Identity & Authority: Tyk Technologies – Signal Evidence & AI Readability

{
    "@context": "https://schema.org/",
    "@type": "Article",
    "@id": "https://tyk.io#Article",
    "mainEntityOfPage": "https://tyk.io",
    "headline": "Home",
    "name": "Home",
    "description": "Our API Management platform is fast, scalable, modern. Including an open source API Gateway, Analytics, Dev Portal and Dashboard",
    "datePublished": "2025-10-28",
    "dateModified": "2026-05-22",
    "author": {
        "@type": "Person",
        "@id": "https://tyk.io/blog/author/jen/#Person",
        "name": "Jennifer Craig",
        "url": "https://tyk.io/blog/author/jen/",
        "identifier": 59,
        "image": {
            "@type": "ImageObject",
            "@id": "https://secure.gravatar.com/avatar/bac2b79280af8c8d9d9ac391bf0d6dc7058d02597efd6535486b55995355c7f0?s=96&d=mm&r=g",
            "url": "https://secure.gravatar.com/avatar/bac2b79280af8c8d9d9ac391bf0d6dc7058d02597efd6535486b55995355c7f0?s=96&d=mm&r=g",
            "height": 96,
            "width": 96
        }
    },
    "publisher": {
        "@type": "Organization",
        "name": "Tyk"
    },
    "image": {
        "@type": "ImageObject",
        "@id": "https://tyk.io/wp-content/uploads/2025/11/logo-light-deloitte-dark.png",
        "url": "https://tyk.io/wp-content/uploads/2025/11/logo-light-deloitte-dark.png",
        "height": "300",
        "width": "500"
    },
    "url": "https://tyk.io"
}

[
    {
        "@context": "https://schema.org/",
        "@type": "Article",
        "@id": "https://tyk.io/tyk-mcp-gateway/#Article",
        "mainEntityOfPage": "https://tyk.io/tyk-mcp-gateway/",
        "headline": "Tyk MCP Gateway",
        "name": "Tyk MCP Gateway",
        "description": "TYK MCP GATEWAY Same gateway you trust for APIs. Now for MCP. Bring tool-level controls and observability to the remote MCP servers your AI agents are already calling.On the platform your team already runs. Book a demo Read the docs 10+ years Governing protocols at enterprise scale NatWest, Capital One + Production deployments at Tier-1 […]",
        "datePublished": "2026-05-14",
        "dateModified": "2026-05-18",
        "author": {
            "@type": "Person",
            "@id": "https://tyk.io/blog/author/jen/#Person",
            "name": "Jennifer Craig",
            "url": "https://tyk.io/blog/author/jen/",
            "identifier": 59,
            "image": {
                "@type": "ImageObject",
                "@id": "https://secure.gravatar.com/avatar/bac2b79280af8c8d9d9ac391bf0d6dc7058d02597efd6535486b55995355c7f0?s=96&d=mm&r=g",
                "url": "https://secure.gravatar.com/avatar/bac2b79280af8c8d9d9ac391bf0d6dc7058d02597efd6535486b55995355c7f0?s=96&d=mm&r=g",
                "height": 96,
                "width": 96
            }
        },
        "publisher": {
            "@type": "Organization",
            "name": "Tyk"
        },
        "url": "https://tyk.io/tyk-mcp-gateway/"
    },
    {
        "@context": "https://schema.org",
        "@type": "FAQPage",
        "mainEntity": [
            {
                "@type": "Question",
                "name": "Is the Tyk MCP Gateway safe for Enterprise use?",
                "acceptedAnswer": {
                    "@type": "Answer",
                    "text": "<p>The remote MCP server pattern is. Local MCP, which is around 90% of the public landscape today, is not enterprise-fit because it bypasses your infrastructure entirely. Tyk MCP Gateway is built for the remote deployment model, which is HTTP-based and behaves like any other API. That is the pattern enterprise teams are now standardising on.</p>"
                }
            },
            {
                "@type": "Question",
                "name": "Can Tyk govern MCP servers we already run, without changing them?",
                "acceptedAnswer": {
                    "@type": "Answer",
                    "text": "<p>Yes. The gateway sits in front of your existing remote MCP servers. The upstream servers do not change. Tyk handles authentication, access control, rate limiting, and observability at the gateway layer. Customers have dropped Tyk in front of MCP infrastructure in a single afternoon.</p>"
                }
            },
            {
                "@type": "Question",
                "name": "How do agents authenticate with Tyk MCP Gateway?",
                "acceptedAnswer": {
                    "@type": "Answer",
                    "text": "<p>Tyk supports all standard authentication methods: bearer token, API key, JWT, OAuth 2.0, and mTLS. For teams following the MCP spec’s recommended approach, Tyk also implements OAuth 2.1 with Protected Resource Metadata. Spec-compliant clients discover the authorisation server automatically, without any manual configuration. For agents connecting to upstream MCP servers that are themselves OAuth-protected, upstream OAuth 2.0 client credentials are available in the Enterprise edition.</p>"
                }
            },
            {
                "@type": "Question",
                "name": "How does Tyk give different agents access to different tools?",
                "acceptedAnswer": {
                    "@type": "Answer",
                    "text": "<p>Without a gateway, there is no mechanism for per-consumer access control. Agent access to an MCP server is all-or-nothing. Tyk’s filtered discovery applies each agent’s policy at the gateway layer: when an agent calls <span style=\"background: #505071; color: #f5f5f5; font-family: Consolas,Monaco,'Courier New',monospace; font-size: 0.95em; padding: 3px 7px; border-radius: 5px; border: 1px solid #505071;\">tools/list</span>, Tyk returns only the tools, resources, and prompts that agent is entitled to see. The upstream server doesn’t change, and no separate deployment is needed per role.</p>"
                }
            },
            {
                "@type": "Question",
                "name": "What visibility does Tyk give me into MCP traffic?",
                "acceptedAnswer": {
                    "@type": "Answer",
                    "text": "<p>Four layers. The Dashboard shows request volume, error rates, and latency broken down by proxy and by individual primitive (tool, resource, or prompt), without any custom configuration. Every request also produces a structured access log entry with four MCP-specific fields: <span style=\"background: #505071; color: #f5f5f5; font-family: Consolas,Monaco,'Courier New',monospace; font-size: 0.95em; padding: 3px 7px; border-radius: 5px; border: 1px solid #505071;\">mcp_method</span> (the JSON-RPC method), <span style=\"background: #505071; color: #f5f5f5; font-family: Consolas,Monaco,'Courier New',monospace; font-size: 0.95em; padding: 3px 7px; border-radius: 5px; border: 1px solid #505071;\">mcp_primitive_type</span>, <span style=\"background: #505071; color: #f5f5f5; font-family: Consolas,Monaco,'Courier New',monospace; font-size: 0.95em; padding: 3px 7px; border-radius: 5px; border: 1px solid #505071;\">mcp_primitive_name</span>, and <span style=\"background: #505071; color: #f5f5f5; font-family: Consolas,Monaco,'Courier New',monospace; font-size: 0.95em; padding: 3px 7px; border-radius: 5px; border: 1px solid #505071;\">mcp_error_code</span>, which you can feed into your SIEM, log aggregator, or compliance pipeline.</p><p>For metrics, Tyk emits two MCP-specific OpenTelemetry metrics: <span style=\"background: #505071; color: #f5f5f5; font-family: Consolas,Monaco,'Courier New',monospace; font-size: 0.95em; padding: 3px 7px; border-radius: 5px; border: 1px solid #505071;\">tyk.mcp.requests.total</span>, a counter broken down by method, primitive type, primitive name, error code, and HTTP status; and <span style=\"background: #505071; color: #f5f5f5; font-family: Consolas,Monaco,'Courier New',monospace; font-size: 0.95em; padding: 3px 7px; border-radius: 5px; border: 1px solid #505071;\">tyk.mcp.primitive.duration</span>, a histogram of upstream execution time per primitive. Route them to Prometheus, Grafana, Datadog, or any OTel-compatible backend.</p><p>For tracing, every MCP request produces a distributed trace spanning agent, gateway, and upstream server. MCP-specific attributes (method, primitive type, primitive name, error code, and session ID) are set on each span, so when something fails your SREs can pinpoint whether the issue is at the gateway or upstream in seconds, not hours.</p>"
                }
            },
            {
                "@type": "Question",
                "name": "Do I need Tyk AI Studio as well?",
                "acceptedAnswer": {
                    "@type": "Answer",
                    "text": "<p>Not to use MCP Gateway. MCP Gateway runs standalone and governs MCP infrastructure on its own. AI Studio governs the LLM loop above the tools. Most enterprises adopting both will run them together because they answer different questions.</p>"
                }
            },
            {
                "@type": "Question",
                "name": "Which MCP spec version does Tyk support?",
                "acceptedAnswer": {
                    "@type": "Answer",
                    "text": "<p>Tyk MCP Gateway is fully compliant with MCP spec 2025-11-25, including Streamable HTTP transport and full SSE (Server-Sent Events) support with session continuity across reconnects.</p>"
                }
            },
            {
                "@type": "Question",
                "name": "What's in the Enterprise edition vs the Community edition (OSS)",
                "acceptedAnswer": {
                    "@type": "Answer",
                    "text": "<p>The full feature set, including five-level rate limiting, per-consumer RBAC, filtered discovery and OAuth 2.1 PRM, is in the OSS gateway. Upstream OAuth 2.0 client-credentials auth, for connecting to OAuth-protected upstream MCP servers, as well as the control plane management layer is Enterprise Edition. Talk to us if you want a detailed walk-through against your specific use case.</p>"
                }
            },
            {
                "@type": "Question",
                "name": "Where does Tyk MCP Gateway run?",
                "acceptedAnswer": {
                    "@type": "Answer",
                    "text": "<p>Tyk Cloud, self-managed on-prem, any cloud, or polycloud. The same deployment model used by our regulated customers in financial services, healthcare and government, because the customer controls where the software and data live.</p>"
                }
            },
            {
                "@type": "Question",
                "name": "How do I get started with Tyk MCP Gateway?",
                "acceptedAnswer": {
                    "@type": "Answer",
                    "text": "<p>Tyk MCP Gateway is available as part of the Tyk API Management platform. If you’re an existing Tyk customer, contact your account team. If you’re evaluating Tyk, start with a self-managed trial or request a demo to see the MCP Gateway in action with your own API estate.</p>"
                }
            }
        ]
    }
]

{
    "@context": "https://schema.org/",
    "@type": "Article",
    "@id": "https://tyk.io/book-a-demo/#Article",
    "mainEntityOfPage": "https://tyk.io/book-a-demo/",
    "headline": "Conversion – Book a demo",
    "name": "Conversion – Book a demo",
    "description": "Contact us to talk with one of our engineers and learn how we can help you integrate or grow your API Management solutions.",
    "datePublished": "2025-09-23",
    "dateModified": "2026-01-28",
    "author": {
        "@type": "Person",
        "@id": "https://tyk.io/blog/author/jen/#Person",
        "name": "Jennifer Craig",
        "url": "https://tyk.io/blog/author/jen/",
        "identifier": 59,
        "image": {
            "@type": "ImageObject",
            "@id": "https://secure.gravatar.com/avatar/bac2b79280af8c8d9d9ac391bf0d6dc7058d02597efd6535486b55995355c7f0?s=96&d=mm&r=g",
            "url": "https://secure.gravatar.com/avatar/bac2b79280af8c8d9d9ac391bf0d6dc7058d02597efd6535486b55995355c7f0?s=96&d=mm&r=g",
            "height": 96,
            "width": 96
        }
    },
    "publisher": {
        "@type": "Organization",
        "name": "Tyk"
    },
    "url": "https://tyk.io/book-a-demo/"
}