Open-source gateway that routes AI agent traffic through identity, policy, and audit controls

Archestra.AI was founded in London in 2025 by Matvey Kukuy, Ildar Iskhakov, and Joey Orlando. Kukuy and Iskhakov previously built the incident management platform Amixr, acquired by Grafana in 2021, and Kukuy went on to co-found the AIOps company Keep, acquired by Elastic. Archestra addresses the gap that appears once AI clients such as Claude, Codex, Cursor, n8n, and internally built agents are pointed at real business systems: each connection carries its own credentials, its own blast radius, and no shared record of what was accessed. The platform inserts a controlled layer between those clients and the models, MCP servers, and systems behind them.

Four pieces do the work. An LLM proxy routes requests across providers including OpenAI, Anthropic, Azure, and Bedrock while keeping API keys server-side and capping spend. An MCP gateway supplies a registry, an identity layer, and an audit trail across a catalogue of MCP servers the company says it has evaluated. An agent runtime executes agents as managed, sandboxed workloads. Policy and identity controls, wired to Entra ID, Okta, OIDC, or SAML, evaluate each request before it runs, with OpenTelemetry and Prometheus tracing every call and decision. The code is AGPL-3.0 and free to self-host, with enterprise features free below thirty users. Archestra has raised roughly $13.5M across a 2025 pre-seed led by Concept Ventures and a $10M seed led by 20VC.