Zuplo
Ship Your API to Agents

Your API, in every agent — secured, documented, governed.

Behind every AI agent is a team that needs keys, docs, and guardrails. Zuplo turns your OpenAPI spec into MCP tools — with OAuth, portal docs, and audit built in — on the gateway you already run.

API Routes

GET/orders
POST/tickets
GET/users/{id}
Zuplo
Zuplo

MCP Tools

list_orders()
create_ticket()
get_user_status()
Claude
ChatGPT
Gemini
Agents as API consumers

Agents are already consuming APIs.

Agents reach APIs through MCP — ship it, and yours is the one they find and use.

Invisible APIs don't get used

If your API isn't MCP, Claude, ChatGPT, and Cursor can't find it.

Agents don't fill out forms

They sign in, discover your tools, and read your docs — all on their own.

Agent traffic is API traffic

It runs through the same auth, rate limits, and audit trail as the rest of your API.

OpenAPI to production

The full loop, on one gateway

Expose, secure, document, and bill — all on the gateway you already run.

01

Turn your OpenAPI spec into MCP tools

Tag the operations agents should use and deploy — no second codebase, no drift.

MCP Server
02

Let any agent sign in

OAuth is built into the gateway. Agents onboard themselves; users keep their login.

MCP Gateway
03

Docs humans and agents both read

Your portal documents MCP next to your REST reference — one place to point anyone.

Developer Portal
04

Bill MCP usage through Stripe

Gate access by plan; the teams behind agents subscribe like any other customer.

Monetization
How it works

Your spec is the MCP server

Pick the operations agents should use, tag them, deploy. Every tool call runs through the same policy pipeline — auth, rate limits, monetization — as the underlying route.

JSONOpenAPI → MCP tools
# routes.oas.json (excerpt)
"/forecast/{location}": {
  "get": {
    "operationId": "getForecast",
    "summary": "Get the forecast for a location",
    "x-zuplo-route": {
      "mcp": { "type": "tool" }
    }
  }
},
"/alerts": {
  "get": {
    "operationId": "listAlerts",
    "summary": "List active weather alerts",
    "x-zuplo-route": {
      "mcp": { "type": "tool" }
    }
  }
}

# Register on the MCP handler:
"/mcp" route → mcpServerHandler({
  operations: [
    { file: "routes.oas.json", id: "getForecast" },
    { file: "routes.oas.json", id: "listAlerts" }
  ]
})
Identity for agents

Your customers click Connect. That's it.

The MCP spec demands real sign-in. Zuplo ships it — no tokens to paste, no auth code to write.

Nothing to build

The full OAuth server ships with the gateway, on every plan.

No onboarding queue

Agents register themselves — nobody files a ticket to connect.

A leak stops at one server

A token for one MCP server is rejected at every other.

Cut off anyone, instantly

Revoke a client or a user in one step — no redeploy.

Sign in with what you already run

  • Okta
  • Microsoft Entra ID
  • Auth0
  • Google
  • Clerk
  • WorkOS
  • Amazon Cognito
  • Keycloak
  • Logto
  • OneLogin
  • PingOne
  • Any OIDC provider
For your security review
  • OAuth 2.1
  • PKCE S256
  • DCR · RFC 7591
  • CIMD
  • RFC 8414
  • RFC 9728
  • RFC 8707
  • RFC 7009

See the whole loop — OpenAPI to production MCP — on your own API.

Get an MCP Demo
In production

AccuWeather serves a billion people through Zuplo — and now serves AI agents over MCP, on the same gateway.

Read the AccuWeather story
The road ahead

The agent ecosystem is still taking shape.

Standards like x402 are working out how agents pay for what they use. It's early — but if you're already metering and attributing agent traffic, the groundwork is done.

Our take on x402 and API payments

Frequently Asked Questions

Common questions from API teams shipping MCP to their customers.

Ship your API to agents

Get a walkthrough of the OpenAPI → MCP → OAuth loop on your own API, or start building on the free tier today.