• INVENTORY
  • GAP ANALYSIS
  • MAPPING
  • HUMAN ACTION

How to audit gateway security plugins with your AI

Connect Kong Gateway to your AI client once. Your agent then handles the heavy lifting of scanning your configuration for security gaps.

Ask AI about this page

Short answer

How can I use AI to audit my Kong Gateway security?

Your agent pulls a list of active plugins and service details to check for missing authentication or rate-limiting. You get a clear view of your security posture through a direct breakdown of your gateway's state.

Audit outcomes.

What your audit reveals.

The AI maps your security coverage across the gateway.

INVENTORY

Active plugin list

The AI identifies every plugin currently running. You see exactly which security layers are active.

GAP ANALYSIS

Missing protections

Your agent flags services that lack required authentication or rate-limiting. This highlights where you're vulnerable.

MAPPING

Service coverage

The AI links specific plugins to their target services. You'll know which endpoints are unprotected.

HUMAN ACTION

Remediation steps

The AI points out the specific gaps that need your attention. You decide which policies to apply manually.

The workflow

What your AI does when the audit starts.

The agent systematically crawls your gateway configuration to build a security map.

  1. List all plugins

    The agent retrieves a full list of every plugin currently active on your gateway.

    list_plugins

  2. Check plugin details

    Your AI inspects the specific settings of a plugin to verify its configuration.

    get_plugin

  3. Identify services

    The agent pulls a list of all services registered in your Kong instance.

    list_services

  4. Verify service security

    The AI looks at a specific service to see which plugins are protecting it.

    get_service

Try it

Copy these to start.

Use these prompts to kick off your security audit.

Starting points

These are starting points. Swap out the service names or plugin types to match your specific environment.

Kong Gateway Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_YvcjgDsnuK2PnJrPLDW7o9w6piYUNvhDJHjFGlVO/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Kong Gateway capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "kong-gateway-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_YvcjgDsnuK2PnJrPLDW7o9w6piYUNvhDJHjFGlVO/mcp"
    }
  }
}
Copy into chat04

  • List all active plugins on my Kong Gateway and tell me which ones are for authentication.

  • Check the configuration for the 'auth-jwt' plugin on my 'payment-api' service.

  • Are there any services in my gateway that don't have a rate-limiting plugin applied?

  • Show me a summary of all plugins applied to the 'user-profile' service.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Kong Gateway once, then ask.

Provide your gateway credentials to get started. Vinkius keeps your login encrypted, and you can immediately start asking your AI about your configuration.

Connect Kong Gateway to your AI

FAQ

How the security audit works

  • 01

    Can the AI change my plugin settings?

    No. The AI can only read and inspect your existing configuration. It cannot modify, add, or delete any plugins or services.

  • 02

    Can the AI fix a security vulnerability?

    No. The AI identifies the gaps, but you must manually apply any changes or new plugins through your own management tools.

  • 03

    How does the AI know which plugins are on which services?

    The AI uses the available tools to list all plugins and services, then inspects the specific service configurations to see the active plugin associations.

  • 04

    Does this work with any Kong version?

    The AI works with any Kong Gateway instance that you can connect via the MCP.

  • 05

    Can I audit my entire gateway at once?

    Yes. You can ask the AI to list all plugins and all services to get a full overview of your gateway's state.

  • More questions about Kong Gateway? The Connector page answers them. See everything the Kong Gateway Connector can do

Connect Kong Gateway to Claude, Cursor, ChatGPT & more