Virtual Private Cloud

Preview. Not available yet.

An agent on the user’s Network reaches services inside the user’s network, such as MCP servers and APIs, through an Agent Gateway instance. No service needs a public address. These are the pieces that build it:

Artifact	What It Does	Where
Network	Holds the instance, the agents, and the routes to the user’s network.	Telnyx
WireGuard Interface	Attaches the instance and the agents to the Network.	Telnyx
Agent Gateway instance	Takes every request from the agents at its `gateway_url`, and reaches the services for them.	Telnyx
Edge Compute function with a network binding	Runs an agent on the Network, public or private.	Telnyx
Route	Sends a CIDR of the user’s network to a forwarding peer or to a tunnel.	Telnyx
Forwarding peer, a WireGuard peer	Forwards traffic from the Network to the subnets behind it.	The user’s network
Tunnel hosts, running a Tunnel	Connect out to Telnyx, with no change to the user’s router or firewall, and carry traffic to the subnets they reach.	The user’s network

A forwarding peer and tunnel hosts are two ways into the same subnets. Either one carries the instance’s requests to the services.

Get Started

Targets

Virtual Private Cloud

Outbound Authentication

Inbound Authentication

Authorization and Policy

Traffic Control

Audit and Observability

API Reference

For AI Agents

Virtual Private Cloud