Kong Plugin Hub | Kong Docs

AI

AI Proxy

Call supported Large Language Model vendors and models through Kong Gateway, using mediated data formats and authentication

AI Proxy Advanced icon

AI Proxy Advanced

Route across different LLMs and models using advanced load balancing algorithms, including semantic routing

AI Azure Content Safety icon

AI Azure Content Safety

Use Azure Cognitive Services (Content Safety) to check and audit AI Proxy plugin messages before proxying them to an upstream LLM

AI Prompt Decorator icon

AI Prompt Decorator

Prepend or append an array of llm/v1/chat messages to a user's chat history

AI Prompt Guard icon

AI Prompt Guard

Check llm/v1/chat or llm/v1/completions requests against a list of allowed or denied expressions

AI Prompt Template icon

AI Prompt Template

Provide fill-in-the-blank AI prompts to users

AI RAG Injector icon

AI RAG Injector

Integrate RAG (retrieval-augmented generation) capabilities into your LLM application requests

AI Rate Limiting Advanced icon

AI Rate Limiting Advanced

Provide rate limiting for AI providers defined in the AI plugins

AI Request Transformer icon

AI Request Transformer

Use an LLM service to inspect and transform the client's request body prior to proxying the request to the upstream server

AI Response Transformer icon

AI Response Transformer

Use an LLM service to examine the upstream HTTP(S) prior to forwarding it to the client

AI Sanitizer icon

AI Sanitizer

Sanitize the PII information in requests before being proxied by the AI Gateway

AI Semantic Cache icon

AI Semantic Cache

Enhance performance for AI providers by caching LLM responses semantically

AI Semantic Prompt Guard icon

AI Semantic Prompt Guard

Semantically and intelligently create allow and deny lists of topics that can be requested across every LLM.

Authentication

Basic Authentication icon

Basic Authentication

Add Basic Authentication to your services

HMAC Auth

Add HMAC Authentication to your services

Header Cert Authentication icon

Header Cert Authentication

Authenticate clients with mTLS certificates passed in headers by a WAF or load balancer

JWE Decrypt icon

JWE Decrypt

Decrypt a JWE token in a request

JWT

Verify and authenticate JSON Web Tokens

Key Auth

Add key authentication to your Services

Key Authentication - Encrypted icon

Key Authentication - Encrypted

Add key authentication to your services

Kong JWT Signer icon

Kong JWT Signer

Verify and sign one or two tokens in a request

LDAP Authentication icon

LDAP Authentication

Integrate Kong with an LDAP server

LDAP Authentication Advanced icon

LDAP Authentication Advanced

Secure Kong with username and password protection, use LDAP search and service directory mapping

Mutual TLS Authentication icon

Mutual TLS Authentication

Secure routes and services with client certificate and mutual TLS authentication

OAuth 2.0 Authentication icon

OAuth 2.0 Authentication

Add OAuth 2.0 authentication to your service

OAuth 2.0 Introspection icon

OAuth 2.0 Introspection

Integrate Kong with a third-party OAuth 2.0 Authorization Server

OpenID Connect icon

OpenID Connect

Integrate Kong with a third-party OpenID Connect provider

Portal Application Registration icon

Portal Application Registration

Allow portal developers to register applications against services

SAML

Provides SAML v2.0 authentication and authorization between a service provider (Kong) and an identity provider (IdP)

Session

Support sessions for Kong authentication plugins.

Upstream OAuth icon

Upstream OAuth

Configure Kong Gateway to obtain an OAuth2 token to consume an upstream API

Vault Authentication icon

Vault Authentication

Add Vault authentication to your services

Okta

Integrate Okta's API Access Management (OAuth as a Service) with Kong API Gateway

Security

ACME

Let's Encrypt and ACMEv2 integration with Kong Gateway

Bot Detection icon

Bot Detection

Detect and block bots or custom clients

CORS

Allow developers to make requests from the browser

IP Restriction icon

IP Restriction

Allow or deny IPs that can make requests to your services

Injection Protection icon

Injection Protection

Detect and block injection attacks using regular expressions

JSON Threat Protection icon

JSON Threat Protection

Apply size checks on JSON payload and minimize risk of content-level attacks

OPA

Authorize requests against Open Policy Agent

TLS Handshake Modifier icon

TLS Handshake Modifier

Requests a client to present its client certificate

TLS Metadata Headers icon

TLS Metadata Headers

Proxies TLS client certificate metadata to upstream services via HTTP headers

Imperva API Security icon

Imperva API Security

Integrate Kong Gateway with Imperva API Security to discover, monitor, and protect APIs

Traceable.ai icon

Traceable.ai

API security with inline request blocking and data capture

Traffic Control

ACL

Control which consumers can access services

Canary Release icon

Canary Release

Slowly roll out software changes to a subset of users

Confluent Consume icon

Confluent Consume

Consume messages from Confluent Cloud Kafka topics and make them available through HTTP endpoints

Forward Proxy Advanced icon

Forward Proxy Advanced

Allows Kong to connect to intermediary transparent HTTP proxies

GraphQL Proxy Caching Advanced icon

GraphQL Proxy Caching Advanced

Cache and serve commonly requested responses in Kong

GraphQL Rate Limiting Advanced icon

GraphQL Rate Limiting Advanced

Provide rate limiting for GraphQL queries

Kafka Consume icon

Kafka Consume

Consume messages from Apache Kafka topics and make them available through HTTP endpoints

Mocking

Provide mock endpoints to test your APIs against your services

OAS Validation icon

OAS Validation

Validate HTTP requests and responses based on an OpenAPI 3.0 or Swagger API Specification

Proxy Cache icon

Proxy Cache

Cache and serve commonly requested responses in Kong

Proxy Caching Advanced icon

Proxy Caching Advanced

Cache and serve commonly requested responses in Kong

Rate Limiting icon

Rate Limiting

Rate limit how many HTTP requests can be made in a period of time

Rate Limiting Advanced icon

Rate Limiting Advanced

Upgrades Kong Rate Limiting with more flexibility and higher performance

Redirect

Redirect incoming requests to a new URL

Request Size Limiting icon

Request Size Limiting

Block requests with bodies greater than a specified size

Request Termination icon

Request Termination

Terminates all requests with a specific response

Request Validator icon

Request Validator

Validates requests before they reach the upstream service

Response Rate Limiting icon

Response Rate Limiting

Rate limit based on a custom response header value

Route By Header icon

Route By Header

Route request based on request headers

Service Protection icon

Service Protection

Prevent abuse and protect services with absolute limits on the number of requests reaching the service

Standard Webhooks icon

Standard Webhooks

Validate that incoming webhooks adhere to the Standard Webhooks specification, which Kong contributes to

Upstream Timeout icon

Upstream Timeout

Set timeouts on routes and override service-level timeouts

WebSocket Size Limit icon

WebSocket Size Limit

Block incoming WebSocket messages greater than a specified size

WebSocket Validator icon

WebSocket Validator

Validate WebSocket messages before they are proxied

XML Threat Protection icon

XML Threat Protection

Apply structural and size checks on XML payloads

Serverless

AWS Lambda icon

AWS Lambda

Invoke and manage AWS Lambda functions from Kong

Apache OpenWhisk icon

Apache OpenWhisk

Invoke and manage OpenWhisk actions from Kong

Azure Functions icon

Azure Functions

Invoke and manage Azure functions from Kong

Kong Functions (Post-Plugin) icon

Kong Functions (Post-Plugin)

Add and manage custom Lua functions to run after other plugins

Kong Functions (Pre-Plugins) icon

Kong Functions (Pre-Plugins)

Add and manage custom Lua functions to run before other plugins

Analytics & Monitoring

Dynatrace

Set up Dynatrace with the OpenTelemetry plugin to send traces, metrics, and logs to Dynatrace

AppDynamics icon

AppDynamics

Integrate Kong with the AppDynamics APM Platform

Datadog

Visualize metrics on Datadog

OpenTelemetry icon

OpenTelemetry

Propagate spans and report space to a backend server through OTLP protocol.

Prometheus icon

Prometheus

Expose metrics related to Kong and proxied upstream services in Prometheus exposition format

StatsD

Send metrics to StatsD

StatsD Advanced icon

StatsD Advanced

(Deprecated) Send metrics to StatsD with more flexible options

Zipkin

Propagate Zipkin spans and report space to a Zipkin server

Transformations

Confluent

Transform requests into Kafka messages in a Confluent topic.

Correlation ID icon

Correlation ID

Correlate requests and responses using a unique ID

DeGraphQL

Transform a GraphQL upstream into a REST API

Exit Transformer icon

Exit Transformer

Customize Kong exit responses sent downstream

Kafka Upstream icon

Kafka Upstream

Transform requests into Kafka messages in a Kafka topic.

Request Callout icon

Request Callout

Call out to third-party APIs as part of request processing

Request Transformer icon

Request Transformer

Use regular expressions, variables, and templates to transform requests

Request Transformer Advanced icon

Request Transformer Advanced

Use powerful regular expressions, variables, and templates to transform API requests

Response Transformer icon

Response Transformer

Modify the upstream response before returning it to the client

Response Transformer Advanced icon

Response Transformer Advanced

Modify the upstream response before returning it to the client, with greater customization capabilities

Route Transformer Advanced icon

Route Transformer Advanced

Transform routing by changing the upstream server, port, or path

gRPC-Web

Allow browser clients to call gRPC services

gRPC-gateway icon

gRPC-gateway

Access gRPC services through HTTP REST

jq

Transform JSON objects included in API requests or responses using jq programs.

Logging

File Log

Append request and response data to a log file

HTTP Log

Send request and response logs to an HTTP server

Kafka Log

Publish logs to a Kafka topic

Loggly

Send request and response logs to Loggly

Syslog

Send request and response logs to Syslog

TCP Log

Send request and response logs to a TCP server

UDP Log

Send request and response logs to a UDP server

Contact 3rd party for support

AWS Request Signing icon

AWS Request Signing

Sign requests with AWS SIGV4 and temp credentials for secure use of AWS Lambdas in Kong.

Amberflo.io API Metering icon

Amberflo.io API Metering

API usage metering and usage-based billing.

Amberflo.io Inc.

AppSentinels icon

AppSentinels

AppSentinels plugin for API security

Kong DataDome Plugin icon

Kong DataDome Plugin

DataDome's bot and online fraud protection detects and mitigates attacks on mobile apps, websites, and APIs with unparalleled accuracy and zero compromise.

Impart Security icon

Impart Security

Integrate Impart Security's WAF and API security protection platform with Kong.

Impart Security

Imperva API Security icon

Imperva API Security

Integrate Kong Gateway with Imperva API Security to discover, monitor, and protect APIs

Inigo GraphQL icon

Inigo GraphQL

Integrate Kong API Gateway with Inigo GraphQL Observability and Security

Moesif API Monetization and Analytics icon

Moesif API Monetization and Analytics

Powerful API analytics and usage-based billing to monetize APIs

Noname Security Kong Traffic Source icon

Noname Security Kong Traffic Source

Noname Security machine learning & prevention blocking for Kong API Gateway discovery

Noname Security

Okta

Integrate Okta's API Access Management (OAuth as a Service) with Kong API Gateway

Kong Response Size Limiting icon

Kong Response Size Limiting

Block responses with bodies greater than a specified size

Kong Service Virtualization icon

Kong Service Virtualization

Mock virtual API request and response pairs through Kong Gateway

Kong Spec Expose icon

Kong Spec Expose

Expose OAS/Swagger/etc. specifications of auth protected APIs proxied by Kong

Kong Splunk Log icon

Kong Splunk Log

Log API transactions to Splunk using the Splunk HTTP collector

Kong Upstream JWT icon

Kong Upstream JWT

Add a signed JWT into the header of proxied requests

Salt Security icon

Salt Security

Integrate Kong API Gateway with Salt Security Discovery & Prevention for API-based apps

Wallarm

Wallarm is AI-Powered Security Platform for protecting microservices and APIs