Citrix Unveils NetScaler MCP Gateway With Centralized Security for AI Agents

In Cybersecurity News - Original News Source is cybersecuritynews.com by Blog Writer

Spread the love

Citrix has introduced new NetScaler capabilities designed to secure and govern enterprise AI agents that use the Model Context Protocol (MCP).

Announced on July, the NetScaler MCP Gateway provides a centralized entry point for AI agents connecting to approved MCP servers, while expanded NetScaler AI Gateway features add model routing and token-level visibility for large language model traffic.

The update addresses a growing security challenge as organizations move agentic AI projects from pilot deployments into production.

AI agents can query databases, call internal tools, access business applications, and perform multi-step workflows.

Without centralized controls, enterprises may end up with unmanaged MCP servers, inconsistent authentication, excessive permissions, and limited visibility into agent activity.

MCP is an emerging standard that enables AI models and agents to interact with external tools, services, and enterprise data.

However, widespread MCP adoption can create the same management problems seen in traditional API environments, including fragmented endpoints, weak access controls, and unpredictable traffic volumes.

Citrix Unveils NetScaler MCP Gateway

Citrix said its MCP Gateway is intended to bring these interactions under a unified policy and security layer. NetScaler MCP Gateway dynamically routes agent requests to authorized backend MCP servers.

This reduces the need for development and infrastructure teams to manage separate access policies, authentication methods, and endpoints for every MCP deployment.

The gateway supports centralized authentication through per-user tokens, global tokens, OAuth, and hybrid authentication flows.

Security teams can also apply tool-based rate limits and configure server allowlists or blocklists. These controls can help prevent AI agents from reaching unauthorized services or repeatedly executing high-volume requests.

Such safeguards are especially relevant in regulated sectors, including healthcare, financial services, and government, where AI agents may access sensitive records or operational systems.

Citrix also added session persistence and protocol-aware health monitoring for MCP workloads. Session persistence helps ensure that an agent remains connected to the appropriate backend server during a multi-step workflow.

Health monitoring can identify unavailable or unhealthy MCP servers before they disrupt an agent task. Alongside MCP Gateway, Citrix expanded its NetScaler AI Gateway, which launched in April.

The platform now supports content switching-based model routing, allowing organizations to direct AI requests to different language models according to policy.

For example, a company could route routine requests to a lower-cost model while sending more complex workloads to a higher-capability model. The AI Gateway also tracks input and output token usage, as well as requests, by team, user, or application.

This gives organizations greater visibility into AI consumption, helping them monitor costs, detect unusual usage patterns, and assign responsibility for AI spending across business units.

Citrix said it is testing a private technology preview for Claude Code deployments. In this scenario, NetScaler AI Gateway serves as a centralized LLM gateway for developers who access Anthropic models via a service provider.

The approach can provide one authentication and policy control point for large developer populations, while allowing organizations to route traffic across providers as demand changes.

The company emphasized NetScaler’s single-pass architecture, which performs authentication, routing, traffic management, rate limiting, security inspection, and observability on a single data path.

Citrix said this design minimizes added latency and CPU overhead for high-volume AI and MCP traffic. The new capabilities are included at no additional cost for customers with Citrix Platform License or Universal Hybrid Multi-Cloud licenses.

Citrix has also deployed NetScaler AI Gateway internally to govern prompts, model interactions, and token usage for its Citrix Aidrien AI assistant.

 Strengthen Your SOC by Accelerating Threat Detection & Rapid Investigations. -> Integrate ANY.RUN With Your SOC Now.