VOOZH about

URL: https://developer.konghq.com/plugins/?category=ai

⇱ Kong Plugin Hub | Kong Docs


Kong Plugin Hub

Extend Kong Gateway and Kong Konnect with powerful plugins and easy integrations
Functionality
Tier
Deployment Platforms
Support By
Trusted Content

AI

πŸ‘ Image

AI A2A Proxy

Provide observability and gateway control for Agent-to-Agent (A2A) protocol traffic, supporting both JSON-RPC and REST bindings

AI License Required
πŸ‘ Image

AI AWS Guardrails

Use AWS Guardrails to validate requests and/or responses in the AI Proxy plugin before forwarding them between clients and upstream LLMs.

AI License Required
πŸ‘ Image

AI Azure Content Safety

Use Azure AI Content Safety to check and audit AI Proxy plugin messages before proxying them to an upstream LLM

AI License Required
πŸ‘ Image

AI Custom Guardrail

Use a third-party guardrails service to validate requests and/or responses in the AI Proxy plugin before forwarding them between clients and upstream LLMs

AI License Required
πŸ‘ Image

AI GCP Model Armor

Audit and validate LLM prompts with Google Cloud Model Armor before forwarding them to an upstream LLM.

AI License Required
πŸ‘ Image

AI LLM as Judge

Evaluate and optimize your Large Language Models with accuracy

AI License Required
πŸ‘ Image

AI Lakera Guard

Inspect and enforce Lakera Guard safety policies on LLM requests and responses before they reach upstream models.

AI License Required
πŸ‘ Image

AI MCP OAuth2

Secure MCP server access with OAuth2 authentication

AI License Required
πŸ‘ Image

AI MCP Proxy

Convert APIs into MCP tools, proxy MCP servers, expose multiple MCP tools for AI clients, and observe MCP traffic in real time.

AI License Required
πŸ‘ Image

AI PII Sanitizer

Protect sensitive information in client request or response bodies before they reach upstream services or clients

AI License Required
πŸ‘ Image

AI Prompt Compressor

Compress prompts before they are sent to LLMs to reduce costs, and improve latency

AI License Required
πŸ‘ Image

AI Prompt Decorator

Prepend or append an array of llm/v1/chat messages to a user’s chat history

πŸ‘ Image

AI Prompt Guard

Check text completion requests against a list of allowed or denied expressions

πŸ‘ Image

AI Prompt Template

Provide fill-in-the-blank AI prompts to users

πŸ‘ Image

AI Proxy

The AI Proxy plugin lets you transform and proxy requests to a number of AI providers and models.

πŸ‘ Image

AI Proxy Advanced

The AI Proxy Advanced plugin lets you transform and proxy requests to multiple AI providers and models at the same time. This lets you set up load balancing between targets.

AI License Required
πŸ‘ Image

AI RAG Injector

Create RAG pipelines by automatically injecting content from a vector database

AI License Required
πŸ‘ Image

AI Rate Limiting Advanced

Provides rate limiting for the AI plugins.

AI License Required
πŸ‘ Image

AI Request Transformer

Use an LLM service to transform a client request body prior to proxying the request to the upstream server

πŸ‘ Image

AI Response Transformer

Use an LLM service to transform the upstream HTTP(S) prior to forwarding it to the client

πŸ‘ Image

AI Semantic Cache

Enhance performance for AI providers by caching LLM responses semantically

AI License Required
πŸ‘ Image

AI Semantic Prompt Guard

Semantically and intelligently create allow and deny lists of topics that can be requested across every LLM.

AI License Required
πŸ‘ Image

AI Semantic Response Guard

Permit or block prompts based on semantic similarity to known LLM responses, preventing misuse of llm/v1/chat or llm/v1/completions requests

AI License Required

Analytics & Monitoring

πŸ‘ Image

AI A2A Proxy

Provide observability and gateway control for Agent-to-Agent (A2A) protocol traffic, supporting both JSON-RPC and REST bindings

AI License Required
πŸ‘ Image

AppDynamics

Integrate Kong Gateway with the AppDynamics APM Platform

Enterprise only
πŸ‘ Image

Datadog

Visualize metrics on Datadog

πŸ‘ Image

OpenTelemetry

Propagate spans and report space to a backend server through OTLP protocol.

πŸ‘ Image

Prometheus

Expose metrics related to Kong Gateway and proxied upstream services in Prometheus exposition format

πŸ‘ Image

StatsD

Send metrics to StatsD

πŸ‘ Image

Zipkin

Propagate Zipkin spans and report tracing data to a Zipkin server

Authentication

πŸ‘ Image

Basic Auth

Secure Services and Routes with Basic Authentication

πŸ‘ Image

HMAC Auth

Add HMAC Authentication to your Gateway Services

πŸ‘ Image

Header Cert Authentication

Authenticate clients with mTLS certificates passed in headers by a WAF or load balancer

Enterprise only
πŸ‘ Image

JWE Decrypt

Decrypt a JWE token in a request

Enterprise only
πŸ‘ Image

JWT

Verify and authenticate JSON Web Tokens

πŸ‘ Image

JWT Signer

Verify and sign one or two tokens in a request

Enterprise only
πŸ‘ Image

Key Auth

Secure Services and Routes with key authentication

πŸ‘ Image

Key Authentication - Encrypted

Add key authentication to your services

Enterprise only
πŸ‘ Image

LDAP Authentication

Integrate Kong with an LDAP server

πŸ‘ Image

LDAP Authentication Advanced

Secure Kong with username and password protection, use LDAP search and service directory mapping

Enterprise only
πŸ‘ Image

Mutual TLS Authentication

Secure routes and services with client certificate and mutual TLS authentication

Enterprise only
πŸ‘ Image

OAuth 2.0 Authentication

Add OAuth 2.0 authentication to your Services and Routes

πŸ‘ Image

OAuth 2.0 Introspection

Integrate Kong Gateway with a third-party OAuth 2.0 Authorization Server

Enterprise only
πŸ‘ Image

OpenID Connect

Integrate Kong Gateway with a third-party OpenID Connect provider

Enterprise only
πŸ‘ Image

SAML

Provides SAML v2.0 authentication and authorization between a service provider (Kong) and an identity provider (IdP)

Enterprise only
πŸ‘ Image

Session

Support sessions for Kong authentication plugins.

πŸ‘ Image

Upstream OAuth

Configure Kong Gateway to obtain an OAuth2 token to consume an upstream API

Enterprise only
πŸ‘ Image

Vault Authentication

Add Vault authentication to your Services or Routes

Enterprise only

Logging

πŸ‘ Image

File Log

Append request and response data to a log file

πŸ‘ Image

HTTP Log

Send request and response logs to an HTTP server

πŸ‘ Image

Kafka Log

Publish logs to a Kafka topic

Enterprise only
πŸ‘ Image

Loggly

Send request and response logs to Loggly

πŸ‘ Image

Solace Log

Publish request and response logs to a Solace endpoint or topic

Enterprise onlyPremium Partner
πŸ‘ Image

Syslog

Send request and response logs to Syslog

πŸ‘ Image

TCP Log

Send request and response logs to a TCP server

πŸ‘ Image

UDP Log

Send request and response logs to a UDP server

Monetization

πŸ‘ Image

Metering & Billing

A licensed add-on through Konnect Metering & Billing. Meter API requests and AI token usage for usage-based billing. Supports flexible customer identification, custom pricing dimensions, and fine-grained traffic filtering.

Enterprise only

Security

πŸ‘ Image

ACME

Let’s Encrypt and ACMEv2 integration with Kong Gateway

πŸ‘ Image

Bot Detection

Detect and block bots or custom clients

πŸ‘ Image

CORS

The CORS plugin lets you add Cross-Origin Resource Sharing (CORS) to a Service or a Route.

πŸ‘ Image

IP Restriction

Allow or deny IPs that can make requests to your services

πŸ‘ Image

Injection Protection

Detect and block injection attacks using regular expressions

Enterprise only
πŸ‘ Image

JSON Threat Protection

Apply size checks on JSON payload and minimize risk of content-level attacks

Enterprise only
πŸ‘ Image

OPA

Authorize requests against Open Policy Agent

Enterprise only
πŸ‘ Image

TLS Handshake Modifier

Requests a client to present its client certificate

Enterprise only
πŸ‘ Image

TLS Metadata Headers

Proxies TLS client certificate metadata to upstream services via an HTTP headers

Enterprise only

Serverless

πŸ‘ Image

AWS Lambda

Invoke and manage AWS Lambda functions from Kong Gateway

πŸ‘ Image

Azure Functions

Invoke and manage Azure functions from Kong Gateway

πŸ‘ Image

Post-Function

Add and manage custom Lua functions to execute after other plugins

πŸ‘ Image

Pre-Function

Add and manage custom Lua functions to run before other plugins

πŸ‘ Image

OpenWhisk

Invoke and manage OpenWhisk actions from Kong Gateway

Traffic Control

πŸ‘ Image

ACL

Control which Consumers can access Services and Routes

πŸ‘ Image

Access Control Enforcement

The ACE plugin manages developer access control to APIs published with Dev Portal.

πŸ‘ Image

Canary Release

Slowly roll out software changes to a subset of users

Enterprise only
πŸ‘ Image

Confluent Consume

Consume messages from Confluent Cloud Kafka topics and make them available through HTTP endpoints

Enterprise onlyPremium Partner
πŸ‘ Image

Forward Proxy Advanced

Allows Kong Gateway to connect to intermediary transparent HTTP proxies

Enterprise only
πŸ‘ Image

GraphQL Proxy Caching Advanced

Cache and serve commonly requested responses in Kong Gateway

Enterprise only
πŸ‘ Image

GraphQL Rate Limiting Advanced

Provides rate limiting for GraphQL queries

Enterprise only
πŸ‘ Image

Kafka Consume

Consume messages from Kafka topics and make them available through HTTP endpoints

Enterprise only
πŸ‘ Image

Mocking

Provide mock endpoints to test your APIs against your Services

Enterprise only
πŸ‘ Image

OAS Validation

Validate HTTP requests and responses based on an OpenAPI 3.0 or Swagger API Specification

Enterprise only
πŸ‘ Image

Proxy Cache

Cache and serve commonly requested responses in Kong

πŸ‘ Image

Proxy Caching Advanced

Cache and serve commonly requested responses in Kong, in-memory or using Redis

Enterprise only
πŸ‘ Image

Rate Limiting

You can use the Rate Limiting plugin to limit how many HTTP requests can be made in a given period of seconds, minutes, hours, days, months, or years.

πŸ‘ Image

Rate Limiting Advanced

Enhanced rate limiting capabilities such as sliding window support, Redis Sentinel support, and increased performance

Enterprise only
πŸ‘ Image

Redirect

Redirect incoming requests to a new URL

πŸ‘ Image

Request Size Limiting

Block requests with bodies greater than a specified size

πŸ‘ Image

Request Termination

Terminates all requests with a specific response

πŸ‘ Image

Request Validator

Validates requests before they reach the upstream service

Enterprise only
πŸ‘ Image

Response Rate Limiting

Rate limit based on a custom response header value.

πŸ‘ Image

Route By Header

Route requests based on specified request headers

Enterprise only
πŸ‘ Image

Service Protection

Prevent abuse and protect services with absolute limits on the number of requests reaching the service

Enterprise only
πŸ‘ Image

Solace Consume

Consume messages from Solace topics and make them available through HTTP endpoints

Enterprise onlyPremium Partner
πŸ‘ Image

Standard Webhooks

Validate that incoming webhooks adhere to the Standard Webhooks specification

πŸ‘ Image

Upstream Timeout

Set custom timeouts on connections to upstream services to override Gateway Service-level timeouts.

Enterprise only
πŸ‘ Image

WebSocket Size Limit

Block incoming WebSocket messages greater than a specified size

Enterprise only
πŸ‘ Image

WebSocket Validator

Validate WebSocket messages before they are proxied

Enterprise only
πŸ‘ Image

XML Threat Protection

Apply structural and size checks on XML payloads

Enterprise only

Transformations

πŸ‘ Image

Confluent

Transform requests into Kafka messages in a Confluent Kafka topic.

Enterprise onlyPremium Partner
πŸ‘ Image

Correlation ID

Correlate requests and responses using a unique ID

πŸ‘ Image

Datakit

Datakit is a workflow engine for working with external APIs

Enterprise only
πŸ‘ Image

DeGraphQL

Transform a GraphQL upstream into a REST API

Enterprise only
πŸ‘ Image

Exit Transformer

Customize Kong exit responses sent downstream

Enterprise only
πŸ‘ Image

Kafka Upstream

Transform requests into Kafka messages in a Kafka topic.

Enterprise only
πŸ‘ Image

Request Callout

Insert arbitrary API calls before proxying a request to the upstream service.

Enterprise only
πŸ‘ Image

Request Transformer

Use regular expressions, variables, and templates to transform requests

πŸ‘ Image

Request Transformer Advanced

Use powerful regular expressions, variables, and templates to transform API requests

Enterprise only
πŸ‘ Image

Response Transformer

Modify the upstream response before returning it to the client

πŸ‘ Image

Response Transformer Advanced

Modify the upstream response before returning it to the client, with greater customization capabilities

Enterprise only
πŸ‘ Image

Route Transformer Advanced

Transform routing by changing the upstream server, port, or path

Enterprise only
πŸ‘ Image

Solace Upstream

Transform requests into Solace messages in a Solace queue or topic

Enterprise onlyPremium Partner
πŸ‘ Image

gRPC-Gateway

Access gRPC services through HTTP REST

πŸ‘ Image

gRPC-Web

Allow browser clients to call gRPC services

πŸ‘ Image

jq

Transform JSON objects included in API requests or responses using jq programs

Enterprise only

3rd Party Plugins

πŸ‘ Image

Traceable.ai

API security with inline request blocking and data capture

Enterprise onlyPremium PartnerThird Party
πŸ‘ Image

Amberflo.io API Metering

API usage metering and usage-based billing

Third Party
πŸ‘ Image

AppSentinels

AppSentinels plugin for API security

Third Party
πŸ‘ Image

AWS Request Signing

Sign requests with AWS SIGV4 and temp credentials for secure use of AWS Lambdas in Kong

Third Party
πŸ‘ Image

CrowdStrike Falcon AIDR Request

Inspect AI prompts against CrowdStrike Falcon AIDR input rules, blocking threats before they reach the upstream LLM

Third Party
πŸ‘ Image

CrowdStrike Falcon AIDR Response

Inspect LLM responses against CrowdStrike Falcon AIDR output rules, redacting or blocking sensitive content before delivery to the client

Third Party
πŸ‘ Image

DataDome

Detect and mitigate attacks on mobile apps, websites, and APIs with DataDome bot and online fraud protection

Third Party
πŸ‘ Image

Imperva API Security

Integrate Kong Gateway with Imperva API Security to discover, monitor, and protect APIs

Third Party
πŸ‘ Image

Impart Security

Integrate Impart Security’s WAF and API security protection platform with Kong Gateway.

Third Party
πŸ‘ Image

Inigo GraphQL

Integrate Kong API Gateway with Inigo GraphQL Observability and Security

Third Party
πŸ‘ Image

Kong Response Size Limiting

Block responses with bodies greater than a specified size

Third Party
πŸ‘ Image

Kong Service Virtualization

Mock virtual API request and response pairs through Kong Gateway

Third Party
πŸ‘ Image

Kong Spec Expose

Expose OAS/Swagger/etc. specifications of auth protected APIs proxied by Kong

Third Party
πŸ‘ Image

Kong Splunk Log

Log API transactions to Splunk using the Splunk HTTP collector

Third Party
πŸ‘ Image

Kong Upstream JWT

Add a signed JWT into the header of proxied requests

Third Party
πŸ‘ Image

Moesif API Monetization and Analytics

Powerful API analytics and usage-based billing to monetize APIs

Third Party
πŸ‘ Image

Noma Runtime Protection

AI-DR runtime protection for all OpenAI-compliant modules through your Kong AI Gateway

Third Party
πŸ‘ Image

Noname Security Kong Traffic Source

Noname Security machine learning & prevention blocking for Kong Gateway discovery

Third Party
πŸ‘ Image

Palo Alto Networks API Security

Enhance your API security by integrating your Kong Gateway with Cortex API Security

Third Party
πŸ‘ Image

Prisma AI Runtime Security (AIRS) API Intercept

Real-time security scanning for AI/LLM traffic using PAN Prisma AI Runtime Security

Third Party
πŸ‘ Image

Salt Security

Integrate Kong API Gateway with Salt Security Discovery & Prevention for API-based apps

Third Party
πŸ‘ Image

TrendAI API Security

Strengthen your overall API Security with TrendAI Vision One

Third Party
πŸ‘ Image

Wallarm

Wallarm is AI-Powered Security Platform for protecting microservices and APIs

Third Party
Something wrong?

Help us make these docs great!

Kong Developer docs are open source. If you find these useful and want to make them better, contribute today!

Still need help?