Features Architecture TTFAC Pricing Docs GitHub
FR Try Free
🇪🇺 Open Source · Apache 2.0 · European Sovereign

The European
Agent Gateway

Try STOA Free Quick Start
1,312 PRs merged 17.7 PRs/day 4,500+ tests 74 days
STOA Console — Dashboard
PRs Merged 0
Tests Passing 0
LOC Shipped 0
PRs / Day 17.7
AI Velocity (3 months)
JanFebMar
AI Factory
$ claude /council CAB-1432
✓ Council: 9.2/10 — Go (Ship)
$ gh pr merge --squash 903
✓ PR #903 merged (17.7 PRs/day avg)
$ |
CNCFCNCF
MCPMCP Protocol
IETFIETF
OpenIDOpenID Connect
OAuthOAuth 2.1
OPAOpen Policy Agent
Apache 2.0
K8sKubernetes
CNCFCNCF
MCPMCP Protocol
IETFIETF
OpenIDOpenID Connect
OAuthOAuth 2.1
OPAOpen Policy Agent
Apache 2.0
K8sKubernetes
The Problem

Before & After

See what changes when you adopt STOA.

Before STOA
API catalogue = Excel spreadsheet
Subscription = email + meetings
Rigid identity layer, hard to federate
Gateway = expensive black box
AI agents? Not possible
After STOA
Visual API portal, self-service
Self-service subscription in 2 clicks
Federated identity across IDPs
Gateway orchestrated by STOA
AI agents governed by MCP
Time to First API Call

From weeks to minutes

Traditional API gateways require weeks of configuration. STOA gets your first AI agent connected in under 5 minutes.

Traditional Gateway
0 days
  • Procurement & licensing
  • Infrastructure provisioning
  • Gateway installation
  • API configuration
  • Security policy setup
  • Testing & validation
  • Custom MCP adapter development
STOA Platform
0 minutes
  • docker compose up
  • Define UAC contract
  • Connect AI agent via MCP
AI-Native Protocol

MCP-Native
from day one

STOA speaks the Model Context Protocol natively. No adapters, no plugins, no middleware. Your AI agents connect directly to enterprise APIs through a standardized, secure gateway.

  • Tool discovery & execution
  • OAuth 2.1 + PKCE authentication
  • Streaming & WebSocket transport
STOA
Claude
GPT-4
Gemini
Kill Feature

Universal API
Contract

Define your API contract once, and STOA exposes it everywhere — REST, GraphQL, MCP, gRPC. One source of truth that adapts to any consumer.

  • OpenAPI → MCP auto-transform
  • Schema validation at the edge
  • Version-aware routing
openapi.yaml
REST
MCP
GraphQL
gRPC
Enterprise Ready

Multi-Gateway
orchestration

One control plane for all your gateways. STOA orchestrates Kong, Gravitee, Apigee, Azure APIM, AWS API Gateway, and webMethods from a single pane of glass.

  • 7 Stoa Links
  • Unified policy engine (OPA)
  • Hybrid cloud + on-premise
Kong
Gravitee
Apigee
Azure
AWS
wM
Architecture

Cloud + On-Premise

Hybrid by design. Your data stays where you need it.

Cloud (STOA Control Plane)
Portal
Control Plane
Keycloak
Observability
MCP Gateway
API Sync
OIDC Federation
Metrics Push
On-Premise (Your Infrastructure)
Your IDP
Your Gateway
Your Backends
Why STOA

What Makes Us Different

Four pillars that define the STOA approach.

⚡

MCP-Native

Not a plugin. Architecture.

MCP is built into the core, not bolted on. Every API you publish is instantly available to AI agents via the Model Context Protocol.

🔗

Universal API Contract

Define once, expose everywhere.

One contract powers REST, GraphQL, gRPC, and MCP endpoints. Change once, propagate to all consumers automatically.

🇪🇺

European Sovereign

Not US. Not UK. Not CN.

Designed for European data sovereignty. GDPR-native, NIS2-ready, DORA-supportive. Your data never leaves your jurisdiction.

🔓

True Open Source

Apache 2.0. No BSL. No tricks.

Full Apache 2.0 license. No feature gates, no usage limits, no enterprise-only modules. Fork it, modify it, ship it.

By the Numbers

Built to Ship

0+ Tests
0 Gateway Integrations
0+ Docs Pages
0% Open Source
Cargo Vitest Pytest Playwright E2E
Standards

Built on Open Standards

🔐
IETF Token Exchange
RFC 8693
🔑
OpenID Connect
OIDC Federation
🛡️
CNCF Keycloak
Identity Provider
📊
CNCF Prometheus
Observability
⚙️
MCP Protocol
AI Agent Gateway
📄
Apache License 2.0
True Open Source
Pricing

Simple, Transparent Pricing

Start free, scale as you grow. No hidden fees.

Community

Free forever

Full platform, no limits. Self-host or use our cloud.

  • Full MCP Protocol support
  • Control Plane API + Console UI
  • Developer Portal
  • Multi-gateway orchestration
  • UAC (Universal API Contract)
  • Community support (GitHub, Discord)
Try STOA Free
Recommended

Enterprise

Custom pricing

For teams that need SLAs, SSO, and dedicated support.

  • Everything in Community
  • SSO / SAML integration
  • Multi-environment (dev/staging/prod)
  • Advanced analytics dashboard
  • Priority support with SLA
  • Custom domain + TLS
  • Onboarding assistance
Book a Demo

Sovereign

Custom pricing

For regulated industries requiring full data control.

  • Everything in Enterprise
  • Dedicated infrastructure (EU)
  • On-premise or air-gapped deployment
  • NIS2 / DORA supportive features
  • Dedicated success manager
  • Custom SLA + audit support
Contact Us

Have questions? Read the FAQ

Pricing details available upon request. Plans and quotas subject to change before general availability.

Frequently Asked Questions

Everything you need to know about STOA pricing and plans.

Is STOA really free?
Yes. STOA is open source under the Apache 2.0 license. You can self-host the full platform forever at no cost. No usage limits, no feature gates, no trial expiration.
What's included in the Community plan?
Everything you need to run an AI-native API gateway: MCP Protocol support, the Control Plane API, Console UI, Developer Portal, basic analytics, and community support via GitHub and Discord.
How does Enterprise pricing work?
Enterprise pricing is based on your deployment scale and support needs. Contact our sales team for a custom quote. We offer flexible options for both cloud-hosted and on-premise deployments.
Can I self-host Enterprise features?
Yes. STOA is designed for on-premise and hybrid deployments. Enterprise plans include advanced features like SSO/SAML, multi-environment support, and priority SLA — all deployable in your own infrastructure.
What's the Sovereign plan?
The Sovereign plan is designed for regulated industries (financial services, healthcare, government) that require dedicated infrastructure, data residency guarantees, and compliance support for frameworks like NIS2 and DORA.
Do you offer a free trial?
The Community plan is free forever — no trial needed. You get the full platform with no time limits. For Enterprise and Sovereign plans, we offer guided proof-of-concept engagements.
How do I migrate from another API gateway?
STOA provides migration guides for Kong, Gravitee, Apigee, webMethods, and other popular gateways. Our multi-gateway orchestration lets you run STOA alongside your existing gateway during the transition.

Still have questions? Get in touch

Ready to bridge
legacy to AI?

Join hundreds of teams using STOA to connect their enterprise APIs to the AI agent ecosystem.

Try STOA Free Star on GitHub
0 PRs merged
0 lines of code
0 tests passing
0 Stoa Links