Dzone iconDzoneSep 9, 2026

Part 2: Securing and Scaling Goose-to-Java Agent Traffic With agentgateway

In Part 1 of this series, we built a Quarkus-based MCP tool server and connected it to the Goose AI agent over Streamable HTTP. The moment you imagine 50 developers running Goose on their laptops, all hitting the same set of backend MCP servers, the architecture starts to crack.

Part 2: Securing and Scaling Goose-to-Java Agent Traffic With agentgateway

Share this story

Send the public story page.

Useful takeaways from this story.

In Part 1 of this series, we built a Quarkus-based MCP tool server and connected it to the Goose AI agent over Streamable HTTP.

The moment you imagine 50 developers running Goose on their laptops, all hitting the same set of backend MCP servers, the architecture starts to crack.

This article answers those questions by placing agentgateway — the Linux Foundation's open-source proxy for agentic AI traffic — between Goose clients and the Quarkus MCP microservices we built in Part 1.

Building the complete brief

The page is ready to read now. The fuller skim-friendly version will appear here automatically.

The useful part

In Part 1 of this series, we built a Quarkus-based MCP tool server and connected it to the Goose AI agent over Streamable HTTP. The moment you imagine 50 developers running Goose on their laptops, all hitting the same set of backend MCP servers, the architecture starts to crack. This article answers those questions by placing agentgateway — the Linux Foundation's open-source proxy for agentic AI traffic — between Goose clients and the Quarkus MCP microservices we built in Part 1.

How it works

  • The tools worked, the demo was clean, and everything ran on localhost.

Details worth keeping

Which role authorized the getAuditTrail invocation?

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app