# Reference

> Field-level reference for Agent Gateway surfaces, gateways, trust registries, settings, and operations.

This section provides field-level reference material for every configurable component in the Agent Gateway. Each page covers exact field names, types, defaults, and accepted values.

For step-by-step configuration tasks, see [How-to Guides](/products/affinidi-trust-fabric/agent-gateway/how-to-guides.md). For conceptual explanations, see [Concepts](/products/affinidi-trust-fabric/agent-gateway/concepts.md).

## Surfaces

| Reference | What it covers |
| [Surface reference](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces/surface-reference.md) | Top-level AgentSurface panel fields, protocol options, gateway DID injection settings, and the canvas element index. |
| [Access Point](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces/access-point.md) | Inbound listener: panel settings (surface prefix, custom path, A2A protocol) and canvas elements (policy, rate limit, caller context, identity, trust check, extension validation, metadata). |
| [Managed Agent](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces/managed-agent.md) | Upstream destination: endpoint routing and authentication. |
| [Transit Points](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces/transit-points.md) | Agent-initiated outbound routes: transit point panel settings and canvas elements for per-destination policy, rate limiting, and payment. |
| [Variants](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces/variants.md) | Named surface snapshots: alias grammar, canvas configuration, and default variant promotion. |
| [Caller Context](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces/caller-context.md) | Authentication method selection and per-method credential extraction configuration. |
| [Identity](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces/identity.md) | Agent DID extraction at inbound, protected, external, or outbound pipeline edges. |
| [Networking](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces/networking.md) | Request control: timeouts, automatic retry, circuit breaking, traffic mirroring, and the Rate Limit canvas element. |
| [Per-tool policy bindings](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces/mcp-proxy-tool-policies.md) | Per-tool RBAC policy bindings for a Managed Agent targeting an MCP Proxy, on the node labelled MCP Proxy. |
| [MCP Tool Gating](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces/mcp-tool-gating.md) | Regex and condition-based allow/deny firewall over MCP tool names, distinct from the per-tool RBAC bindings above. |
| [Payment](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces/payment.md) | x402 paywall configuration for MCP and A2A surfaces. |
| [Trust elements](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces/trust-element.md) | Trust Check and Trust Recorder elements: TRQP queries, template syntax, result wire shape, error codes, and trust registry writes. |
| [OPA policies](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces/opa-policies.md) | The Policy element, appliance-wide and per-object policy enforcement, policy versioning and dry-run testing, and the complete input field reference for gateway, surface, and MCP tool policy scopes. |
| [Protocol extensions](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces/protocol-extensions.md) | Extension Validation and Extension Rules elements for A2A surfaces. |
| [Metadata elements](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces/metadata.md) | Metadata Injection and Metadata Extraction elements: header manipulation and protocol metadata normalisation. |
| [Outbound binding](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces/outbound-binding.md) | Credential Delegation and Workload Binding elements: outbound credential injection and VP binding. |
## Proxies

| Reference | What it covers |
| [MCP Proxy](/products/affinidi-trust-fabric/agent-gateway/reference/proxies/mcp-proxy.md) | MCP Proxy fields, tool generation, sandbox, and how to target a proxy from a surface. |
| [A2A Proxy](/products/affinidi-trust-fabric/agent-gateway/reference/proxies/a2a-proxy.md) | A2A Proxy fields for adapting a Microsoft Copilot Studio bot, and how to target a proxy from a surface. |
## Authentication

| Reference | What it covers |
| [Secrets](/products/affinidi-trust-fabric/agent-gateway/reference/authentication/secrets.md) | Secret fields, types, and lifecycle operations (create, update, delete). |
| [API keys](/products/affinidi-trust-fabric/agent-gateway/reference/authentication/api-keys.md) | API key fields, key states, and lifecycle operations (create, revoke, rotate, delete). |
| [JWT Verification Strategies](/products/affinidi-trust-fabric/agent-gateway/reference/authentication/jwt-verification-strategies.md) | Strategy fields, token validation sequence, and audience configuration. |
| [STS Clients](/products/affinidi-trust-fabric/agent-gateway/reference/authentication/sts-clients.md) | STS client fields for RFC 8693 token exchange and ID-JAG issuance and redemption. |
| [Access tokens](/products/affinidi-trust-fabric/agent-gateway/reference/authentication/access-tokens.md) | Personal access token fields, scopes, resource scoping, the created-token page, and revoking a token. |
## Gateways

| Reference | What it covers |
| [Gateway object](/products/affinidi-trust-fabric/agent-gateway/reference/gateways/gateway.md) | Gateway fields, status, connection health, and Publishing and Global Policy tab settings. |
| [Connection point object](/products/affinidi-trust-fabric/agent-gateway/reference/gateways/connection-point.md) | Connection point fields, metadata, and connection health. |
| [Mediator](/products/affinidi-trust-fabric/agent-gateway/reference/gateways/mediator.md) | Mediator fields, status values, metadata, and diagnostics. |
## Trust registries

| Reference | What it covers |
| [Trust registry object](/products/affinidi-trust-fabric/agent-gateway/reference/trust-registries/trust-registry.md) | Trust registry fields, verification modes, and mediator configuration. |
| [Issuer object](/products/affinidi-trust-fabric/agent-gateway/reference/trust-registries/issuer.md) | Issuer fields, TR Registration Status values, and actions. |
## Observability

| Reference | What it covers |
| [Tasks](/products/affinidi-trust-fabric/agent-gateway/reference/observability/tasks.md) | Runtime status of surface listeners, connection point tasks, and MCP proxy registrations. Use it to confirm that listeners are up before diagnosing call failures. |
| [Notifications](/products/affinidi-trust-fabric/agent-gateway/reference/observability/notifications.md) | Notification fields, statuses, and the difference between inbox notifications and integration deliveries. |
| [Metrics](/products/affinidi-trust-fabric/agent-gateway/reference/observability/metrics.md) | Field-level reference for ConnectionMetric records exported via OTLP, CloudWatch, or file. Use to interpret fields in your metrics receiver or export files. |
## Payments

| Reference | What it covers |
| [Payments](/products/affinidi-trust-fabric/agent-gateway/reference/payments/payments.md) | Transaction table columns, processing modes, status values, and actions in the Payments view. |
## Configuration

| Reference | What it covers |
| [Integrations](/products/affinidi-trust-fabric/agent-gateway/reference/configuration/integrations.md) | Endpoints, event sets, integrations, template variables, and Governance Audit delivery limits. |
| [Settings](/products/affinidi-trust-fabric/agent-gateway/reference/configuration/settings.md) | Dashboard settings: system settings, user preferences, network and mTLS configuration, admin operations, appliance resource limits, and user management. |
| [Echo server](/products/affinidi-trust-fabric/agent-gateway/reference/configuration/echo-server.md) | Dependency-free local HTTP echo server. Prints incoming requests to stdout and echoes them as JSON. Supports passive echo and active relay modes for Transit Point testing. |

## Pages in this section
- [Surfaces](/products/affinidi-trust-fabric/agent-gateway/reference/surfaces.md)
- [Proxies](/products/affinidi-trust-fabric/agent-gateway/reference/proxies.md)
- [Authentication](/products/affinidi-trust-fabric/agent-gateway/reference/authentication.md)
- [Gateways](/products/affinidi-trust-fabric/agent-gateway/reference/gateways.md)
- [Trust registries](/products/affinidi-trust-fabric/agent-gateway/reference/trust-registries.md)
- [Observability](/products/affinidi-trust-fabric/agent-gateway/reference/observability.md)
- [Payments](/products/affinidi-trust-fabric/agent-gateway/reference/payments.md)
- [Configuration](/products/affinidi-trust-fabric/agent-gateway/reference/configuration.md)