Surfaces

Reference	What it covers
Surface reference	Top-level `AgentSurface` panel fields, protocol options, gateway DID injection settings, and the canvas element index.
Access Point	Inbound listener: panel settings (listen address, channel prefix, custom path) and canvas elements (policy, rate limit, caller context, identity, trust check, extension validation, metadata).
Managed Agent	Upstream destination: endpoint routing and authentication.
Transit Points	Agent-initiated outbound routes: transit point panel settings and canvas elements for per-destination policy, rate limiting, and payment.
Variants	Named surface snapshots: alias grammar, canvas configuration, and default variant promotion.
Caller Context	Authentication method selection and per-method credential extraction configuration.
Identity	Agent DID extraction at inbound, protected, external, or outbound pipeline edges.
Networking	Request control: timeouts, automatic retry, circuit breaking, traffic mirroring, and the Rate Limit canvas element.
MCP Tools	Per-tool RBAC policy bindings for MCP surfaces.
Payment	x402 paywall configuration for MCP and A2A surfaces.
Trust elements	Trust Check and Trust Recorder elements: TRQP queries, template syntax, result wire shape, error codes, and trust registry writes.
OPA policies	The Policy element and the complete `input` field reference for gateway, surface, and MCP tool policy scopes.
Protocol extensions	Extension Validation and Extension Rules elements for A2A and AP2 surfaces.
Metadata elements	Metadata Injection and Metadata Extraction elements: header manipulation and protocol metadata normalisation.
Outbound binding	Credential Delegation and Workload Binding elements: outbound credential injection and VP binding.

Was this page helpful?

Glad to hear it! Please tell us how we can improve more.

Sorry to hear that. Please tell us how we can improve.

Thank you for sharing your feedback so we can improve your experience.