Skip to main content

​
Availability

EditionDeployment Type
Community & EnterpriseSelf-Managed, Hybrid
Tyk AI Studio’s plugin system enables powerful extensibility across the entire platform through a Unified Plugin SDK. Built on HashiCorp’s go-plugin framework, plugins run as isolated processes with gRPC communication, providing security and fault tolerance.

​
Unified Plugin SDK

All plugins now use a single SDK (pkg/plugin_sdk) that works seamlessly in both AI Studio and Edge Gateway contexts. The SDK automatically detects the runtime environment and provides appropriate capabilities.

​
Key Features

  • Single Import: One SDK works everywhere
  • 10 Plugin Capabilities: Mix and match to build exactly what you need
  • Runtime Detection: Automatic AI Studio vs Edge Gateway detection
  • Service API Access: Built-in KV storage, logging, and management APIs
  • Type-Safe: Clean Go interfaces, no manual proto handling

​
Plugin Capabilities

Plugins implement one or more of these 12 capabilities:
CapabilityWhere It WorksPurposeCommon Use Cases
Pre-AuthStudio + GatewayProcess before authenticationIP filtering, request validation
AuthStudio + GatewayCustom authenticationOAuth, API keys, JWT validation
Post-AuthStudio + GatewayProcess after authenticationRequest enrichment, policy enforcement
ResponseStudio + GatewayModify responsesContent filtering, header injection
Data CollectionStudio + GatewayCollect telemetryExport to Elasticsearch, ClickHouse
Custom EndpointsGatewayServe custom HTTP endpointsMCP proxy, OAuth provider, webhooks
Object HooksStudio onlyIntercept CRUD operationsValidation, approval workflows
AgentStudio onlyConversational AIChat-based agents, LLM wrapping
UI ProviderStudio onlyDashboard extensionsCustom dashboards, admin tools
Portal UIStudio onlyPortal extensionsUser-facing forms, pages, dashboards
Config ProviderStudio + GatewayProvide JSON Schema configDynamic configuration
Manifest ProviderGateway onlyPlugin manifestGateway-only plugins

​
Multi-Capability Plugins

A single plugin can implement multiple capabilities. For example, a rate limiter might:
  • Implement Post-Auth to check limits before request
  • Implement Response to update counters after response
  • Implement UI Provider to show rate limit dashboard

​
Plugin Types Overview

While all plugins use the unified SDK, they generally fall into three categories based on their primary use case:

​
1. Edge Gateway Plugins

Edge Gateway plugins provide middleware hooks in the LLM proxy request/response pipeline using the unified SDK. Learn more →

​
2. AI Studio UI Plugins

AI Studio UI plugins extend the dashboard with custom WebComponents, adding new pages, sidebars, and interactive features to the admin interface. These also use the unified SDK and can combine UI capabilities with middleware hooks. Learn more →

​
3. AI Studio Agent Plugins

Experimental Feature: Agent plugins are currently experimental. The API and behavior may change in future releases.
Agent plugins enable conversational AI experiences in the Chat Interface using the unified SDK. These plugins can wrap LLMs, add custom logic, integrate external services, and create sophisticated multi-turn conversations. Learn more →

​
4. Object Hooks Plugins

Object Hooks are a powerful AI Studio-only capability that allows plugins to intercept and control CRUD operations on key objects before they reach the database. This is particularly useful for validation, approval workflows, and policy enforcement. Learn more →

​
Plugin Architecture

​
Monolithic Plugin Architecture

A single plugin binary can run in both AI Studio and the Edge Gateway, so long as the requisite interfaces are implemented and the requirements are clear in the manifest file. This means one plugin can provide UI extensions in Studio, middleware hooks in the gateway, and even use the event bus to communicate between its Studio and gateway components in near-real-time.

​
Scheduled Tasks

Studio plugins can register scheduled tasks — periodic calls from the host to the plugin on a configurable interval. This enables long-running background jobs such as analytics analysis, compliance checks, log scanning, or data synchronization.

​
Process Isolation

Plugins run as separate processes, communicating with the main platform via gRPC. This provides:
  • Security: Plugin crashes don’t affect the main platform
  • Language Flexibility: While the gRPC protocol theoretically supports any language, only Go plugins have been tested in production. If you plan to write plugins in another language, expect to do additional integration work.
  • Resource Management: Plugins can be restarted independently
  • Version Independence: Update plugins without platform restarts
Plugins can also run as standalone gRPC services in a sidecar or elsewhere on the network, rather than as local sub-processes. See Plugin Deployment for details.

​
Communication Flow

​
Service API (AI Studio Plugins Only)

AI Studio UI and Agent plugins can access the Service API via a reverse gRPC broker connection: The Service API provides 100+ gRPC operations for managing LLMs, apps, tools, datasources, analytics, and more. Access is controlled via permission scopes declared in the plugin manifest. Learn more about Service API →

​
Deployment Options

Plugins support three deployment methods:

​
file://

Local filesystem plugins for development and testing: 
file:///path/to/plugin-binary

​
grpc://

Remote gRPC plugins running as network services: 
grpc://plugin-host:50051

​
oci://

Container registry plugins (OCI artifacts): 
oci://registry.example.com/plugins/my-plugin:v1.0.0
Learn more about deployment →

​
Permissions and Scopes

AI Studio plugins declare required permissions in their manifest: 
{
  "permissions": {
    "services": [
      "llms.proxy",      // Call LLMs via proxy
      "llms.read",       // List and read LLM configs
      "tools.execute",   // Execute tools
      "datasources.query", // Query datasources
      "kv.readwrite",    // Key-value storage
      "analytics.read"   // Read analytics data
    ]
  }
}
Permissions are validated when plugins call the Service API. The platform enforces least-privilege access based on declared scopes. Learn more about manifests →

​
Getting Started

​
Choose Your Plugin Type

  1. Need to intercept/modify LLM requests? → Edge Gateway Plugin
  2. Building dashboard UI features? → AI Studio UI Plugin
  3. Creating conversational AI experiences? → AI Studio Agent Plugin

​
Development Workflow

  1. Choose your plugin type
  2. Read the specific plugin guide
  3. Review example plugins in examples/plugins/ and community/plugins/
  4. Use the SDK to implement required interfaces
  5. Build and test with file:// deployment (see Development Workflow Guide for fast iteration)
  6. Deploy with grpc:// or oci:// for production
Pro tip: Use the reload API (POST /api/v1/plugins/{id}/reload) to test changes instantly without reinstalling. See the Development Workflow Guide for the fastest iteration loop.

​
SDK Installation

All plugins use the unified SDK: 
go get github.com/TykTechnologies/midsommar/v2/pkg/plugin_sdk

import "github.com/TykTechnologies/midsommar/v2/pkg/plugin_sdk"

type MyPlugin struct {
    plugin_sdk.BasePlugin
}

func main() {
    plugin_sdk.Serve(NewMyPlugin())
}
Note: If you have existing plugins using the old SDKs (microgateway/plugins/sdk or pkg/ai_studio_sdk), see the Migration Guide for upgrade instructions.