Target as a WireGuard Peer

The target’s host joins the Agent Gateway instance’s Network as a WireGuard peer. The instance reaches the target at the host’s address.

Add the Host

Add the host to the instance’s WireGuard Interface:

Workstation

telnyx-edge network peer create acme-hq-ashburn-va tools-host

Output

Created WireGuard peer tools-host (b26a6774-f07c-4c1b-b3a1-c1eedd09290c) on interface 0eeec588-1bcf-4db6-a64a-5a9156cecd55
Wrote tools-host.conf (mode 0600)
Connect with: wg-quick up ./tools-host.conf

The configuration’s Address is the host’s address, 172.27.0.3. On the host, bring the tunnel up:

Tools host

wg-quick up ./tools-host.conf

WireGuard Peer Configuration covers each operating system.

Add the Target

POST /v2/agent_gateways/{id}/mcp_servers adds the target by the host’s address:

{
  "name": "orders",
  "url": "http://172.27.0.3:9000/mcp",
  "auth": { "type": "api_key", "value": "example-orders-key" }
}

Only the host joins the Network. The systems its tools use stay inside the user’s network.

Get Started

Targets

Virtual Private Cloud

Outbound Authentication

Inbound Authentication

Authorization and Policy

Traffic Control

Audit and Observability

API Reference

For AI Agents

Target as a WireGuard Peer

Add the Host

Add the Target

​Add the Host

​Add the Target

Add the Host

Add the Target