK AI Labs4 npm100 PyPIMIT
- AlicenseNot gradedqualityBmaintenanceMock Server AI - MCP server providing AI-powered tools and automation by MEOK AI Labs7 npm97 PyPIMIT
- AlicenseAqualityAmaintenanceMEOK Governance Engine - MCP server providing AI-powered tools and automation by MEOK AI Labs6MIT