Gateway reference
A gateway record represents either this Agent Gateway instance (the self gateway) or a remote Agent Gateway that this instance communicates with. Use this page to check which surfaces a remote gateway exposes, control which of your local surfaces that remote gateway can see, and attach a gateway-wide OPA policy that runs before any surface policy.
For conceptual background, see Gateways. For step-by-step connection setup, see Connect two gateways.
Overview tab fields
| Setting | Required | Editable | Description |
|---|---|---|---|
| Name | Yes | Yes | Human-readable display name for the gateway. |
| Description | No | Yes | Optional description of the gateway’s purpose. |
| Gateway DID | Yes | No | The DID that identifies this gateway instance. Cannot be changed after creation. |
| Gateway ID | — | No | Internal identifier. Used in fabric:// target URLs and API calls. |
| Gateway Enabled | No | Yes (remote only) | Toggle to enable or disable the gateway. The self gateway cannot be disabled. |
| Created | — | No | When this gateway record was created. Shown in edit mode. |
| Last Updated | — | No | When this gateway record was last modified. Shown in edit mode. |
The self gateway’s DID is generated automatically at first startup. It cannot be changed. If you need a different DID, you must reinitialise the gateway.
Remote tab
Lists the surfaces available on the remote gateway. This tab is visible only on remote gateway records.
| Column | Description |
|---|---|
| Name | Display name of the remote surface. |
| Description | Optional description from the remote gateway. |
| Protocol | Protocol declared on the remote surface: A2A, AP2, or MCP. |
| Listen Address | The network address the remote surface listens on. |
| Surface ID | Internal identifier of the remote surface. Used when selecting a target in the Gateway routing mode. |
Select Refresh to query the remote gateway for an updated surface list.
Publishing tab
Visible only on remote gateway records in edit mode. Controls which local surfaces are visible to this remote gateway when it queries for available surfaces.
| Setting | Description |
|---|---|
| Surface checkboxes | Each active surface on this gateway appears as a checkbox. Check a surface to expose it to this remote gateway. |
When no surfaces are checked, all active surfaces are exposed. When one or more surfaces are checked, only those surfaces are visible to the remote gateway.
Global Policy tab
The Global Policy tab is available on all gateway records in edit mode. The direction of enforcement differs by gateway type:
- Self gateway: the policy applies to all inbound traffic arriving at this gateway instance, before any surface-level policy runs.
- Remote gateway: the policy applies to all outbound traffic sent to that remote gateway, before any surface-level policy runs.
In both cases, a gateway deny cannot be overridden by a surface allow.
| Setting | Description |
|---|---|
| Enabled | Toggle on to activate the policy. When disabled, the policy definition is retained but not evaluated. |
| Select Gateway Policy | The gateway policy definition to apply. Selected from the dropdown. Create and manage definitions at Settings → Policies. |
When the dropdown is empty, no gateway policy definitions of type gateway exist yet. Select the link in the empty-state message to create one.
A read-only policy preview is shown below the dropdown once a policy is selected.
Select Save Policy to apply the selection. No restart is required.
Related
- Connection point: Field reference for the connection point editor.
- Gateways: Conceptual overview of gateway types and connection points, including
fabric://routing. - OPA policies: How gateway and surface-level OPA policies evaluate requests.
Glad to hear it! Please tell us how we can improve more.
Sorry to hear that. Please tell us how we can improve.
Thank you for sharing your feedback so we can improve your experience.