# Gateway reference

> Field reference for the gateway editor in the Agent Gateway dashboard, covering the Overview, Remote, and Publishing tabs.
A gateway record represents either this Agent Gateway instance (the self gateway) or a remote Agent Gateway that this instance communicates with.

For conceptual background, see [Gateways](/products/affinidi-trust-fabric/agent-gateway/concepts/connections/gateways.md). For step-by-step connection setup, see [Connect two gateways](/products/affinidi-trust-fabric/agent-gateway/how-to-guides/connections/connect-gateways.md).

## Overview tab fields

| Setting | Required | Editable | Description |
| Name | Yes | Yes | Human-readable display name for the gateway. |
| Description | No | Yes | Optional description of the gateway’s purpose. |
| Gateway DID | Yes | No | The DID that identifies this gateway instance. Cannot be changed after creation. |
| Gateway ID | — | No | Internal identifier. Used in fabric:// target URLs and API calls. |
| Gateway Enabled | No | Yes (remote only) | Toggle to enable or disable the gateway. The self gateway cannot be disabled. |

The self gateway’s DID is generated automatically at first startup. It cannot be changed. If you need a different DID, you must reinitialise the gateway.

## Remote tab

Lists the surfaces available on the remote gateway. This tab is visible only on remote gateway records.

| Column | Description |
| Name | Display name of the remote surface. |
| Description | Optional description from the remote gateway. |
| Protocol | Protocol declared on the remote surface: A2A, AP2, or MCP. |
| Listen Address | The network address the remote surface listens on. |
| Surface ID | Internal identifier of the remote surface. Used when selecting a target in the Gateway routing mode. |

Select Refresh to query the remote gateway for an updated surface list.

## Publishing tab

Controls which local surfaces are visible to this remote gateway when it queries for available surfaces.

| Setting | Description |
| Surface checkboxes | Each active surface on this gateway appears as a checkbox. Check a surface to expose it to this remote gateway. |

When no surfaces are checked, all active surfaces are exposed. When one or more surfaces are checked, only those surfaces are visible to the remote gateway.

## Global Policy tab

The Global Policy tab is available only on the self gateway record. It applies an OPA policy to every request that passes through this gateway instance, regardless of which surface handled it.

This is distinct from per-surface OPA policies configured on the Policies tab of individual surfaces. The global policy runs first. A request that is denied by the global policy never reaches the surface-level policy.

| Setting | Description |
| Enable global policy | Toggle on to activate the policy. When disabled, the policy definition is retained but not evaluated. |
| Select Gateway Policy | The gateway policy definition to apply. Selected from the dropdown. Create and manage definitions at Policies (under Management in the sidebar). |

When the dropdown is empty, no gateway policy definitions of type gateway exist yet. Select the link in the empty-state message to create one at Policies.

A read-only policy preview is shown below the dropdown once a policy is selected.

Select Save Policy to apply the selection. No restart is required.

## Related

- [Connection point](/products/affinidi-trust-fabric/agent-gateway/reference/gateways/connection-point.md): Field reference for the connection point editor.

- [Gateways](/products/affinidi-trust-fabric/agent-gateway/concepts/connections/gateways.md): Conceptual overview of gateway types and connection points, including fabric:// routing.

- [OPA policies](/products/affinidi-trust-fabric/agent-gateway/concepts/opa-policies.md): How gateway and surface-level OPA policies evaluate requests.