Zuplo
Secure, govern, and observe every API, LLM, and MCP call with a programmable policy engine. Enables cost control, security, and visibility for AI-driven applications.

Zuplo is a unified gateway designed to secure, govern, and observe all API, LLM, and MCP traffic through a single programmable policy engine. It provides a centralized solution for managing authentication, rate limits, spend caps, and audit trails across both outbound (LLM calls) and inbound (AI agent calls) traffic.
Key Features
- Unified Policy Engine: Enforce auth, rate limits, spend caps, and audit trails across APIs, LLMs, and MCP servers from a single platform.
- AI Gateway: Route LLM traffic, cap spend per team, and apply guardrails to model calls.
- MCP Gateway: Govern MCP tool access for AI agents with scoped permissions and quotas.
- MCP Server: Convert OpenAPI specs into MCP tools for seamless integration.
- API Management: Manage API keys, rate limits, and portals with GitOps support.
- Cost Control: Dynamic rate limiting prevents origin cost spikes and reduces spend.
- Security & Governance: Auth, schema validation, and prompt-injection defense block abuse before it reaches your systems.
- Visibility & Monitoring: Track every agent call, token usage, and budget consumption with detailed logs.
Tech / Self-Hosting
Zuplo is a cloud-native platform with no self-hosting option. It is built for scalability and reliability, offering a 99.99% uptime SLA and SOC 2 Type II compliance. The platform integrates with existing identity providers (IdP) and supports OAuth 2.1, PKCE, API keys, and JWT authentication.