Kong is a cloud-native, platform-agnostic API, LLM and MCP gateway, extensible through plugins, for routing and securing service traffic.
TykTechnologies/tyk
Open source API and AI gateway in Go that proxies REST, GraphQL, TCP, gRPC and MCP traffic with auth, rate limiting and analytics.
Open-source alternative to:Apigee
Kong Konnect
- Stars
- 10,877
- Forks
- 1,170
- Open issues
- 518
- Last commit
- 7 hours ago
What is it?
Tyk Gateway is an open source API gateway written in Go. It sits in front of upstream services and handles cross-cutting concerns such as authentication, rate limiting and quotas, access control per API version and operation, and usage analytics, without requiring changes to the backend services.
The gateway supports REST (including OpenAPI import), SOAP, GraphQL, gRPC, TCP and MCP (Model Context Protocol). For MCP, it parses JSON-RPC 2.0 and applies policies per tool, resource and prompt, and can generate an MCP proxy from an existing REST API. Plugins can be written in Go, Python, JavaScript or any language that speaks gRPC.
Tyk Gateway can be run with Docker, installed through Helm on Kubernetes, or compiled from source on Linux. Commercial management features such as a dashboard and developer portal are offered separately under a commercial license in the 'ee' directory.
Key features
- 01Proxies REST, GraphQL, gRPC, TCP, SOAP and MCP traffic through one gateway.
- 02Applies JWT, bearer token, basic auth and client certificate authentication.
- 03Enforces rate limits and quotas per consumer to protect upstream services.
- 04Applies access policies per tool, resource and prompt for MCP traffic.
- 05Imports Swagger and OpenAPI 2.x and 3.0.1 definitions to create APIs.
- 06Supports custom plugins written in Go, Python, JavaScript or any gRPC-capable language.
Use cases
- Putting authentication and rate limiting in front of a set of microservices.
- Governing AI agent access to remote MCP servers with per-tool policies.
- Exposing an existing REST API as an MCP endpoint without writing a separate server.
- Running an API gateway in Kubernetes via Helm or in Docker Compose.
Quick start
- 1
Create tyk.conf and a Docker Compose file that runs Tyk Gateway and Redis (see the README quick start link)
- 2
Start the Gateway with Docker Compose
docker compose up -d - 3
Send a request to the hello endpoint to confirm the Gateway runs
curl localhost:8080/hello
Things to know
- Some features, such as the Tyk Operator and the Dashboard, require a commercial licence.
- The code in the 'ee' folder is under a commercial licence rather than MPL 2.0.
In collections
Topics
FAQ
- What is tyk?
- Open source API and AI gateway in Go that proxies REST, GraphQL, TCP, gRPC and MCP traffic with auth, rate limiting and analytics. Tyk Gateway is an open source API gateway written in Go. It sits in front of upstream services and handles cross-cutting concerns such as authentication, rate limiting and quotas, access control per API version and operation, and usage analytics, without requiring changes to the backend services.
- Is tyk free to use? What license does it have?
- tyk is open source under the Other license. Check the license terms before using it in commercial products.
- Is tyk still maintained?
- Actively maintained. The last commit to tyk was on Nov 6, 2026.
- What can I use tyk for?
- Putting authentication and rate limiting in front of a set of microservices. Governing AI agent access to remote MCP servers with per-tool policies. Exposing an existing REST API as an MCP endpoint without writing a separate server. Running an API gateway in Kubernetes via Helm or in Docker Compose.
- How do I install tyk?
- Create tyk.conf and a Docker Compose file that runs Tyk Gateway and Redis (see the README quick start link) Start the Gateway with Docker Compose: docker compose up -d Send a request to the hello endpoint to confirm the Gateway runs: curl localhost:8080/hello
- Where can I get tyk?
- The source code and installation instructions are on GitHub: https://github.com/TykTechnologies/tyk
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
A high-performance, stateless, declarative API Gateway written in Go for routing, aggregating and securing calls to backend microservices.
An open source proxy for AI agents that adds security, observability and governance to LLM, MCP tool and agent-to-agent traffic.
An open-source API gateway that routes LLM requests across multiple providers through an OpenAI-compatible interface, with key management and usage analytics.
An open source AI gateway and registry that federates MCP, A2A, and REST/gRPC APIs behind one endpoint with governance, discovery, and observability.
An open source control plane built on Envoy that gives apps one OpenAI-compatible API across hosted LLM providers, self-hosted inference and MCP servers.