MCP gateways ranked / #5 IBM ContextForge

IBM ContextForge

A capable open-source federation layer; identity and policy need more of your own work than the leaders.

Last reviewed Ranked #5 of 8 · 8/14

ContextForge is an Apache-2.0 registry and proxy that federates MCP, A2A and REST or gRPC APIs into one endpoint. It translates REST and gRPC to MCP, offers more than 40 plugins, rate limiting and auth for REST services, and OpenTelemetry tracing to Phoenix, Jaeger, Zipkin and other OTLP back ends. It installs from PyPI or Docker and scales on Kubernetes with Redis-backed federation.

Who it suits

Engineers federating MCP, REST and gRPC tools into one endpoint, who want plugins and OpenTelemetry out of the box.

Strengths

  • Federates MCP, REST and gRPC tools behind one endpoint.
  • OpenTelemetry tracing to common back ends.
  • Plugin system with more than 40 plugins.
  • PyPI, Docker or Kubernetes deployment.

Limits

  • Per-user identity and tool-level policy take configuration and plugins rather than coming ready-made.
  • No shadow MCP discovery.

Scores on each criterion

CriterionScoreWhat we found
AuthenticationPartialGateway auth is available; check per-user SSO support in the docs.
Credential handlingPartialStores upstream credentials; per-user OAuth not described in the README.
Policy depthPartialRate limiting and guardrail plugins; tool-level rules need setup.
AuditPartialLogging available; check retention and export.
ObservabilityStrongOpenTelemetry tracing to Phoenix, Jaeger, Zipkin and OTLP.
Deployment modelStrongPyPI, Docker, Kubernetes with Redis federation.
Shadow usage discoveryNot documentedNot documented.
Total8/14Ranked #5 of 8
Strong Built in and documented (2 points)Partial Present with gaps, or limited scope (1 point)Not documented Not found in the public docs we reviewed (0 points)

What it costs

Free to self-host (Apache-2.0).

Sources

Every score above comes from these public pages. Check them for changes since 11 November 2026.