MCP and AI gateways · #4 by signal score
Pomerium
Identity-aware access proxy that protects MCP servers and internal apps with per-user, per-tool policy and per-call logging; open source under Apache 2.0 with a hosted Pomerium Zero option.
32Signal score / 100
- Capital
- 4.5/35
- Product
- 17/25
- Standards
- 0/20(not yet assessed)
- Momentum
- 10/20
Identity primitives
| Agent as a first-class identity | Not checked |
| On-behalf-of token exchange | Not checked |
| Cross App Access (ID-JAG) | Not checked |
| Asynchronous human approval (CIBA) | Not checked |
| MCP authorization conformance | No public claim found |
| Fine-grained authorization | Claimed |
| Short-lived, secretless credentials | Not checked |
| Token vault | Not checked |
| Kill switch | No public claim found |
| Per-action audit chain | Not checked |
Company
HQ: US
Funding: $18M disclosed, latest Series A
Product: Pomerium
Open source
5,044 stars · 104 contributors
Last push 2026-10-14
Sources
- Pomerium docs: MCP (vendor, accessed 2026-10-14)
- Pomerium home page (vendor, accessed 2026-10-14)
- Access management startup Pomerium raises $13.75 million (trade-press, accessed 2026-10-14)
Last verified 2026-10-14.