# Federated connectivity

Two organisations each operate their own Agent Gateway. A federated connection links them over an encrypted DIDComm tunnel so surfaces on one gateway can route traffic to surfaces on the other, without either side exposing internal endpoints directly.

| Guide | What you will achieve |
| [Connect two gateways](/products/affinidi-trust-fabric/agent-gateway/how-to-guides/connections/connect-gateways.md) | Establish a DIDComm tunnel between two Agent Gateway instances so surfaces can route traffic between them. |
| [Configure GW-to-GW authentication and routing](/products/affinidi-trust-fabric/agent-gateway/how-to-guides/connections/g2g-authentication-and-routing.md) | Validate source and target authentication flows across a live GW-to-GW MCP connection using scenario playbooks covering auth enforcement and secret injection. |
| [Agent validation via a trust registry](/products/affinidi-trust-fabric/agent-gateway/how-to-guides/connections/agent-validation-via-trust-registry.md) | Configure Trust Check queries against a trust registry and write OPA policy rules that enforce access decisions based on trust verification outcomes. |
| [Set up event notifications](/products/affinidi-trust-fabric/agent-gateway/how-to-guides/connections/set-up-event-notifications.md) | Deliver gateway event alerts to email, Slack, a webhook, or a streaming platform. |
| [Send audit events to an external system](/products/affinidi-trust-fabric/agent-gateway/how-to-guides/connections/send-audit-events-to-an-integration.md) | Choose the governance audit events the VP Audit Log keeps and deliver selected events to a SIEM, webhook, or stream through a Governance Audit integration. |

## Pages in this section
- [Agent validation via Trust Registry](/products/affinidi-trust-fabric/agent-gateway/how-to-guides/connections/agent-validation-via-trust-registry.md): Configure Trust Check queries against trust registries and enforce access using Policy decisions on Trust Check outcomes.
- [Connect two gateways](/products/affinidi-trust-fabric/agent-gateway/how-to-guides/connections/connect-gateways.md): How to add a DIDComm mediator on each gateway, create a connection point invitation, import it on the receiving gateway, approve the connection, and expose surfaces to the paired gateway.
- [Configure GW-to-GW authentication and routing](/products/affinidi-trust-fabric/agent-gateway/how-to-guides/connections/g2g-authentication-and-routing.md): Build and validate secure Gateway-to-Gateway MCP workflows between two companies, using the Caller Context, Target Authentication, and Policy elements, with practical scenarios for routing, credential injection, and troubleshooting.
- [Set up event notifications](/products/affinidi-trust-fabric/agent-gateway/how-to-guides/connections/set-up-event-notifications.md): Send alerts to email, Slack, a webhook, or a streaming platform when gateway events occur, by joining an endpoint and an event set in an integration.
- [Send audit events to an external system](/products/affinidi-trust-fabric/agent-gateway/how-to-guides/connections/send-audit-events-to-an-integration.md): Choose which governance audit events the VP Audit Log keeps, deliver them to a SIEM, webhook, stream, email, or Slack through an endpoint and an event set of audit events, set delivery limits, and confirm records arrive.

