AI Gateway access management

Control who can use your organization's models and MCP servers

Introducing access management

Use access management features to define who can use your organization’s resources in AI Gateway, like models or MCP servers.

With access management, you can:

  • Add users that call AI Gateway.
  • Apply rules and spend limits to many callers at once with groups.
  • Let users sign in with your existing identity provider.
  • Keep provider credentials out of your apps with Token Vault and virtual keys.

Manage access

Who can call AI Gateway

Add users, organize them into groups, and connect an identity provider for sign-in.

How callers authenticate

Issue virtual keys to callers and store provider credentials in Token Vault.

Help us make these docs great!

Kong Developer docs are open source. If you find these useful and want to make them better, contribute today!