Issue No. 15 • June 18, 2026
Gradient Brief
MLOps & AI Infrastructure — for the engineers building it
Agent Tool Integration Gets a Gateway Layer
The friction of wiring tools into agents is consolidating into a distinct gateway layer. Rather than reconfiguring GitHub, databases, and internal APIs for every agent, teams are routing them through MCP gateways that catalog tools once and expose them through a single governed interface.
The 2026 gateway landscape now spans open-source and managed options with different security postures. Docker's MCP Gateway containerizes each MCP server with hard limits, for example one CPU, 2 GB of memory, and no host filesystem access. Composio and Obot manage the OAuth 2.1 credential lifecycle end to end, while MCPJungle uses bearer-token auth with OAuth on its roadmap. The MCP spec added OAuth 2.1 in 2025, though implementation quality still varies.
For platform teams, the effect is that tool access becomes something to govern centrally. Discovery, sandboxing, and credential handling move to the gateway instead of being rebuilt inside each agent.
Tool of the Week: Executor
Open Source | Self-host or Hosted | executor.sh
Executor is an integration layer that lets agents call any OpenAPI, MCP, GraphQL, or custom JavaScript function from one place. Under the hood every source collapses to the same shape: a tool name, an input schema, and an output schema.
It plugs into any MCP-compatible agent by adding executor as a command in mcp.json. Point it at a URL and it detects the source type, indexes the available tools, and handles authentication. Sources are set up once and shared across a team, removing the per-agent reconfiguration the gateway pattern exists to eliminate.
As a community project (RhysSullivan/executor) it is still early, but it captures where agent tooling is heading: one secure execution surface in front of many tools.
Quick Hits
- NVIDIA's Nemotron 3 family expands Beyond the 550B open Ultra model, NVIDIA's Nemotron 3 Super claims roughly 5x higher throughput for agentic workloads, and Nemotron 3 Nano Omni unifies vision, audio, and language for up to 9x more efficient agents.
- Enterprise registries arrive for MCP Projects like the agentic-community MCP Gateway and Registry add OAuth through Keycloak or Entra plus dynamic tool discovery, turning scattered MCP servers into auditable, centrally governed access.
- Sandboxing becomes the default Container-based isolation, with per-tool CPU, memory, and network limits, is emerging as the standard way to run untrusted MCP tools safely in production.
Gradient Brief is published for ML engineers, data scientists, and technical founders. Forward to a colleague who should be reading this.