Tyk

Tyk is an independent, open-source API management platform that provides gateway, management, and governance for REST, GraphQL, gRPC, async, and MCP-based AI agent APIs from a single control plane. The gateway core is fully open source under the MPL, allowing teams to inspect, fork, and extend the runtime without proprietary lock-in. Deployment options include Tyk Cloud, self-managed on-premises, hybrid with control plane in cloud and data plane on-premises, sovereign regions for data residency, and fully air-gapped environments for regulated industries. The MCP Gateway governs AI agent traffic with per-tool rate limiting, filtered tool discovery so agents see only entitled tools, OAuth 2.1 with Protected Resource Metadata for spec-compliant authorization, and a unified audit trail exported via OpenTelemetry for compliance teams. Token-aware rate limiting tracks and enforces LLM spend per tenant, team, and cost centre from day one. Policy as code enables GitOps workflows for both classic API and AI agent governance without separate tooling. Customers include ZEISS, where Lead Cloud-native Architect Alexander Troppmann uses the platform to orchestrate service-specific and aggregated APIs; TAB Bank, where VP Engineering Manager Todd Lyon reports saving over 500,000 dollars annually after replacing MuleSoft; and RBFCU, where VP Web Development Vaishali Dalvi cites continuous engagement and developer training sessions. Additional customers include paymenttools, Vinci Construction, Koc University, and Land Information New Zealand. The platform is ISO 27001, SOC 2 Type II, and PCI DSS certified, and is an AWS Partner.