| Agent identity and human attribution | ✓Documented: Agents linked to their operator | ✓Documented: Gateway users, teams, keys and agents | ✓Documented: Connector access and scoped agent accounts | ✓Documented: Agent ownership and runtime identity |
|---|
| Upstream credential handling | ✓Documented: Configured secrets held at the proxy | ✓Documented: Provider credentials and MCP OAuth tokens | ✓Documented: Connector OAuth and managed secret stores | ◐Partial or edition-limited: Native secret injection not documented |
|---|
| MCP server governance | ✓Documented: Remote HTTPS MCP governance | ✓Documented: Remote and supported local MCP aggregation | ✓Documented: Local and remote MCP governance | ✓Documented: MCP discovery and integrated controls |
|---|
| Tool-level permissions | ✓Documented: Per-tool and context policies | ✓Documented: Tool and allowed-parameter permissions | ✓Documented: Tool scanners and AgentGuard decisions | ✓Documented: Identity and context-aware tool policies |
|---|
| LLM traffic inspection | ✓Documented: Model request and response inspection | ✓Documented: Model routing, accounting and guardrails | ✓Documented: Integrated model and session visibility | ✓Documented: Integrated model and session inspection |
|---|
| Prompt-injection detection | ✓Documented: Log-based Insights analysis | ✓Documented: Configured injection guardrails and hooks | ✓Documented: AgentGuard session risk evaluation | ✓Documented: Context-aware injection risk detection |
|---|
| Native database access | ✓Documented: Native database protocol proxy | ✕Not documented: No native database wire-protocol proxy | ◐Partial or edition-limited: Database operations through tools | ◐Partial or edition-limited: Integrated tools, not native SQL proxy |
|---|
| Database masking and result filtering | ✓Documented: Mask fields and filter results | ◐Partial or edition-limited: Guardrails, not native SQL result controls | ◐Partial or edition-limited: Tool content masking, not native SQL | ◐Partial or edition-limited: AI content masking, not SQL result policies |
|---|
Formal vs
Formal vs
Formal vs
