What happened
On Sept 30, 2026 Kong announced general availability of Kong AI Gateway 2.2 in Kong Konnect: governed MCP tool access via MCP Server Bundling (single route exposing only tools each caller may see/execute), Dyna-cost governance with modality-aware pricing (text/audio/image/video, cache reads vs writes), identity-aware AI policies keyed on authenticated principal via Kong Identity, native AWS IAM/SigV4 auth for Bedrock AgentCore, and expanded model/provider support (Kimi, Microsoft Foundry, SageMaker, Jev).
Why it matters
AI Gateway 2.2 is one of the first mainstream API-gateway releases to bake MCP tool-level authorization and agent-identity-aware policy into the data plane, giving enterprises governed access to agent tool sprawl rather than one-off LLM routing — a core Security-of-AI infrastructure capability reaching GA.
Applicability
API/platform teams already on Kong should enable 2.2 to consolidate MCP server sprawl behind single-endpoint tool authorization and enforce identity-aware agent policies; evaluate for agent-traffic governance.