Kong Plugin Hub | Kong Docs

AI

AI Proxy

Call supported Large Language Model vendors and models through Kong Gateway, using mediated data formats and authentication

Support by:

AI Proxy Advanced

Route across different LLMs and models using advanced load balancing algorithms, including semantic routing

Support by:

AI Azure Content Safety

Use Azure Cognitive Services (Content Safety) to check and audit AI Proxy plugin messages before proxying them to an upstream LLM

Support by:

AI Prompt Decorator

Prepend or append an array of llm/v1/chat messages to a user's chat history

Support by:

AI Prompt Guard

Check llm/v1/chat or llm/v1/completions requests against a list of allowed or denied expressions

Support by:

AI Prompt Template

Provide fill-in-the-blank AI prompts to users

Support by:

AI Rate Limiting Advanced

Provide rate limiting for AI providers defined in the AI plugins

Support by:

AI Request Transformer

Use an LLM service to inspect and transform the client's request body prior to proxying the request to the upstream server

Support by:

AI Response Transformer

Use an LLM service to examine the upstream HTTP(S) prior to forwarding it to the client

Support by:

AI Semantic Cache

Enhance performance for AI providers by caching LLM responses semantically

Support by:

AI Semantic Prompt Guard

Semantically and intelligently create allow and deny lists of topics that can be requested across every LLM.

Support by:

Authentication

Basic Authentication

Add Basic Authentication to your services

Support by:

HMAC Auth

Add HMAC Authentication to your services

Support by:

Header Cert Authentication

Authenticate clients with mTLS certificates passed in headers by a WAF or load balancer

Support by:

JWE Decrypt

Decrypt a JWE token in a request

Support by:

JWT

Verify and authenticate JSON Web Tokens

Support by:

Key Auth

Add key authentication to your Services

Support by:

Key Authentication - Encrypted

Add key authentication to your services

Support by:

Kong JWT Signer

Verify and sign one or two tokens in a request

Support by:

LDAP Authentication

Integrate Kong with an LDAP server

Support by:

LDAP Authentication Advanced

Secure Kong with username and password protection, use LDAP search and service directory mapping

Support by:

Mutual TLS Authentication

Secure routes and services with client certificate and mutual TLS authentication

Support by:

OAuth 2.0 Authentication

Add OAuth 2.0 authentication to your service

Support by:

OAuth 2.0 Introspection

Integrate Kong with a third-party OAuth 2.0 Authorization Server

Support by:

OpenID Connect

Integrate Kong with a third-party OpenID Connect provider

Support by:

Portal Application Registration

Allow portal developers to register applications against services

Support by:

SAML

Provides SAML v2.0 authentication and authorization between a service provider (Kong) and an identity provider (IdP)

Support by:

Session

Support sessions for Kong authentication plugins.

Support by:

Upstream OAuth

Configure Kong Gateway to obtain an OAuth2 token to consume an upstream API

Support by:

Vault Authentication

Add Vault authentication to your services

Support by:

Okta

Integrate Okta's API Access Management (OAuth as a Service) with Kong API Gateway

Support by:

Okta

Security

ACME

Let's Encrypt and ACMEv2 integration with Kong Gateway

Support by:

Bot Detection

Detect and block bots or custom clients

Support by:

CORS

Allow developers to make requests from the browser

Support by:

IP Restriction

Allow or deny IPs that can make requests to your services

Support by:

Injection Protection

Detect and block injection attacks using regular expressions

Support by:

JSON Threat Protection

Apply size checks on JSON payload and minimize risk of content-level attacks

Support by:

OPA

Authorize requests against Open Policy Agent

Support by:

TLS Handshake Modifier

Requests a client to present its client certificate

Support by:

TLS Metadata Headers

Proxies TLS client certificate metadata to upstream services via HTTP headers

Support by:

Imperva API Security

Integrate Kong Gateway with Imperva API Security to discover, monitor, and protect APIs

Support by:

Imperva

Traceable.ai

API security with inline request blocking and data capture

Support by:

Traceable.ai

Traffic Control

ACL

Control which consumers can access services

Support by:

Canary Release

Slowly roll out software changes to a subset of users

Support by:

Forward Proxy Advanced

Allows Kong to connect to intermediary transparent HTTP proxies

Support by:

GraphQL Proxy Caching Advanced

Cache and serve commonly requested responses in Kong

Support by:

GraphQL Rate Limiting Advanced

Provide rate limiting for GraphQL queries

Support by:

Mocking

Provide mock endpoints to test your APIs against your services

Support by:

OAS Validation

Validate HTTP requests and responses based on an OpenAPI 3.0 or Swagger API Specification

Support by:

Proxy Cache

Cache and serve commonly requested responses in Kong

Support by:

Proxy Caching Advanced

Cache and serve commonly requested responses in Kong

Support by:

Rate Limiting

Rate limit how many HTTP requests can be made in a period of time

Support by:

Rate Limiting Advanced

Upgrades Kong Rate Limiting with more flexibility and higher performance

Support by:

Redirect

Redirect incoming requests to a new URL

Support by:

Request Size Limiting

Block requests with bodies greater than a specified size

Support by:

Request Termination

Terminates all requests with a specific response

Support by:

Request Validator

Validates requests before they reach the upstream service

Support by:

Response Rate Limiting

Rate limit based on a custom response header value

Support by:

Route By Header

Route request based on request headers

Support by:

Service Protection

Prevent abuse and protect services with absolute limits on the number of requests reaching the service

Support by:

Standard Webhooks

Validate that incoming webhooks adhere to the Standard Webhooks specification, which Kong contributes to

Support by:

Upstream Timeout

Set timeouts on routes and override service-level timeouts

Support by:

WebSocket Size Limit

Block incoming WebSocket messages greater than a specified size

Support by:

WebSocket Validator

Validate WebSocket messages before they are proxied

Support by:

XML Threat Protection

Apply structural and size checks on XML payloads

Support by:

Serverless

AWS Lambda

Invoke and manage AWS Lambda functions from Kong

Support by:

Apache OpenWhisk

Invoke and manage OpenWhisk actions from Kong

Support by:

Azure Functions

Invoke and manage Azure functions from Kong

Support by:

Kong Functions (Post-Plugin)

Add and manage custom Lua functions to run after other plugins

Support by:

Kong Functions (Pre-Plugins)

Add and manage custom Lua functions to run before other plugins

Support by:

Analytics & Monitoring

AppDynamics

Integrate Kong with the AppDynamics APM Platform

Support by:

Datadog

Visualize metrics on Datadog

Support by:

OpenTelemetry

Propagate spans and report space to a backend server through OTLP protocol.

Support by:

Prometheus

Expose metrics related to Kong and proxied upstream services in Prometheus exposition format

Support by:

StatsD

Send metrics to StatsD

Support by:

StatsD Advanced

(Deprecated) Send metrics to StatsD with more flexible options

Support by:

Zipkin

Propagate Zipkin spans and report space to a Zipkin server

Support by:

Dynatrace

Set up Dynatrace with the OpenTelemetry plugin to send traces, metrics, and logs to Dynatrace

Support by:

Dynatrace

Transformations

Confluent

Transform requests into Kafka messages in a Confluent topic.

Support by:

Correlation ID

Correlate requests and responses using a unique ID

Support by:

DeGraphQL

Transform a GraphQL upstream into a REST API

Support by:

Exit Transformer

Customize Kong exit responses sent downstream

Support by:

Kafka Upstream

Transform requests into Kafka messages in a Kafka topic.

Support by:

Request Transformer

Use regular expressions, variables, and templates to transform requests

Support by:

Request Transformer Advanced

Use powerful regular expressions, variables, and templates to transform API requests

Support by:

Response Transformer

Modify the upstream response before returning it to the client

Support by:

Response Transformer Advanced

Modify the upstream response before returning it to the client, with greater customization capabilities

Support by:

Route Transformer Advanced

Transform routing by changing the upstream server, port, or path

Support by:

gRPC-Web

Allow browser clients to call gRPC services

Support by:

gRPC-gateway

Access gRPC services through HTTP REST

Support by:

Transform JSON objects included in API requests or responses using jq programs.

Support by:

Logging

File Log

Append request and response data to a log file

Support by:

HTTP Log

Send request and response logs to an HTTP server

Support by:

Kafka Log

Publish logs to a Kafka topic

Support by:

Loggly

Send request and response logs to Loggly

Support by:

Syslog

Send request and response logs to Syslog

Support by:

TCP Log

Send request and response logs to a TCP server

Support by:

UDP Log

Send request and response logs to a UDP server

Support by:

Contact 3rd party for support

AWS Request Signing

Sign requests with AWS SIGV4 and temp credentials for secure use of AWS Lambdas in Kong.

Support by:

The LEGO Group

Amberflo.io API Metering

API usage metering and usage-based billing.

Support by:

Amberflo.io Inc.

AppSentinels

AppSentinels plugin for API security

Support by:

Appsentinels

Kong DataDome Plugin

DataDome's bot and online fraud protection detects and mitigates attacks on mobile apps, websites, and APIs with unparalleled accuracy and zero compromise.

Support by:

DataDome

Impart Security

Integrate Impart Security's WAF and API security protection platform with Kong.

Support by:

Impart Security

Imperva API Security

Integrate Kong Gateway with Imperva API Security to discover, monitor, and protect APIs

Support by:

Imperva

Inigo GraphQL

Integrate Kong API Gateway with Inigo GraphQL Observability and Security

Support by:

Inigo

Moesif API Monetization and Analytics

Powerful API analytics and usage-based billing to monetize APIs

Support by:

Moesif

Noname Security Kong Traffic Source

Noname Security machine learning & prevention blocking for Kong API Gateway discovery

Support by:

Noname Security

Okta

Integrate Okta's API Access Management (OAuth as a Service) with Kong API Gateway

Support by:

Okta

Kong Response Size Limiting

Block responses with bodies greater than a specified size

Support by:

Optum

Kong Service Virtualization

Mock virtual API request and response pairs through Kong Gateway

Support by:

Optum

Kong Spec Expose

Expose OAS/Swagger/etc. specifications of auth protected APIs proxied by Kong

Support by:

Optum

Kong Splunk Log

Log API transactions to Splunk using the Splunk HTTP collector

Support by:

Optum

Kong Upstream JWT

Add a signed JWT into the header of proxied requests

Support by:

Optum

Salt Security

Integrate Kong API Gateway with Salt Security Discovery & Prevention for API-based apps

Support by:

Salt Security

Wallarm

Wallarm is AI-Powered Security Platform for protecting microservices and APIs

Support by:

Wallarm

Welcome to Kong Plugin Hub

Extend Kong Gateway and Kong Konnect with powerful plugins and easy integrations

Plugin Overview | Compatibility | License tiers

AI

Authentication

Security

Traffic Control

Serverless

Analytics & Monitoring

Transformations

Logging

Contact 3rd party for support