Where an API gateway is used as the single entry point to a microservices application or as a front-end-to-backend connector during migration from legacy software, management routes all client requests through the gateway to the correct downstream services, minimises point-to-point connections, aggregates results across microservices, supports different client types through separate gateways where needed, and secures the gateway as the booklet and the OWASP API Security Project describe.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.