Trust registry reference
Field reference for the trust registry editor in the Agent Gateway dashboard.
A trust registry connects the gateway to an external authority that determines which agents and issuers are trusted to interact with your surfaces. When a surface receives a request, the gateway queries the assigned registry over a DIDComm connection to check whether the caller’s DID is recognised by that authority.
Use this page to add a registry, monitor its connection state, and confirm reachability before assigning it to a surface.
For conceptual background, see Trust registries.
Fields
| Field | Editable | Description |
|---|---|---|
| Name | Yes | Human-readable display name. Appears in Issuer configuration and logs. |
| Description | Yes | Optional description of the trust registry’s purpose or governance framework. |
| OOB URL | No | The OOB invitation URL provided by the trust registry administrator. Used to establish the initial DIDComm connection. Set at creation. |
| DID Method | No | The DID method used to generate the per-registry identity. Options: Web (did:web), WebVH (did:webvh), or Peer (did:peer). Defaults to Web (did:web). Set at creation and cannot be changed. |
| Our DID | No | The gateway’s per-registry DID, created during the OOB handshake. This is the DID the trust registry uses to identify this gateway. Populated after the handshake completes. |
| Registry DID | No | The trust registry’s DIDComm identity, discovered during the OOB handshake. |
| Main DID | No | The canonical DID of the trust registry. This is the DID that agents reference in their trust-registry extensions (trust_registry_did field). Populated from the OOB invitation. |
| Mediator URL | No | Mediator endpoint auto-discovered from the OOB invitation. |
| Connection Status | No | Current connection state. See Connection statuses. |
| Status | Yes (via delete/recreate) | active or disabled. Disabled registries are excluded from Issuer configuration. |
Connection statuses
| Status | Meaning |
|---|---|
| CONNECTING | The OOB handshake is in progress. |
| AWAITING APPROVAL | Setup message sent. Waiting for the trust registry administrator to approve. |
| CONNECTED | Connection is established. TRQP queries can be issued. |
| DISCONNECTED | Previously connected. Use Reconnect to re-establish. |
| FAILED | Connection failed. Use Reconnect to retry. |
Actions
| Action | Available when | Description |
|---|---|---|
| Reconnect | Status is DISCONNECTED or FAILED. | Re-initiates the DIDComm handshake using the stored OOB URL. |
| Heartbeat | Status is CONNECTED. | Sends a test query to confirm the connection is live. Returns Ping to "<name>" successful (<ms>ms) on success. |
Related
- Agent validation via Trust Registry: Configure Trust Check queries and enforce access decisions using a connected trust registry.
- Trust registries: Conceptual background.
Was this page helpful?
Glad to hear it! Please tell us how we can improve more.
Sorry to hear that. Please tell us how we can improve.
Thank you for sharing your feedback so we can improve your experience.