Overview
MAI Gateway - Enterprise-Grade Large Model Governance Gateway
MAI Gateway transforms dispersed, uncontrolled model call consumption into a budgetable, attributable, auditable, and stably-running enterprise LLM infrastructure. Treat every token as a managed asset while balancing innovation freedom with cost control.
Multi-Model Aggregated Access
- One integration, multiple vendors, zero business code changes
- Unified OpenAI-compatible API interface decouples business logic from model providers - no vendor lock-in
- Centralized management of multi-brand LLM APIs including DeepSeek, Qwen, GLM, Kimi, MiniMax, Anthropic, OpenAI, and Google
- Self-controlled model launch with fine-grained permission management - assign visibility and call permissions by project or employee
GPU Computing Power Management
- Centralized management of data center and cloud platform GPU computing power servers
- Real-time monitoring of GPU utilization with dynamic scheduling by business workload
- Supports NVIDIA H100, A100, and L40S GPU nodes
- 99% availability target for computing resources
Intelligent Routing and Failover
- Production-grade call stability with intelligent routing in default, high-availability, and primary-backup modes
- Automatic failover on upstream timeout, rate-limit, or outage events
- Proactive link quality detection with auto-downgrade and self-healing recovery
- 7x24 monitoring with second-level switching - upstream fluctuations do not affect business continuity
- Complete call flow: App request, authentication, quota/budget check, intelligent routing, upstream model, metering/logging/response
Token Full Lifecycle Key Management
- Key lifecycle management: create/bind, use/quota throttle, periodic rotation, offboarding revocation, and audit trail
- IP blacklist/whitelist and access frequency limits
- Idle, expiring, high-frequency, and high-consumption token detection with alerting
- LLM attack protection including prompt injection prevention, content filtering, and sensitive data desensitization
- RBAC permission matrix with Employee, Project Lead, Department Admin, and Auditor roles
FinAPI Full-Chain Cost Control
- 4-level layered budgets: organization, department, project, and key with monthly budget and token ceilings
- Real-time millisecond-level validation for pass/reject decisions
- 3-level consumption alerts at 80%, 95%, and 100% thresholds
- Overrun handling options: throttle, block, or temporary expansion
- Month-end attribution with auto-generated reports by department, project, user, and token
- Visual dashboard showing real-time cost overview, remaining budget, alert counts, and circuit breaker counts
Full-Chain Monitoring and Audit
- Real-time dashboard tracking daily total requests, daily token consumption, interface failure rate (SLO target 0.10% or less), and anomaly events
- Trace ID full-chain detection capturing time, project, key, model, token, latency, and status for every call
- AI asset backup and management - eliminates black box operations with full traceability
Deployment Architecture
- Internal/external isolation with unified exit through enterprise firewall
- Internal apps access MAI Gateway as single exit point; gateway connects to heterogeneous models externally
- Public network completely shielded with data desensitization and zero public network exposure
- Supports integration with Dify, custom AI platforms, enterprise knowledge bases, RAG systems, and AI workflow automation
Who Benefits
MAI Gateway serves enterprise IT teams, finance and CFO teams, AI engineering teams, department managers, and compliance/audit teams deploying and governing LLM usage across the organization.
Highlights
- Unified multi-model access with zero code changes - aggregate LLM APIs from DeepSeek, Qwen, GLM, Anthropic, OpenAI, Google, and more through a single OpenAI-compatible interface. Decouple business logic from model providers to eliminate vendor lock-in. Assign model visibility and call permissions by project or employee with fine-grained RBAC controls spanning Employee, Project Lead, Department Admin, and Auditor roles.
- Full-chain cost governance with 4-level layered budgets (organization, department, project, key), millisecond-level real-time validation, 3-tier consumption alerts at 80%/95%/100% thresholds, and automated month-end attribution reports. Visual dashboards provide real-time cost overview, remaining budget tracking, and top cost consumer identification by department - making every token budgetable, attributable, and optimizable.
- Production-grade stability and security with intelligent routing (default, high-availability, primary-backup modes), automatic failover on upstream timeout or outage, proactive link quality detection with self-healing recovery, and 7x24 monitoring with second-level switching. Token lifecycle management includes periodic rotation, IP blacklist/whitelist, prompt injection prevention, content filtering, and sensitive data desensitization for complete security compliance.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Vendor refund policy
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
V1.0-20260724
Additional details
Usage instructions
After subscribing to MAI Gateway on AWS Marketplace, launch the AMI on a recommended c6i.2xlarge EC2 instance (Ubuntu, OS user "ubuntu"). Ensure inbound TCP port 22 (SSH) is open in the security group for administration.
Step 1: Connect to the instance via SSH: ssh ubuntu@<instance-public-ip> Step 2: The MAI Gateway service starts automatically on boot. Verify status with: sudo systemctl status mai-gateway Step 3: Open the admin console in a browser at http://<instance-public-ip> (default web port). Sign in with the initial admin credentials shown in the instance system log on first boot. Step 4: In the console, configure your upstream model providers (DeepSeek, Qwen, GLM, Anthropic, OpenAI, Google, etc.), then create API keys and set organization, department, project, and key-level budgets. Step 5: Point your existing OpenAI-compatible SDK or HTTP client to the gateway base URL http://<instance-public-ip>/v1 and use your MAI Gateway API key.
Configuration requirements: a running EC2 instance (c6i.2xlarge recommended), outbound network access to your chosen model providers, and inbound access to the console/API port for your users.
Full setup, configuration, and API reference documentation: https://www.itqm.com Support: aws@itqm.com
Support
Vendor support
MAI Gateway provides support to help enterprise teams deploy, configure, and operate the LLM governance gateway. For assistance with product setup, troubleshooting, or general inquiries, please contact the MAI Gateway support team through the AWS Marketplace seller contact channel.Support for MAI Gateway - Enterprise LLM Governance and Cost Control
We provide enterprise-grade support to ensure smooth onboarding, integration, and ongoing operation of MAI Gateway.
Support channels:
- Email: aws@itqm.com
- Web / contact form: https://www.itqm.com
Support scope:
- Product onboarding, configuration, and integration guidance
- Troubleshooting for gateway routing, model access, cost and usage reporting, and governance policies
- Guidance on API usage, quotas, and best practices
Response times (business hours, GMT+8, Mon to Fri 9:00 to 18:00):
- Critical (service down): initial response within 4 business hours
- High (major feature impaired): within 1 business day
- Normal (questions and how-to): within 2 business days
Availability:
- Standard support is included with your subscription at no extra cost.
- For 24/7 or SLA-backed enterprise support, please contact us to arrange a custom support plan.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.