Service Description
Netskope AI Gateway provides the ability to intercept and secure traffic between AI agents and AI models (LLMs), and between Model Context Protocol (MCP) clients and MCP servers, where the Gateway is deployed within a customer-controlled environment.
Definitions and Unit of Measure
A Gateway is a single deployed instance of the Netskope AI Gateway software installed in a customer-controlled environment. It routes, inspects, and secures traffic between AI agents and AI models (LLMs), and between MCP clients and MCP servers.
A Transaction is a request and its response processed by AI Gateway for LLM and MCP traffic.
For LLM traffic: a transaction is a request from an AI agent and a response from the AI model or LLM.
For MCP traffic: a transaction is an HTTP request-response pair passing through the AI Gateway and is subject to rate limiting, access policies, or content inspection.
Units of Measure
- Each Gateway counts as one software instance installed on a customer premise. One subscription unit counts as one individual installation.
-
Each transaction counts as a single request and its corresponding single response — whether between an AI agent and an AI model or LLM, or between an MCP client and an MCP server — as defined above.
Subscription Period: As set forth in a customer’s order.
Licensing Model: Each subscription unit entitles the customer to one AI Gateway instance and a fixed allocation of transactions per calendar month.
AI Gateway Subscription includes AI Guardrail functionality. DLP may be licensed as part of an add-on subscription.
Pooling
AI Gateway entitlements must be assigned to a specific tenant and cannot be shared across customer’s other tenants. Customers operating multiple tenants must license a separate Subscription for each tenant.
Transaction entitlement is assigned per Gateway and may not be shared among multiple Gateways or customer’s other tenants.
No Rollover: Any unused transaction allocations at the end of the calendar month do not roll over to the subsequent period.
Add-on Packages: Customers may purchase incremental subscription units to increase their entitlements for AI Gateways or transactions (through “add-on” packages) at any time during the subscription period, by placing an additional order. Such add-on packages must be assigned to a specific AI Gateway.
Usage Monitoring
Netskope will monitor the customer’s actual usage and notify customer when the number of gateways or transactions exceeds the licensed quantity.
Customers may monitor their usage in their Netskope tenant and through Netskope-provided APIs.
Measurement and Enforcement
Measurement methodology: Netskope measures gateway usage by counting active AI Gateways at any time and totaling transactions processed per AI Gateway monthly.
Overage Notification: Netskope will notify through in-tenant indicators or the account team when usage reaches 80% of the licensed transaction quantity for any AI Gateway.
Service limitations: If transactions exceed the purchased monthly limit, the service suspends until the end of the month. It then resumes with the purchased transaction count at the beginning of the next month. If usage of other services exceeds the purchased entitlement, Netskope may limit functionality until the customer obtains additional licenses or the entitlement resets at the beginning of the next month.
Overage remediation: If a customer’s AI Gateway exceed their purchased entitlement, they must act within 30 days of notification.
-
License extra AI Gateway packages to cover the excess for the rest of the subscription period; or
-
Stop using services from AI Gateways exceeding the purchased quantity.
If a customer reaches their transaction entitlement, they may purchase additional quantities for the remainder of the subscription period to increase entitlement and resume suspended service.
Customer Records: The customer maybe required to provide written confirmation of the number of AI Gateways and transactions upon reasonable request by Netskope.