Alex Rice leads global partnerships at ModelOp, connecting enterprise AI governance with the world’s top tech platforms.
We are thrilled to announce a strategic technology partnership between Kong and ModelOp. As enterprises rapidly transition into the agentic era, they face a critical challenge: how to deploy AI fast enough to stay competitive without taking on unacceptable regulatory or security risks. Together, ModelOp and Kong are solving the "last mile" problem of enterprise AI delivery, enabling enterprises to enforce governance and policies across the full end-to-end AI lifecycle including at runtime. By fusing ModelOp’s centralized AI governance with Kong’s high-performance and AI enforcement, we are turning governance policies into automated, zero-trust network reality ensuring that every AI model, LLM, and Agentic tool is fully compliant before it ever receives a single byte of traffic.
The Challenge: Bridging Compliance and Operations
As organizations adopt Agentic AI, a massive gap exists between compliance approvals and network reality. Often, AI governance is relegated to manual reviews and "paper approvals," meaning network firewalls and gateways have no context regarding which AI tools are actually approved for use. This fragmented approach is a massive risk for CIOs and CTOs, and it leads to inconsistent, bolt-on governance where unapproved or highly risky MCP tools might still be accessible to developers or autonomous agents, creating severe security liabilities.
The Solution: Kong and ModelOp - The High-Performance API/AI Edge and the Enterprise AI Command Center
Kong and ModelOp bridge this gap by seamlessly connecting governance intent with operational enforcement.
Kong is the industry's leading unified API platform, purpose-built to bring APIs, AI traffic, event-driven systems, and microservices into one operating model. In the agentic era, Kong's AI Gateway serves as the critical infrastructure for routing, securing, and observing traffic to Large Language Models (LLMs) and Model Context Protocol (MCP) servers.
Kong AI Gateway helps organizations control costs with token-based throttling, reduces latency through semantic caching, manages and balances the load across multiple GenAI models, and enforces the battle-tested runtime required to securely expose APIs and AI tools at a Fortune 500 scale. Kong AI Gateway also provides extensive capabilities to define guardrails, controls MCP server consumption with OAuth2 standards, and protects sensitive personal information.
ModelOp is the Enterprise AI Command Center, providing CIOs, CTOs, and AI leaders a centralized System of Record for all AI—including ML, GenAI, Agentic AI, and vendor AI—that powers workflows and generates operational intelligence in one operating layer above MLOps, GRC, ITSM, and Data Management. Designed to cure AI delivery gridlock, ModelOp's AI Delivery Engine (MADE™) automates the end-to-end AI lifecycle. By orchestrating reviews and approvals across Data Science, Security, and Legal teams, ModelOp ensures 100% policy adherence and drastically accelerates time-to-value without requiring additional headcount.
ModelOp acts as the "brain," evaluating AI use cases against corporate policies and calculating risk. When a tool is approved in ModelOp Center, it automatically triggers an integration with Kong Connect—acting as the "muscle"—to dynamically create an API route and allow traffic. If an AI tool is unapproved or revoked, Kong natively blocks all access, delivering mathematically guaranteed, zero-trust AI security.
The Workflow: Automated Runtime Enforcement in Action
This diagram illustrates a comprehensive architecture for AI governance and runtime security. Developers, corporate apps, and autonomous agents generate prompts and MCP requests that flow into the system.
At runtime, the Kong AI Gateway Data Plane Node acts as the A2A, LLM, and MCP traffic controller. In the Governance layer, the ModelOp Risk Tiering & Control Mapping integrates with the Konnect Control Plane to ensure governance through configuration management, asset discovery, and lifecycle approval workflows.
Here is a look at the automated workflow in action when an enterprise requests access to a new MCP tool:
- Registration & Discovery: The workflow begins when a new MCP tool is detected by ModelOp discovery service, and automatically imported into inventory within ModelOp Center.
- Automated Risk Assessment: Upon import, ModelOp’s agile life cycle engine automatically evaluates the tool, calculating a draft risk tier. The system's decision logic immediately applies relevant enterprise controls—such as NIST AI RMF or NAIC guidelines—based on factors like target geography and external data routing. Finally, an approval request is generated and assigned to the appropriate team for review.
- Active Network Blocking: During risk assessment, ModelOp queries Kong Gateway to determine whether the tool has been configured in Kong or not. Upon determining it has not been configured, ModelOp then instructs Kong to actively block all client connection attempts to the MCP server, enforcing a strict zero-trust posture.
- Governance Approval: The approver reviews the request associated with the new tool and acknowledges any controls or risks and officially approves the tool's usage for that specific use case in ModelOp.
- Dynamic Runtime Enforcement: Upon approval, ModelOp automatically signals Kong to deploy the MCP tool. Kong instantly updates its policies, allowing authorized users or agents to securely access the tool through the gateway, with all usage meticulously tracked for enterprise-grade observability.
Scaling Enterprise AI with Confidence
ModelOp powers and governs the AI lifecycle. Kong delivers the zero-trust API edge. Together, we are eliminating the gap between AI governance policies and operational reality. By automating the "last mile" of AI deployment, enterprises can confidently scale their AI and agentic innovations, knowing that unbreakable API security and absolute compliance are mathematically guaranteed for every single request.
About the Kong Tech Partner Program
Kong’s Technology Partner Program is designed to accelerate innovation through trusted integrations and enterprise-grade plugins. Every plugin is rigorously tested against the latest Kong releases and backed by dedicated engineering support, ensuring reliability at scale.
For customers, the program delivers a richer developer ecosystem with seamless, secure integrations and access to advanced AI-driven security. For partners, it opens the door to direct collaboration with Kong’s engineering team, enabling them to fine-tune solutions for the most demanding enterprise environments.
Industrialize AI Delivery with ModelOp and Kong
This architecture establishes Kong as the backbone of AI connectivity and governance, linking agents, MCP servers, and LLMs, while ModelOp provides the system of record, lifecycle automation, and operational intelligence for your AI Command Center.
Together, they enable a next-generation agentic AI platform: agents collaborate seamlessly, tools are dynamically discovered through MCP, LLMs are managed behind a governance framework, and every interaction is secured, observable, and policy-driven.
Experience the integration firsthand. Visit https://www.modelop.com/demo-request and konghq.com to schedule a demo, or explore the Kong Partner Program at konghq.com/partners.
This post is co-authored by Claudio Acquaviva, Software Architect at Kong.
.png)