Zuplo

Founded 2021

Secure, manage, and route your API, AI, and MCP traffic with programmable policies

You can use Zuplo to manage incoming and outgoing API traffic, large language model requests, and Model Context Protocol agent connections. It acts as a single gateway where you write authentication rules, dynamic rate limits, token spend caps, and audit logs once and apply them everywhere. The gateway lets you expose OpenAPI routes directly as MCP tools for autonomous agents, prevent prompt injections, enforce OAuth with PKCE, and meter API usage for billing through Stripe without extra infrastructure.

What Zuplo does

Set up dynamic rate limits on inbound API routesConfigure hard spend caps on outbound LLM callsConvert OpenAPI schemas into MCP server toolsAuthenticate agent sessions using OAuth and PKCEMeter API request counts and bill customers via StripeBlock prompt injection attacks before reaching backendsExport request traces and audit logs to DatadogUnified policy enforcement across standard APIs, LLM calls, and MCP agent toolsSpec-compliant MCP gateway supporting OAuth 2.1, Dynamic Client Registration, and PKCEDynamic rate limiting and origin traffic protection to prevent unexpected server surgesAI budget ceilings with hard stops to halt runaway LLM model requests by teamAutomatic conversion of OpenAPI route specifications into discoverable MCP toolsBuilt-in usage metering connected directly to Stripe for request and token billingReal-time request tracing, audit logging, and SIEM telemetry export to external monitoring services