How do I install the Microsoft Azure Aigateway skill?

Run npx skillmds@latest add pyfagorass/microsoft-azure-aigateway in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Microsoft Azure Aigateway safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Microsoft Azure Aigateway?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Microsoft Azure Aigateway free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under MIT.

Who published Microsoft Azure Aigateway?

pyfagorass (@pyfagorass) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Microsoft Azure Aigateway by pyfagorass

Name: Microsoft Azure Aigateway
Author: pyfagorass

Microsoft Azure Aigateway

Configure Azure API Management as an AI Gateway for AI models, MCP tools, and agents. WHEN: semantic caching, token limit, content safety, load balancing, AI model governance, MCP rate limiting, jailbreak detection, add Azure OpenAI backend, add AI Foundry model, test AI gateway, LLM policies, configure AI backend, token metrics, AI cost control, convert API to MCP, import OpenAPI to gateway.

pyfagorass Updated Sep 17, 2026

File contents

Azure AI Gateway

Configure Azure API Management (APIM) as an AI Gateway for governing AI models, MCP tools, and agents.

To deploy APIM, use the azure-prepare skill. See APIM deployment guide.

When to Use This Skill

Category	Triggers
Model Governance	"semantic caching", "token limits", "load balance AI", "track token usage"
Tool Governance	"rate limit MCP", "protect my tools", "configure my tool", "convert API to MCP"
Agent Governance	"content safety", "jailbreak detection", "filter harmful content"
Configuration	"add Azure OpenAI backend", "configure my model", "add AI Foundry model"
Testing	"test AI gateway", "call OpenAI through gateway"

Quick Reference

Policy	Purpose	Details
`azure-openai-token-limit`	Cost control	Model Policies
`azure-openai-semantic-cache-lookup/store`	60-80% cost savings	Model Policies
`azure-openai-emit-token-metric`	Observability	Model Policies
`llm-content-safety`	Safety & compliance	Agent Policies
`rate-limit-by-key`	MCP/tool protection	Tool Policies

Get Gateway Details

# Get gateway URL
az apim show --name <apim-name> --resource-group <rg> --query "gatewayUrl" -o tsv

# List backends (AI models)
az apim backend list --service-name <apim-name> --resource-group <rg> \
  --query "[].{id:name, url:url}" -o table

# Get subscription key
az apim subscription keys list \
  --service-name <apim-name> --resource-group <rg> --subscription-id <sub-id>

Test AI Endpoint

GATEWAY_URL=$(az apim show --name <apim-name> --resource-group <rg> --query "gatewayUrl" -o tsv)

curl -X POST "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \
  -H "Content-Type: application/json" \
  -H "Ocp-Apim-Subscription-Key: <key>" \
  -d '{"messages": [{"role": "user", "content": "Hello"}], "max_tokens": 100}'

Common Tasks

Add AI Backend

See references/patterns.md for full steps.

# Discover AI resources
az cognitiveservices account list --query "[?kind=='OpenAI']" -o table

# Create backend
az apim backend create --service-name <apim> --resource-group <rg> \
  --backend-id openai-backend --protocol http --url "https://<aoai>.openai.azure.com/openai"

# Grant access (managed identity)
az role assignment create --assignee <apim-principal-id> \
  --role "Cognitive Services User" --scope <aoai-resource-id>

Apply AI Governance Policy

Recommended policy order in <inbound>:

Authentication - Managed identity to backend
Semantic Cache Lookup - Check cache before calling AI
Token Limits - Cost control
Content Safety - Filter harmful content
Backend Selection - Load balancing
Metrics - Token usage tracking

See references/policies.md for complete example.

Troubleshooting

Issue	Solution
Token limit 429	Increase `tokens-per-minute` or add load balancing
No cache hits	Lower `score-threshold` to 0.7
Content false positives	Increase category thresholds (5-6)
Backend auth 401	Grant APIM "Cognitive Services User" role

See references/troubleshooting.md for details.

References

Detailed Policies - Full policy examples
Configuration Patterns - Step-by-step patterns
Troubleshooting - Common issues
AI-Gateway Samples
GenAI Gateway Docs

SDK Quick References

Content Safety: Python | TypeScript
API Management: Python | .NET

---name: microsoft-azure-aigatewaydescription: Configure Azure API Management as an AI Gateway for AI models, MCP tools, and agents. WHEN: semantic caching, token limit, content safety, load balancing, AI model governance, MCP rate limiting, jailbreak detection, add Azure OpenAI backend, add AI Foundry model, test AI gateway, LLM policies, configure AI backend, token metrics, AI cost control, convert API to MCP, import OpenAPI to gateway.license: MIT---# Azure AI GatewayConfigure Azure API Management (APIM) as an AI Gateway for governing AI models, MCP tools, and agents.> **To deploy APIM**, use the **azure-prepare** skill. See [APIM deployment guide](https://learn.microsoft.com/azure/api-management/get-started-create-service-instance).## When to Use This Skill| Category | Triggers ||----------|----------|| **Model Governance** | "semantic caching", "token limits", "load balance AI", "track token usage" || **Tool Governance** | "rate limit MCP", "protect my tools", "configure my tool", "convert API to MCP" || **Agent Governance** | "content safety", "jailbreak detection", "filter harmful content" || **Configuration** | "add Azure OpenAI backend", "configure my model", "add AI Foundry model" || **Testing** | "test AI gateway", "call OpenAI through gateway" |---## Quick Reference| Policy | Purpose | Details ||--------|---------|---------|| `azure-openai-token-limit` | Cost control | [Model Policies](references/policies.md#token-rate-limiting) || `azure-openai-semantic-cache-lookup/store` | 60-80% cost savings | [Model Policies](references/policies.md#semantic-caching) || `azure-openai-emit-token-metric` | Observability | [Model Policies](references/policies.md#token-metrics) || `llm-content-safety` | Safety & compliance | [Agent Policies](references/policies.md#content-safety) || `rate-limit-by-key` | MCP/tool protection | [Tool Policies](references/policies.md#request-rate-limiting) |---## Get Gateway Details```bash# Get gateway URLaz apim show --name <apim-name> --resource-group <rg> --query "gatewayUrl" -o tsv# List backends (AI models)az apim backend list --service-name <apim-name> --resource-group <rg> \ --query "[].{id:name, url:url}" -o table# Get subscription keyaz apim subscription keys list \ --service-name <apim-name> --resource-group <rg> --subscription-id <sub-id>```---## Test AI Endpoint```bashGATEWAY_URL=$(az apim show --name <apim-name> --resource-group <rg> --query "gatewayUrl" -o tsv)curl -X POST "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \ -H "Content-Type: application/json" \ -H "Ocp-Apim-Subscription-Key: <key>" \ -d '{"messages": [{"role": "user", "content": "Hello"}], "max_tokens": 100}'```---## Common Tasks### Add AI BackendSee [references/patterns.md](references/patterns.md#pattern-1-add-ai-model-backend) for full steps.```bash# Discover AI resourcesaz cognitiveservices account list --query "[?kind=='OpenAI']" -o table# Create backendaz apim backend create --service-name <apim> --resource-group <rg> \ --backend-id openai-backend --protocol http --url "https://<aoai>.openai.azure.com/openai"# Grant access (managed identity)az role assignment create --assignee <apim-principal-id> \ --role "Cognitive Services User" --scope <aoai-resource-id>```### Apply AI Governance PolicyRecommended policy order in `<inbound>`:1. **Authentication** - Managed identity to backend2. **Semantic Cache Lookup** - Check cache before calling AI3. **Token Limits** - Cost control4. **Content Safety** - Filter harmful content5. **Backend Selection** - Load balancing6. **Metrics** - Token usage trackingSee [references/policies.md](references/policies.md#combining-policies) for complete example.---## Troubleshooting| Issue | Solution ||-------|----------|| Token limit 429 | Increase `tokens-per-minute` or add load balancing || No cache hits | Lower `score-threshold` to 0.7 || Content false positives | Increase category thresholds (5-6) || Backend auth 401 | Grant APIM "Cognitive Services User" role |See [references/troubleshooting.md](references/troubleshooting.md) for details.---## References- [**Detailed Policies**](references/policies.md) - Full policy examples- [**Configuration Patterns**](references/patterns.md) - Step-by-step patterns- [**Troubleshooting**](references/troubleshooting.md) - Common issues- [AI-Gateway Samples](https://github.com/Azure-Samples/AI-Gateway)- [GenAI Gateway Docs](https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities)## SDK Quick References- **Content Safety**: [Python](references/sdk/azure-ai-contentsafety-py.md) | [TypeScript](references/sdk/azure-ai-contentsafety-ts.md)- **API Management**: [Python](references/sdk/azure-mgmt-apimanagement-py.md) | [.NET](references/sdk/azure-mgmt-apimanagement-dotnet.md)

Frequently asked questions