Choose OmniSwitch when…
- You want a compact control plane without adopting a Kubernetes-native gateway layer.
- A binary, Docker, or a small self-hosted deployment meets your needs.
- You value local policy and explicit protocol boundaries.
Architecture before checklists
OmniSwitch vs Agent Router
Compare a secure self-hosted control plane, AI gateway routing, and agent protocol scope with Agent Router. Evaluate the operating model before the feature list.
Updated · Public beta
Formerly Envoy AI Gateway. Register a8a594b; each cell records its own version and verified date. A capability review, not a benchmark.
At a glance
Choose Agent Router when…
- Kubernetes and Envoy are already part of your architecture.
- You want AI routing integrated with that gateway platform.
- You have verified the current CRDs, charts, and protocol support for your workload.
No scores or totals: uneven documentation coverage is not a measure of product quality.
The full capability comparison
READING THE MATRIXSupportedPartialNot availableNot verified
| Capability | OmniSwitch[1]Register a8a594b | Agent Router[7]Formerly Envoy AI Gateway |
|---|---|---|
| Deployment & license | ||
| Self-hosted deployment | Not verifiedNo claim is recorded for this capability in the pinned register.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ | Not verifiedNo claim is recorded for this capability in the pinned register.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| SQLite / Postgres storage | SupportedSQLite by default; PostgreSQL via OMNISWITCH_DATABASE_URL. Logs and keys remain SQLite-local even in the Postgres case per the project's own docs.
| Not availableState is Kubernetes CRDs / Envoy xDS config, not an embedded SQL database.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Kubernetes manifests / Helm chart | SupportedKustomize manifests (Deployment/Service/ConfigMap/Secret example/PVCs/Redis) plus a Helm chart; no operator/CRDs/inference-aware routing.
| SupportedNative Kubernetes Gateway API controller with an official Helm chart; this is the project's only real deployment target (no practical loopback/single-binary mode for a fair same-host comparison).
|
| Config hot reload | SupportedConfig hot reload covers routes, guardrails, cache posture, circuit breaker, and shadow provider without restart.
| Not verifiedKubernetes CRD reconciliation implies config changes without a full restart, but this was not independently confirmed as "hot reload" in the project's own terms.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Built-in dashboard/UI | SupportedLocal dashboard for logs, metrics, prompts, providers, and guardrails.
| Not availableNo bundled dashboard found; this is a Kubernetes control-plane/CRD project, not a single binary with a UI.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| License | Supported | Not verifiedThe former envoyproxy/ai-gateway GitHub repository now redirects to theagentrouter/agent-router (project renamed to "Agent Router" during 2026; the project states images, CRDs, CLI (aigw), and Go module path are unchanged). License metadata read back from the redirect target (Apache-2.0) but this may reflect a different/renamed project's repo settings rather than a re-verified license for the exact codebase; treat as unknown pending direct confirmation.
|
| APIs & providers | ||
| OpenAI-compatible chat completions | Supported/v1/chat/completions, streaming and non-streaming.
| SupportedOpenAI-compatible routing documented.
|
| OpenAI-compatible embeddings | Supported | Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| OpenAI Responses API | Partial/v1/responses text subset only (no image/audio/tool-streaming parity with OpenAI).
/v1/responses text subset only (no image/audio/tool-streaming parity with OpenAI). | Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Anthropic Messages API | Partial/v1/messages core subset. | Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Native (non-passthrough) provider adapters | Partial4 native adapters (OpenAI, Anthropic, Google, Groq); no native Bedrock/Vertex/Cohere. Everything else goes through the generic OpenAI-compatible custom adapter with 15+ documented presets.
4 native adapters (OpenAI, Anthropic, Google, Groq); no native Bedrock/Vertex/Cohere. Everything else goes through the generic OpenAI-compatible custom adapter with 15+ documented presets. | SupportedModel virtualization across multiple providers documented.
|
| Custom/generic OpenAI-compatible endpoint | SupportedGeneric custom provider adapter with presets for Azure OpenAI, Ollama, vLLM, LiteLLM, DeepSeek, Together, Fireworks, and aliases.
| Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Routing, reliability & cost | ||
| Routing & fallbacks | Supportedroute-level fallbacks, max_retries, retry_backoff, retry_codes, per-attempt timeout.
| SupportedProvider fallback / automatic failover documented.
|
| Weighted / load-balanced routing | SupportedWeighted variants per route.
| Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Conditional routing (rule/expression based) | SupportedCEL condition expressions on route variants.
| Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Circuit breaker | SupportedDefault 5 failures / 60s cooldown, configurable via gateway.circuit_breaker_failures / _cooldown.
| Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Exact-match cache | SupportedSHA-256 request-fingerprint cache key, tenant-scoped (api_key/workspace/organization/global), SQLite-backed.
| Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Similarity cache (see scope) | SupportedNOT embedding-based. Vectorize() builds a normalized token-frequency map over lowercased, stop-word-filtered tokens; Similarity() is cosine over those token-frequency vectors. State this precisely wherever OmniSwitch's cache is compared to embedding-based semantic caches.
| Not availableThis project's own homepage previously claimed 'no built-in semantic caching' for this gateway ("Semantic Caching" false in the earlier comparison), matching the absence of any caching claim in this gateway's own capability docs.
|
| Budgets and quotas | SupportedCost and token budgets per API key.
| Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Rate limiting | PartialLocal sliding-window request limits plus optional Redis-coordinated fixed window across replicas; no token-based (TPM) limiter.
Local sliding-window request limits plus optional Redis-coordinated fixed window across replicas; no token-based (TPM) limiter. | SupportedUsage-based, token-aware rate limiting and quota-aware routing documented.
|
| Token-based rate limits | Not verifiedNo claim is recorded for this capability in the pinned register.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ | Not verifiedNo claim is recorded for this capability in the pinned register.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Identity & guardrails | ||
| API key management | SupportedHashed API keys, bootstrap owner key, workspace-scoped keys.
| Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| OIDC / JWT identity | SupportedOIDC JWT/JWKS workload identity (identity.oidc.jwks_url/issuer/audience).
| Not verifiedOAuth authentication is documented for the MCP gateway feature specifically; general gateway-level OIDC/JWT auth not independently confirmed.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Mutual TLS | Not availableExplicitly not implemented; listed as a roadmap item, not a shipped feature.
| Not verifiedEnvoy proxies commonly support mTLS termination, but this was not confirmed as a documented capability of this specific project.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| RBAC / policy engine (CEL or equivalent) | SupportedCEL allow/deny authorization rules plus fixed role gates.
| Not verifiedEnvoy Gateway's underlying policy model supports xDS/RBAC filters; a CEL-specific policy surface for this AI gateway project was not confirmed.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Built-in guardrails | SupportedBuilt-in PII/prompt-injection/SQL-injection/toxicity/secret detectors plus custom regex rules, single-pass Rust-WASM scan with pure-Go fallback.
| Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Guardrail webhooks / external connectors | SupportedHTTP webhook connectors with configurable stage/action/timeout/fail_open.
| Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Output redaction | Supportedredact action available on output-stage guardrail rules.
| Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Guardrails applied to streaming output | Supportedguardrails.stream_buffer defaults to true: the full SSE stream is buffered and scanned before release, which means TTFT with guardrails on is dominated by upstream generation time, not gateway overhead. Benchmark both stream_buffer=true and false and label them.
| Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Governed agent infrastructure | ||
| MCP gateway | SupportedHTTP MCP targets with streamed SSE / streamable-HTTP pass-through.
| SupportedFull MCP gateway with server multiplexing, tool routing/filtering, OAuth, and observability documented.
|
| MCP over stdio | SupportedPersistent stdio MCP transport targets.
| Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| MCP federation (multiple targets) | SupportedMultiple named MCP targets, policy-gated tools/call, server-side headers.
| SupportedMCP server multiplexing across multiple targets documented.
|
| OpenAPI-to-MCP conversion | Not availableNot implemented; explicit gap in the project's own comparison doc.
| SupportedThis project's internal comparison table lists this gateway (as agentgateway's sibling ecosystem entry / envoy-ai-gateway) as "Yes" for OpenAPI-to-MCP conversion; not independently re-verified against this project's current docs.
|
| MCP OAuth / token exchange | SupportedRFC 8693 token exchange plus RFC 7523 JWT Bearer Grant for MCP OAuth delegation.
| SupportedOAuth authentication for the MCP gateway documented.
|
| A2A agent card discovery | SupportedPublic A2A v1 Agent Card discovery (/.well-known/agent-card.json) plus authenticated GetExtendedAgentCard.
Current protocol scope: SendMessage, SendMessageStream (SSE task events), GetTask, best-effort CancelTask; tasks in memory; no push notifications; no downstream agent proxy. | Not availableNo evidence of native A2A support found; the documented agent/tool integration focus is MCP.
|
| A2A task methods | PartialSendMessage / SendMessageStream, GetTask, CancelTask implemented (JSON-RPC methods and REST aliases). Agent card advertises pushNotifications: false, so push-notification task updates are not supported.
Current protocol scope: SendMessage, SendMessageStream (SSE task events), GetTask, best-effort CancelTask; tasks in memory; no push notifications; no downstream agent proxy. SendMessage / SendMessageStream, GetTask, CancelTask implemented (JSON-RPC methods and REST aliases). Agent card advertises pushNotifications: false, so push-notification task updates are not supported. | Not availableSame as above.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Operations & evidence | ||
| Prompt management | PartialTemplates with version history and rendering; no approval workflow, rollback/promotion, or experiments.
Templates with version history and rendering; no approval workflow, rollback/promotion, or experiments. | Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Evals / experiments | PartialPolicy replay endpoint for batch allow/deny simulation only; no model-quality eval datasets/scoring.
Policy replay endpoint for batch allow/deny simulation only; no model-quality eval datasets/scoring. | Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| OTLP telemetry export | SupportedOTel trace export (tested against Langfuse/Jaeger/Tempo).
| SupportedEnterprise observability documented; Envoy's ecosystem is commonly OTel-instrumented (e.g. Apache SkyWalking's Envoy AI Gateway monitoring guide).
|
| Prometheus metrics | Supported/metrics endpoint, gated by OMNISWITCH_PROMETHEUS_ENABLED.
| Not verifiedNot confirmed in available sources.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
| Published cross-gateway benchmarks | PartialIn-repo Rust-WASM-vs-Go guardrail micro-benchmark only (BENCHMARKS.md, measured on a non-pinned Windows laptop). No cross-gateway comparative run published yet -- this benchmark effort (bench/) is that follow-up.
In-repo Rust-WASM-vs-Go guardrail micro-benchmark only (BENCHMARKS.md, measured on a non-pinned Windows laptop). No cross-gateway comparative run published yet -- this benchmark effort (bench/) is that follow-up. | Not availableNo published cross-gateway overhead benchmark found for this project specifically.
No capability-specific source was recorded. The register is the provenance, not proof of absence. Open pinned register ↗ |
Deployment & license
Self-hosted deployment
- OmniSwitch[1]
Not verified
No claim is recorded for this capability in the pinned register.
- Version
- Not recorded
- Verified
- Not recorded
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗- Agent Router[7]
Not verified
No claim is recorded for this capability in the pinned register.
- Version
- Not recorded
- Verified
- Not recorded
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
SQLite / Postgres storage
- OmniSwitch[1]
Supported
SQLite by default; PostgreSQL via OMNISWITCH_DATABASE_URL. Logs and keys remain SQLite-local even in the Postgres case per the project's own docs.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not available
State is Kubernetes CRDs / Envoy xDS config, not an embedded SQL database.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Kubernetes manifests / Helm chart
- OmniSwitch[1]
Supported
Kustomize manifests (Deployment/Service/ConfigMap/Secret example/PVCs/Redis) plus a Helm chart; no operator/CRDs/inference-aware routing.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Supported
Native Kubernetes Gateway API controller with an official Helm chart; this is the project's only real deployment target (no practical loopback/single-binary mode for a fair same-host comparison).
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
Config hot reload
- OmniSwitch[1]
Supported
Config hot reload covers routes, guardrails, cache posture, circuit breaker, and shadow provider without restart.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
Kubernetes CRD reconciliation implies config changes without a full restart, but this was not independently confirmed as "hot reload" in the project's own terms.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Built-in dashboard/UI
- OmniSwitch[1]
Supported
Local dashboard for logs, metrics, prompts, providers, and guardrails.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not available
No bundled dashboard found; this is a Kubernetes control-plane/CRD project, not a single binary with a UI.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
License
- OmniSwitch[1]
Supported
- Agent Router[7]
Not verified
The former envoyproxy/ai-gateway GitHub repository now redirects to theagentrouter/agent-router (project renamed to "Agent Router" during 2026; the project states images, CRDs, CLI (aigw), and Go module path are unchanged). License metadata read back from the redirect target (Apache-2.0) but this may reflect a different/renamed project's repo settings rather than a re-verified license for the exact codebase; treat as unknown pending direct confirmation.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
APIs & providers
OpenAI-compatible chat completions
- OmniSwitch[1]
Supported
/v1/chat/completions, streaming and non-streaming.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Supported
OpenAI-compatible routing documented.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
OpenAI-compatible embeddings
- OmniSwitch[1]
Supported
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
OpenAI Responses API
- OmniSwitch[1]
Partial
/v1/responses text subset only (no image/audio/tool-streaming parity with OpenAI).
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
/v1/responses text subset only (no image/audio/tool-streaming parity with OpenAI).
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Anthropic Messages API
- OmniSwitch[1]
Partial
/v1/messages core subset.
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Native (non-passthrough) provider adapters
- OmniSwitch[1]
Partial
4 native adapters (OpenAI, Anthropic, Google, Groq); no native Bedrock/Vertex/Cohere. Everything else goes through the generic OpenAI-compatible custom adapter with 15+ documented presets.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
4 native adapters (OpenAI, Anthropic, Google, Groq); no native Bedrock/Vertex/Cohere. Everything else goes through the generic OpenAI-compatible custom adapter with 15+ documented presets.
- Agent Router[7]
Supported
Model virtualization across multiple providers documented.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
Custom/generic OpenAI-compatible endpoint
- OmniSwitch[1]
Supported
Generic custom provider adapter with presets for Azure OpenAI, Ollama, vLLM, LiteLLM, DeepSeek, Together, Fireworks, and aliases.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Routing, reliability & cost
Routing & fallbacks
- OmniSwitch[1]
Supported
route-level fallbacks, max_retries, retry_backoff, retry_codes, per-attempt timeout.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Supported
Provider fallback / automatic failover documented.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
Weighted / load-balanced routing
- OmniSwitch[1]
Supported
Weighted variants per route.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Conditional routing (rule/expression based)
- OmniSwitch[1]
Supported
CEL condition expressions on route variants.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Circuit breaker
- OmniSwitch[1]
Supported
Default 5 failures / 60s cooldown, configurable via gateway.circuit_breaker_failures / _cooldown.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Exact-match cache
- OmniSwitch[1]
Supported
SHA-256 request-fingerprint cache key, tenant-scoped (api_key/workspace/organization/global), SQLite-backed.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Similarity cache (see scope)
- OmniSwitch[1]
Supported
NOT embedding-based. Vectorize() builds a normalized token-frequency map over lowercased, stop-word-filtered tokens; Similarity() is cosine over those token-frequency vectors. State this precisely wherever OmniSwitch's cache is compared to embedding-based semantic caches.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not available
This project's own homepage previously claimed 'no built-in semantic caching' for this gateway ("Semantic Caching" false in the earlier comparison), matching the absence of any caching claim in this gateway's own capability docs.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
Budgets and quotas
- OmniSwitch[1]
Supported
Cost and token budgets per API key.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Rate limiting
- OmniSwitch[1]
Partial
Local sliding-window request limits plus optional Redis-coordinated fixed window across replicas; no token-based (TPM) limiter.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
Local sliding-window request limits plus optional Redis-coordinated fixed window across replicas; no token-based (TPM) limiter.
- Agent Router[7]
Supported
Usage-based, token-aware rate limiting and quota-aware routing documented.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
Token-based rate limits
- OmniSwitch[1]
Not verified
No claim is recorded for this capability in the pinned register.
- Version
- Not recorded
- Verified
- Not recorded
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗- Agent Router[7]
Not verified
No claim is recorded for this capability in the pinned register.
- Version
- Not recorded
- Verified
- Not recorded
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Identity & guardrails
API key management
- OmniSwitch[1]
Supported
Hashed API keys, bootstrap owner key, workspace-scoped keys.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
OIDC / JWT identity
- OmniSwitch[1]
Supported
OIDC JWT/JWKS workload identity (identity.oidc.jwks_url/issuer/audience).
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
OAuth authentication is documented for the MCP gateway feature specifically; general gateway-level OIDC/JWT auth not independently confirmed.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Mutual TLS
- OmniSwitch[1]
Not available
Explicitly not implemented; listed as a roadmap item, not a shipped feature.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
Envoy proxies commonly support mTLS termination, but this was not confirmed as a documented capability of this specific project.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
RBAC / policy engine (CEL or equivalent)
- OmniSwitch[1]
Supported
CEL allow/deny authorization rules plus fixed role gates.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
Envoy Gateway's underlying policy model supports xDS/RBAC filters; a CEL-specific policy surface for this AI gateway project was not confirmed.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Built-in guardrails
- OmniSwitch[1]
Supported
Built-in PII/prompt-injection/SQL-injection/toxicity/secret detectors plus custom regex rules, single-pass Rust-WASM scan with pure-Go fallback.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Guardrail webhooks / external connectors
- OmniSwitch[1]
Supported
HTTP webhook connectors with configurable stage/action/timeout/fail_open.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Output redaction
- OmniSwitch[1]
Supported
redact action available on output-stage guardrail rules.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Guardrails applied to streaming output
- OmniSwitch[1]
Supported
guardrails.stream_buffer defaults to true: the full SSE stream is buffered and scanned before release, which means TTFT with guardrails on is dominated by upstream generation time, not gateway overhead. Benchmark both stream_buffer=true and false and label them.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Governed agent infrastructure
MCP gateway
- OmniSwitch[1]
Supported
HTTP MCP targets with streamed SSE / streamable-HTTP pass-through.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Supported
Full MCP gateway with server multiplexing, tool routing/filtering, OAuth, and observability documented.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
MCP over stdio
- OmniSwitch[1]
Supported
Persistent stdio MCP transport targets.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
MCP federation (multiple targets)
- OmniSwitch[1]
Supported
Multiple named MCP targets, policy-gated tools/call, server-side headers.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Supported
MCP server multiplexing across multiple targets documented.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
OpenAPI-to-MCP conversion
- OmniSwitch[1]
Not available
Not implemented; explicit gap in the project's own comparison doc.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Supported
This project's internal comparison table lists this gateway (as agentgateway's sibling ecosystem entry / envoy-ai-gateway) as "Yes" for OpenAPI-to-MCP conversion; not independently re-verified against this project's current docs.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
MCP OAuth / token exchange
- OmniSwitch[1]
Supported
RFC 8693 token exchange plus RFC 7523 JWT Bearer Grant for MCP OAuth delegation.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Supported
OAuth authentication for the MCP gateway documented.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
A2A agent card discovery
- OmniSwitch[1]
Supported
Public A2A v1 Agent Card discovery (/.well-known/agent-card.json) plus authenticated GetExtendedAgentCard.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
Current protocol scope: SendMessage, SendMessageStream (SSE task events), GetTask, best-effort CancelTask; tasks in memory; no push notifications; no downstream agent proxy.
- Agent Router[7]
Not available
No evidence of native A2A support found; the documented agent/tool integration focus is MCP.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
A2A task methods
- OmniSwitch[1]
Partial
SendMessage / SendMessageStream, GetTask, CancelTask implemented (JSON-RPC methods and REST aliases). Agent card advertises pushNotifications: false, so push-notification task updates are not supported.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
Current protocol scope: SendMessage, SendMessageStream (SSE task events), GetTask, best-effort CancelTask; tasks in memory; no push notifications; no downstream agent proxy.
SendMessage / SendMessageStream, GetTask, CancelTask implemented (JSON-RPC methods and REST aliases). Agent card advertises pushNotifications: false, so push-notification task updates are not supported.
- Agent Router[7]
Not available
Same as above.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Operations & evidence
Prompt management
- OmniSwitch[1]
Partial
Templates with version history and rendering; no approval workflow, rollback/promotion, or experiments.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
Templates with version history and rendering; no approval workflow, rollback/promotion, or experiments.
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Evals / experiments
- OmniSwitch[1]
Partial
Policy replay endpoint for batch allow/deny simulation only; no model-quality eval datasets/scoring.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
Policy replay endpoint for batch allow/deny simulation only; no model-quality eval datasets/scoring.
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
OTLP telemetry export
- OmniSwitch[1]
Supported
OTel trace export (tested against Langfuse/Jaeger/Tempo).
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Supported
Enterprise observability documented; Envoy's ecosystem is commonly OTel-instrumented (e.g. Apache SkyWalking's Envoy AI Gateway monitoring guide).
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
Prometheus metrics
- OmniSwitch[1]
Supported
/metrics endpoint, gated by OMNISWITCH_PROMETHEUS_ENABLED.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
- Agent Router[7]
Not verified
Not confirmed in available sources.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
Published cross-gateway benchmarks
- OmniSwitch[1]
Partial
In-repo Rust-WASM-vs-Go guardrail micro-benchmark only (BENCHMARKS.md, measured on a non-pinned Windows laptop). No cross-gateway comparative run published yet -- this benchmark effort (bench/) is that follow-up.
- Version
- v0.2.0-beta (commit 88a27c0)
- Verified
- 2026-09-11
In-repo Rust-WASM-vs-Go guardrail micro-benchmark only (BENCHMARKS.md, measured on a non-pinned Windows laptop). No cross-gateway comparative run published yet -- this benchmark effort (bench/) is that follow-up.
- Agent Router[7]
Not available
No published cross-gateway overhead benchmark found for this project specifically.
- Version
- Agent Router (formerly Envoy AI Gateway); aigw CLI image docker.io/envoyproxy/ai-gateway-cli:latest sha256:ad0d4ffe2924dd3f46414687e9331f5fa947b9f2c9db735accaad9f2275aff56
- Verified
- 2026-09-11
No capability-specific source was recorded. The register is the provenance, not proof of absence.
Open pinned register ↗
OmniSwitch scope. The pinned register marks OpenAI Responses API, Anthropic Messages API, Native (non-passthrough) provider adapters, Rate limiting, Mutual TLS, OpenAPI-to-MCP conversion, A2A task methods, Prompt management, Evals / experiments, Published cross-gateway benchmarks as partial or unavailable. Read each source and version; compare them with the build you actually deploy.
Read unknowns carefully. “Not verified” means an evidence gap, not absence. Editions remain separate. Register a8a594b; 2 compared deployments.
A2A (Beta). SendMessage, SendMessageStream (SSE task events), GetTask, best-effort CancelTask; tasks in memory; no push notifications; no downstream agent proxy.
Running side by side
Agent Router has a different platform or proxy operating model. Start a separate OmniSwitch deployment, define a representative route, and compare request behavior and operational fit. No base-URL migration guide is offered without verified compatibility on both sides.
Start a local evaluationDated market context
Envoy AI Gateway → Agent Router
The project was renamed Agent Router in v1.2.0 on 6 October 2026. Existing API groups, CRDs, charts, images, and CLI names remain unchanged. It is not the separate AgentGateway project.
Source · accessed 2026-10-09Sources & methodology
- [1]
OmniSwitch
Product register a8a594b. Cells reflect registered source claims, not roadmap plans or release-artifact availability; each retains its own verified date and version.
- [7]
Agent Router
Formerly Envoy AI Gateway. Capability-specific documentation and dated editorial sources remain separate from independent testing.
Supported means documented within the named capability and deployment scope, not full product parity. Beta and licensed editions are shown when the register supplies a qualifier. Not verified describes an evidence gap, not absence. Claims come from the pinned register; cells have no scores or totals. This is a dated documentation review, not a performance test or a security certification. See the benchmark methodology.