> ## Documentation Index > Fetch the complete documentation index at: https://developers.telnyx.com/llms.txt > Use this file to discover all available pages before exploring further. # List guardrails > Lists the instance's guardrails, without their secrets. The instance must be `ready`; otherwise the request answers `409`. ## OpenAPI ````yaml /openapi/source/external/agent-gateway/agent-gateway.json get /agent_gateways/{instance_id}/guardrails openapi: 3.1.0 info: version: 1.0.0 title: Telnyx API x-latency-category: interactive x-endpoint-cost: light description: >- Agent Gateway authenticates, authorizes, and audits the requests agents send to models, tools, and other agents. Each gateway runs as a dedicated instance on the account's [*Network*](https://developers.telnyx.com/docs/network/overview). This API creates, lists, and deletes instances, and manages the keys, teams, spend logs, MCP servers, APIs, tool permissions, and guardrails on them. Each instance serves an OpenAI-compatible API at its `gateway_url`. servers: - url: https://api.telnyx.com/v2 description: Telnyx API v2 security: - bearerAuth: [] tags: - name: Agent Gateways description: Create, list, retrieve, and delete Agent Gateway instances. - name: Agent Gateway Keys description: Keys on an instance. - name: Agent Gateway Teams description: 'Teams on an instance: shared model lists, budgets, and rate limits.' - name: Agent Gateway Spend Logs description: The requests an instance served, with their cost. - name: Agent Gateway MCP Servers description: MCP servers on an instance, served to agents at one MCP endpoint. - name: Agent Gateway APIs description: REST APIs on an instance, served to agents as tools. - name: Agent Gateway Tool Permissions description: The MCP servers and tools a key or team may use. - name: Agent Gateway Guardrails description: Checks an instance runs on model and tool requests. - name: Agent Gateway Policies description: Named sets of guardrails an instance applies to requests. - name: Agent Gateway Policy Attachments description: Where an instance applies each policy. paths: /agent_gateways/{instance_id}/guardrails: get: tags: - Agent Gateway Guardrails summary: List guardrails description: >- Lists the instance's guardrails, without their secrets. The instance must be `ready`; otherwise the request answers `409`. operationId: ListAgentGatewayGuardrails parameters: - name: instance_id in: path required: true description: The Agent Gateway's `id`. schema: type: string format: uuid example: 32ce035d-3165-4031-b1a7-a7c0c259590a responses: '200': description: The instance's guardrails content: application/json: schema: $ref: '#/components/schemas/AgentGatewayGuardrailListResponse' example: data: - id: 9645e556-6532-4341-8cab-21b58cdef529 name: mask-pii modes: - before_request always_on: false type: content_filter settings: patterns: - name: us_ssn action: mask - name: email action: mask regexes: [] keywords: [] categories: [] created_at: '2026-10-28T17:07:48.905000Z' updated_at: '2026-10-28T17:07:48.905000Z' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/TelnyxErrors' example: errors: - code: '10009' title: Authentication failed detail: >- The required authentication headers were either invalid or not included in the request. meta: url: https://developers.telnyx.com/docs/overview/errors/10009 '404': description: Not found content: application/json: schema: $ref: '#/components/schemas/TelnyxErrors' example: errors: - code: '10005' title: Resource not found detail: The requested resource or URL could not be found. meta: url: https://developers.telnyx.com/docs/overview/errors/10005 '409': description: The instance is not `ready` content: application/json: schema: $ref: '#/components/schemas/TelnyxErrors' example: errors: - code: '99901' title: Instance not ready detail: The instance is not ready; its engine is not running. '502': description: The instance's engine did not answer content: application/json: schema: $ref: '#/components/schemas/TelnyxErrors' example: errors: - code: '99903' title: Engine unavailable detail: The instance's engine did not answer; try again shortly. components: schemas: AgentGatewayGuardrailListResponse: type: object required: - data properties: data: type: array items: $ref: '#/components/schemas/AgentGatewayGuardrail' TelnyxErrors: type: object properties: errors: type: array items: $ref: '#/components/schemas/TelnyxError' AgentGatewayGuardrail: type: object required: - id - name - modes - always_on - type - settings - created_at - updated_at properties: id: type: string format: uuid description: Identifies the guardrail. name: type: string description: What a request names in its `guardrails` field. modes: type: array items: type: string enum: - before_request - during_request - after_request - logging_only - before_tool_request - during_tool_request - after_tool_request description: When the guardrail runs. always_on: type: boolean description: Whether it runs on every request. type: type: string enum: - content_filter - tool_permission - model_judge - custom_code - lakera - presidio - bedrock - azure_content_safety settings: type: object description: >- The type's settings. `content_filter`: `patterns` (prebuilt patterns by name, such as `us_ssn` or `email`), `regexes`, `keywords`, and `categories` (such as `prompt_injection`), each with an `action` of `block` or `mask`. `tool_permission`: `rules` (`id`, `tool_name`, `tool_type`, `decision`, `argument_patterns`), a `default` decision, and `on_denied` (`block` or `rewrite`). `model_judge`: a `model` on the instance and weighted `criteria` (`name`, `description`, `weight`, the weights summing to 100). `custom_code`: `code` defining `apply_guardrail(inputs, request_data, input_type)`. `lakera`: `api_key`, `project_id`, `api_base`. `presidio`: `analyzer_url`, `anonymizer_url`, `entities` (entity name to `block` or `mask`), `language`. `bedrock`: `guardrail_id`, `version`, `region`, and `access_key_id` with `secret_access_key`, or `role_name`. `azure_content_safety`: `api_key`, `endpoint`, `severity` (0 to 7). Provider secrets are write-only. Responses leave the secrets out. created_at: type: - string - 'null' format: date-time updated_at: type: - string - 'null' format: date-time TelnyxError: type: object properties: code: type: string title: type: string detail: type: string source: type: object properties: pointer: type: string parameter: type: string meta: type: object properties: url: type: string securitySchemes: bearerAuth: type: http scheme: bearer description: Telnyx API key ````