AIToday
Large Language ModelsAI Coding AssistantsTop Companies' AI MovesTop Companies AIPublished: Nov 3, 2026, 06:30 JST

Uber's MCP Gateway governs 800 MCP servers, 5,000 tools

Send on LINE
Uber's MCP Gateway governs 800 MCP servers, 5,000 tools

3 Key Points

  1. What happened

    Uber built an MCP Gateway supporting more than 800 MCP servers and 5,000 tools, separating an MCP Registry control plane from a Proxy Gateway that translates requests into HTTP, gRPC, or TChannel calls.

  2. Why it matters

    The setup exposes existing services as agent tools without changing the underlying services, aiming to reduce fragmented integrations and inconsistent security practices as agent adoption expands across the company.

WHO IT HITSEnterprise platform and security teams running internal AI agents are the most direct audience here, since the design addresses discovery, authorization, and PII redaction (removing personal data) across a large tool catalog.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, every morning.

Context & Analysis

Uber's gateway arrives as agent adoption spreads across the company, and the stated problem is a familiar one at scale: fragmented integrations, duplicated infrastructure, and inconsistent security practices. The architecture treats MCP less as a new protocol and more as another surface to govern, splitting control from execution so that tool definitions, schemas, ownership, and enablement settings live in a registry while a proxy handles runtime translation into HTTP, gRPC, or TChannel calls.

The discovery layer is where much of the operational detail sits. AutoCrawler scans internal interface definition language registries and extracts API definitions from Protocol Buffers and Thrift schemas, then generates MCP-compatible schemas and uses a large language model to produce tool descriptions. Newly found tools stay disabled until their owning teams review and enable them, and configuration changes reach the data plane without service restarts or redeployments.

As the catalog grows, loading thousands of tool definitions into an agent's context becomes inefficient. Uber's Omni MCP supports incremental discovery, and Response Projection lets agents request specific response fields rather than complete payloads. Outside observers quoted in the coverage, including Ajay Sharma of Microsoft CoreAI and Kelly Goetsch of Pipe17, compared the design to established API gateway patterns, suggesting the governance questions around agent tools may resemble those teams already know from APIs and GraphQL.

FAQ
How does Uber keep new AI agent tools from being used without approval?
AutoCrawler scans internal IDL registries, generates MCP-compatible schemas, and uses a large language model to write tool descriptions. Newly discovered tools stay disabled until their owning teams review and explicitly enable them.
What does Uber do about sensitive data in tool responses?
The gateway supports redaction of personally identifiable information and other sensitive data in tool responses, and it enforces authorization at both server and tool levels through Uber's internal access control system.
How does Uber handle third-party integrations like Jira and Google?
A separate service exchanges internal user tokens for the corresponding third-party authentication tokens.
Top Companies AIRead Original Article
Send on LINE

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleFujitsu, SoftBank Robotics test AI standard for box damage from 11月2日