Akhil M.

⭐ 5-star rated on Upwork. ⭐ 4.9-star rated on Google.

Client testimonials on integrauth website

🦍 Custom Kong plugins in Lua, 🛡️ Auth0 / IAM & 🤖 MCP security from the primary author of Enkrypt AI's open-source Secure MCP Gateway.

8,000 hours on Upwork, 5.0 rating, Google 4.9 rating, clients who stay for years.

I'm Akhil, founder of IntegrAuth. Nearly 8 years in identity and API security. What clients hire me for:

🦍 KONG API GATEWAY + LUA PLUGINS

• 10 custom Kong plugins for an AI-security platform: AI proxy for 9 model providers (OpenAI, Anthropic, Bedrock, Azure, Gemini, Cohere, Mistral), guardrails, credit metering with per-project limits, all with unit specs
• Request/response transformation, REST to SOAP, JSON to XML, token introspection, caching, queue batching
• One plugin codebase that runs on Kong before and after the 3.3 queue change
• Docker custom images, luarocks packaging, scripted deploys and tests

🔌 API GATEWAY INTEGRATIONS (15 PLATFORMS)

Built and maintained an API-security vendor's integrations for Kong, Cloudflare Workers, Azure APIM and Front Door, AWS API Gateway and CloudFront, GCP, IBM DataPower and API Connect, MuleSoft Mule and Flex, WSO2, Akana and KrakenD. Plus functional and performance test pipelines and shared libraries in Node, Go and Rust. That job started here on Upwork as a 2-month contract and ran over 3 years.

🛡️ IAM, CIAM AND AUTHORIZATION

• Auth0 (Okta CIC) end to end: Universal Login, Actions, Organizations, adaptive MFA, custom RBAC with audit history, deploy CLI in CI
• OAuth 2.0/2.1, OIDC, SAML 2.0, SCIM, DPoP, token exchange
• Fine-grained authorization with OpenFGA and OPA
• Oracle IAM and migrations off legacy IdPs

🤖 MCP AND AI-AGENT SECURITY

• Primary author of the open-source Secure MCP Gateway: auth, guardrails on tool calls, OpenTelemetry, admin API
• Primary author of a public Python SDK for guardrails and red teaming and maintain public API docs
• MCP server scanning, tool-poisoning tests, container CVE hardening

🏗️ AI PLATFORM ARCHITECTURE

For an AI-security platform, 2.5 years from the first HLDs: designed the Kong gateway layer (the 10 plugins above, plus custom rate limiting, transformations and KeyDB caching), north-south and east-west authentication with API keys and OpenFGA, Supabase Postgres schemas and migrations, Next.js APIs, Kubernetes and Helm, GitHub Actions and OpenSearch alerting to Slack, Mintlify docs