Kong's SaaS API management platform designed to simplify managing and securing APIs.
Use AWS Guardrails to validate requests and/or responses before forwarding them between clients and upstream LLMs.
Use Azure AI Content Safety to check and audit messages before proxying them to an upstream LLM
Use a third-party guardrails service to validate requests and/or responses before forwarding them between clients and upstream LLMs
Audit and validate LLM prompts with Google Cloud Model Armor before forwarding them to an upstream LLM.
Score prompt-response pairs with a dedicated LLM to evaluate the accuracy and quality of model responses.
Inspect and enforce Lakera Guard safety policies on LLM requests and responses before they reach upstream models.
Protect sensitive information in client request or response bodies before they reach upstream services or clients
Compress prompts with LLMLingua 2 before they reach the upstream LLM to stay within context limits, cut token costs, and reduce latency.
Prepend or append an array of messages to a user’s chat history.
Check text completion requests against a list of allowed or denied expressions
Provide fill-in-the-blank AI prompts to users
Create RAG pipelines by automatically injecting content from a vector database
Provides rate limiting for the AI plugins.
Use an LLM service to transform a client request body prior to proxying the request to the upstream server
Use an LLM service to transform the upstream HTTP(S) prior to forwarding it to the client
Cache LLM responses based on semantic similarity between requests to reduce latency and cost.
Permit or block LLM prompts based on semantic similarity to predefined allow and deny rules.
Permit or block LLM responses based on semantic similarity to predefined rules for chat, completions, and embeddings requests
Integrate Kong AI Gateway with the AppDynamics APM Platform
Visualize metrics on Datadog
Propagate spans and report space to a backend server through OTLP protocol.
Expose metrics related to Kong AI Gateway in Prometheus exposition format
Send metrics to StatsD
Propagate Zipkin spans and report tracing data to a Zipkin server
Decrypt a JWE token in a request
Append request and response data to a log file
Send request and response logs to an HTTP server
Publish logs to a Kafka topic.
Send request and response logs to Loggly
Publish request and response logs to a Solace endpoint or topic
Send request and response logs to Syslog
Send request and response logs to a TCP server
Send request and response logs to a UDP server
A licensed add-on through Konnect Metering & Billing. Meter API requests and AI token usage for usage-based billing. Supports flexible customer identification, custom pricing dimensions, and fine-grained traffic filtering.
Let’s Encrypt and ACMEv2 integration with Kong AI Gateway
Detect and block bots or custom clients
Configure Cross-Origin Resource Sharing (CORS) so that browser clients on approved origins can call your AI Models, AI Agents, and AI MCP Servers.
Allow or deny IPs that can make requests to your services
Detect and block injection attacks using regular expressions
Apply size checks on JSON payload and minimize risk of content-level attacks
Authorize requests against Open Policy Agent
Requests a client to present its client certificate
Proxies TLS client certificate metadata to upstream services via an HTTP headers
Invoke and manage AWS Lambda functions from Kong AI Gateway
Invoke and manage Azure functions from Kong AI Gateway
Add and manage custom Lua functions to execute after other plugins
Add and manage custom Lua functions to run before other plugins
Control which Consumers can access Services and Routes
Slowly roll out software changes to a subset of users
Consume messages from Confluent Cloud Kafka topics and make them available through HTTP endpoints
Allows Kong AI Gateway to connect to intermediary transparent HTTP
Cache and serve commonly requested responses in Kong AI Gateway
Provides rate limiting for GraphQL queries
Consume messages from Kafka topics and make them available through HTTP endpoints.
Provide mock endpoints to test your APIs against your Services
Validate HTTP requests and responses based on an OpenAPI 3.0 or Swagger API Specification
Cache and serve commonly requested responses in Kong
Cache and serve commonly requested responses in Kong, in-memory or using Redis
Limit how many HTTP requests can be made in a given period of seconds, minutes, hours, days, months, or years.
Enhanced rate limiting capabilities such as sliding window support, Redis Sentinel support, and increased performance.
Redirect incoming requests to a new URL
Block requests with bodies greater than a specified size.
Terminates all requests with a specific response
Validates requests before they reach the upstream service
Rate limit based on a custom response header value.
Route requests based on specified request headers
Prevent abuse and protect services with absolute limits on the number of requests reaching the service
Consume messages from Solace topics and make them available through HTTP endpoints
Validate that incoming webhooks adhere to the Standard Webhooks specification
Set custom timeouts on connections to upstream services to override Gateway Service-level timeouts.
Block incoming WebSocket messages greater than a specified size
Validate WebSocket messages before they are proxied
Apply structural and size checks on XML payloads
Transform requests into Kafka messages in a Confluent Kafka topic.
Correlate requests and responses using a unique ID
Datakit is a workflow engine for working with external APIs
Transform a GraphQL upstream into a REST API
Customize Kong exit responses sent downstream
Transform requests into Kafka messages in a Kafka topic.
Insert arbitrary API calls before proxying a request to the upstream service.
Use regular expressions, variables, and templates to transform requests
Use powerful regular expressions, variables, and templates to transform API requests
Modify the upstream response before returning it to the client
Modify the upstream response before returning it to the client, with greater customization capabilities
Transform routing by changing the upstream server, port, or path
Transform requests into Solace messages in a Solace queue or topic
Access gRPC services through HTTP REST
Allow browser clients to call gRPC services
Transform JSON objects included in API requests or responses using jq programs