Kong Gateway Plugin License Tiers

Each Kong Gateway subscription tier gives you access to a subset of plugins.

Free tier: Open-source Kong Gateway plugins. Available in:
- Kong Gateway Free tier (Enterprise package, self-managed)
- Kong Gateway (OSS) (open-source package, self-managed)
Enterprise tier: All Kong plugins. Available in:
- Kong Gateway Enterprise (self-managed) If you’re looking for plugin deployment topology compatibility, supported network protocols, and supported entity scopes, see Plugin Compatibility.

In Konnect, you have access to all plugins, regardless of your subscription tier — as long as the plugins are compatible with Konnect.

Plugin	Free	Enterprise
Portal Application Registration
Basic Authentication
Header Cert Authentication
HMAC Auth
JWE Decrypt
JWT
Kong JWT Signer
Key Auth
Key Authentication - Encrypted
LDAP Authentication
LDAP Authentication Advanced
Mutual TLS Authentication
OAuth 2.0 Authentication
OAuth 2.0 Introspection
OpenID Connect
SAML
Session
Upstream OAuth
Vault Authentication

Plugin	Free	Enterprise
ACL
Canary Release
Forward Proxy Advanced
GraphQL Proxy Caching Advanced
GraphQL Rate Limiting Advanced
Mocking
OAS Validation
Proxy Cache
Proxy Caching Advanced
Rate Limiting
Rate Limiting Advanced
Request Size Limiting
Request Termination
Request Validator
Response Rate Limiting
Route By Header
Standard Webhooks
Upstream Timeout
WebSocket Size Limit
WebSocket Validator
XML Threat Protection

Plugin	Free	Enterprise
Confluent
Correlation ID
DeGraphQL
Exit Transformer
gRPC-gateway
gRPC-Web
jq
Kafka Upstream
Request Transformer
Request Transformer Advanced
Response Transformer
Response Transformer Advanced
Route Transformer Advanced