> lethaltrifecta
MCP_HACK//26 · Submissions open

lethaltrifecta

One data plane.
Every agent.
Governed.

We built the platform. agentgateway as a universal data plane for MCP, HTTP, A2A, and gRPC. These four submissions are the proofs.

View submissions Architecture

4

tracks entered

5

repos built

1

merged OSS PR

4k+

lines contributed

MCP_HACK//26 · Four Tracks

Four tracks.
One platform.

01 · Secure & Govern MCP

CMDR

submitted

Agent Behavior Governance + freeze-mcp

Same model. Same tools. Different instructions. CMDR caught it. Captures agent runs via OpenTelemetry, detects behavioral drift against approved baselines, and gates deployments by replaying scenarios with frozen tool responses through freeze-mcp. Deployed. Medium article published.

track

Secure & Govern

partner

freeze-mcp

article

published ↗

CMDR repo freeze-mcp Medium

02 · Building Cool Agents

BEN

building

Conversational OS for kagent

BEN binds Slack threads to persistent kagent sessions with Human-In-The-Loop approval gates. Start an incident response in Slack — the agent's context never gets lost. Rich Block Kit dashboards, cross-restart checkpoint persistence, A2A routing.

runtime

kagent

platform

Slack

BEN repo

03 · Open Source Contributions

OIDC Browser Auth

merged

agentgateway PR #1233

agentgateway for all traffic, not just AI. Built-in OIDC authorization code + PKCE flow with no oauth2-proxy sidecar required. Route-owned policy, provider discovery, encrypted browser sessions. +4,053 lines — merged.

lines

+4,053

status

merged

PR #1233

04 · MCP & AI Agents Starter

agentbroker

building

AI Provider Credential Lifecycle via agentgateway ExtAuthz

Multi-tenant credential broker for AI providers — Anthropic, OpenAI, Gemini, Copilot. Plugs into agentgateway's ExtAuthz gRPC interface to inject provider tokens at request time. Envelope-sealed secrets, weighted selection with cooldown, lease hashing, memory + postgres backends.

providers

4

interface

ExtAuthz gRPC

backends

memory · postgres

agentbroker repo

Platform Architecture

agentgateway as the spine.

MCP, HTTP, A2A, gRPC — one policy surface. Every submission in this showcase extends it in a different direction.

OIDC Browser Auth

PR #1233 · merged

+4,053 lines

agentbroker

ExtAuthz gRPC

AI credential lifecycle

Unified Data Plane

agentgateway

MCPHTTPA2AgRPCExtAuthz

CMDR

Governance + Replay

+ freeze-mcp

BEN

Conversational OS

Slack → kagent

The Thesis

agentgateway shouldn't just be about AI.

PR #1233 added OIDC browser auth for generic HTTP traffic — no oauth2-proxy sidecar needed. The same gateway that routes MCP traffic also handles browser sessions for any service. That's what a unified data plane looks like.