# Telnyx Agent Tools: Agent Gateway — Documentation Index > Agent Gateway documentation within the Agent Tools section of the Telnyx developer docs (https://developers.telnyx.com). > This file: https://developers.telnyx.com/docs/development/llms/agent-tools-agent-gateway-llms-txt · Root index: https://developers.telnyx.com/llms.txt ## Get Started - [Overview](https://developers.telnyx.com/docs/agent-gateway.md): Agents reach models, tools, and other agents through a singular, unified instance on the user's Network. - [Quick Start](https://developers.telnyx.com/docs/agent-gateway/quick-start.md): Create an Agent Gateway, issue a key, and connect an agent to it. - [Pricing](https://developers.telnyx.com/docs/agent-gateway/pricing.md): An Agent Gateway bills a monthly fee per instance, a fee per 1,000 requests, and model tokens at Telnyx Inference prices. ## Targets - [Overview](https://developers.telnyx.com/docs/agent-gateway/targets.md): The models, tools, and other agents behind an instance. - [Models](https://developers.telnyx.com/docs/agent-gateway/targets/models.md): Telnyx-hosted models behind one OpenAI-compatible endpoint on every instance. - [Tools](https://developers.telnyx.com/docs/agent-gateway/targets/tools.md): MCP servers and REST APIs on the instance, served to agents as one MCP server. ## Virtual Private Cloud - [Overview](https://developers.telnyx.com/docs/agent-gateway/vpc.md): Agents reach services inside the user's network through an Agent Gateway. ## Outbound Authentication - [API Keys](https://developers.telnyx.com/docs/agent-gateway/outbound/api-keys.md): A static API key, bearer token, or password that the gateway sends to an MCP server or API on every request. - [OAuth Client Credentials](https://developers.telnyx.com/docs/agent-gateway/outbound/oauth-client-credentials.md): The gateway gets its own access token from an MCP server's OAuth provider and sends it on every request. - [Token Passthrough](https://developers.telnyx.com/docs/agent-gateway/outbound/token-passthrough.md): The gateway forwards the agent's own token to an MCP server unchanged. - [AWS Signature Version 4](https://developers.telnyx.com/docs/agent-gateway/outbound/aws-signature-v4.md): The gateway signs each request to an MCP server on AWS with AWS Signature Version 4. ## Inbound Authentication - [Keys](https://developers.telnyx.com/docs/agent-gateway/authentication/keys.md): Keys the gateway issues to agents and teams, presented on every request. ## Authorization and Policy - [Allow Lists](https://developers.telnyx.com/docs/agent-gateway/authorization/allow-lists.md): Each key or team names the models it may use. - [Tool Permissions](https://developers.telnyx.com/docs/agent-gateway/authorization/tool-permissions.md): Each key or team names the MCP servers, tools, and agents it may use. - [Guardrails](https://developers.telnyx.com/docs/agent-gateway/authorization/guardrails.md): Checks that run before and after each request to a model or tool, and block, mask, or log what they find. - [Policies](https://developers.telnyx.com/docs/agent-gateway/authorization/policies.md): Named sets of guardrails that build on a base policy, and apply to every request, to some models, or to the requests that name them. ## Traffic Control - [Budgets and Rate Limits](https://developers.telnyx.com/docs/agent-gateway/traffic/budgets-and-rate-limits.md): Spend caps and per-minute limits on keys and teams. - [Routing and Fallbacks](https://developers.telnyx.com/docs/agent-gateway/traffic/routing-and-fallbacks.md): Retries, timeouts, and fallbacks to other models, set on each request. ## Audit and Observability - [Spend Logs](https://developers.telnyx.com/docs/agent-gateway/observability/spend-logs.md): The requests an Agent Gateway served with its keys, with their tokens and cost. ## API Reference (Agent Gateway) ### Agent Gateways - [List Agent Gateways](https://developers.telnyx.com/api-reference/agent-gateways/list-agent-gateways.md): Lists the account's Agent Gateway instances, newest first, one page at a time. - [Create an Agent Gateway](https://developers.telnyx.com/api-reference/agent-gateways/create-an-agent-gateway.md): Creates an Agent Gateway instance on one of the account's WireGuard Interfaces. The instance starts `pending`, moves to `provisioning`, and then to `ready` or… - [Retrieve an Agent Gateway](https://developers.telnyx.com/api-reference/agent-gateways/retrieve-an-agent-gateway.md): Returns one of the account's Agent Gateway instances. - [Delete an Agent Gateway](https://developers.telnyx.com/api-reference/agent-gateways/delete-an-agent-gateway.md): Deletes an Agent Gateway instance in any status. The response shows it `deleting`; repeating the request answers the same until the instance is gone, and then… - [List an Agent Gateway's models](https://developers.telnyx.com/api-reference/agent-gateways/list-an-agent-gateways-models.md): Lists the models the instance serves. Each has the name a request uses, the Telnyx Inference model behind it, and its price per million tokens. ### Agent Gateway Keys - [List keys](https://developers.telnyx.com/api-reference/agent-gateway-keys/list-keys.md): Lists the instance's keys, without their values. Returns the first 100. The instance must be `ready`; otherwise the request answers `409`. - [Create a key](https://developers.telnyx.com/api-reference/agent-gateway-keys/create-a-key.md): Issues a key on the instance. The key's value is in this response only. Every field is optional; a key without `models` may use every model the instance serves… - [Update a key](https://developers.telnyx.com/api-reference/agent-gateway-keys/update-a-key.md): Changes a key's settings without reissuing it. A field left out stays as it is, and `null` clears it. `models: []` lifts the model restriction. `expires_in` co… - [Delete a key](https://developers.telnyx.com/api-reference/agent-gateway-keys/delete-a-key.md): Revokes a key and returns it as it was, without its value. The instance must be `ready`; otherwise the request answers `409`. ### Agent Gateway Teams - [List teams](https://developers.telnyx.com/api-reference/agent-gateway-teams/list-teams.md): Lists the instance's teams. The instance must be `ready`; otherwise the request answers `409`. - [Create a team](https://developers.telnyx.com/api-reference/agent-gateway-teams/create-a-team.md): Creates a team on the instance. A team is a model list, a budget, and rate limits that its keys share. Names need not be unique; the `id` identifies the team.… - [Update a team](https://developers.telnyx.com/api-reference/agent-gateway-teams/update-a-team.md): Changes a team's settings. A field left out stays as it is, and `null` clears it. `models: []` lifts the model restriction. Setting `blocked` to `true` makes t… - [Delete a team](https://developers.telnyx.com/api-reference/agent-gateway-teams/delete-a-team.md): Deletes a team that has no keys and returns it. A team that still has keys answers `409`; delete or move its keys first. The instance must be `ready`; otherwis… ### Agent Gateway Spend Logs - [List spend logs](https://developers.telnyx.com/api-reference/agent-gateway-spend-logs/list-spend-logs.md): Lists the requests the instance served with its keys, newest first, one page at a time. The window defaults to the last 24 hours and spans at most 31 days. A r… ### Agent Gateway MCP Servers - [List MCP servers](https://developers.telnyx.com/api-reference/agent-gateway-mcp-servers/list-mcp-servers.md): Lists the MCP servers the instance serves at `{gateway_url}/mcp`, without their credentials. The instance must be `ready`; otherwise the request answers `409`. - [Add an MCP server](https://developers.telnyx.com/api-reference/agent-gateway-mcp-servers/add-an-mcp-server.md): Adds an MCP server. The instance serves its tools at `{gateway_url}/mcp`, each named with the server's `name` and a hyphen, to the keys granted the server and,… - [Update an MCP server](https://developers.telnyx.com/api-reference/agent-gateway-mcp-servers/update-an-mcp-server.md): Changes an MCP server's settings. A field left out stays as it is. `auth` is replaced whole, `tools: []` exposes every tool, and `static_headers: {}` clears th… - [Delete an MCP server](https://developers.telnyx.com/api-reference/agent-gateway-mcp-servers/delete-an-mcp-server.md): Removes an MCP server and returns it as it was. Its `id` stays in the tool permissions that name it until they are next set. The instance must be `ready`; othe… ### Agent Gateway APIs - [List APIs](https://developers.telnyx.com/api-reference/agent-gateway-apis/list-apis.md): Lists the REST APIs the instance serves as tools, without their credentials. The instance must be `ready`; otherwise the request answers `409`. - [Add an API](https://developers.telnyx.com/api-reference/agent-gateway-apis/add-an-api.md): Adds a REST API by its OpenAPI description. Each operation becomes a tool at `{gateway_url}/mcp`, named with the API's `name`, a hyphen, and the lowercased `op… - [Update an API](https://developers.telnyx.com/api-reference/agent-gateway-apis/update-an-api.md): Changes an API's settings. A field left out stays as it is, `"base_url": null` clears the base URL, and `auth` is replaced whole. The instance must be `ready`;… - [Delete an API](https://developers.telnyx.com/api-reference/agent-gateway-apis/delete-an-api.md): Removes an API and returns it as it was. An MCP server's `id` answers `404`. The instance must be `ready`; otherwise the request answers `409`. ### Agent Gateway Tool Permissions - [Retrieve a key's tool permissions](https://developers.telnyx.com/api-reference/agent-gateway-tool-permissions/retrieve-a-keys-tool-permissions.md): Returns the MCP servers and APIs the key may use, and the tools within each. `servers: []` means none. The instance must be `ready`; otherwise the request answ… - [Set a key's tool permissions](https://developers.telnyx.com/api-reference/agent-gateway-tool-permissions/set-a-keys-tool-permissions.md): Replaces the grant whole and returns it. Every server must be one of the instance's MCP servers or APIs, named once. A key reaches the servers granted to it or… - [Retrieve a team's tool permissions](https://developers.telnyx.com/api-reference/agent-gateway-tool-permissions/retrieve-a-teams-tool-permissions.md): Returns the MCP servers and APIs the team's keys may use, and the tools within each. `servers: []` means none. The instance must be `ready`; otherwise the requ… - [Set a team's tool permissions](https://developers.telnyx.com/api-reference/agent-gateway-tool-permissions/set-a-teams-tool-permissions.md): Replaces the grant whole and returns it. Every server must be one of the instance's MCP servers or APIs, named once. A key reaches the servers granted to it or… ### Agent Gateway Guardrails - [List guardrails](https://developers.telnyx.com/api-reference/agent-gateway-guardrails/list-guardrails.md): Lists the instance's guardrails, without their secrets. The instance must be `ready`; otherwise the request answers `409`. - [Add a guardrail](https://developers.telnyx.com/api-reference/agent-gateway-guardrails/add-a-guardrail.md): Adds a check the instance runs on model and tool requests. It runs on every request when `always_on`, and otherwise on the requests that name it in `guardrails… - [Update a guardrail](https://developers.telnyx.com/api-reference/agent-gateway-guardrails/update-a-guardrail.md): Changes a guardrail's `name`, `modes`, `always_on`, or `settings`. `settings` is replaced whole, secrets included. The `type` cannot change. The instance must… - [Delete a guardrail](https://developers.telnyx.com/api-reference/agent-gateway-guardrails/delete-a-guardrail.md): Removes a guardrail and returns it as it was. The instance must be `ready`; otherwise the request answers `409`. ### Agent Gateway Policies - [List policies](https://developers.telnyx.com/api-reference/agent-gateway-policies/list-policies.md): Lists the instance's policies, each in its current version. - [Create a policy](https://developers.telnyx.com/api-reference/agent-gateway-policies/create-a-policy.md): Creates a named set of guardrails. It applies from the next request on, to the requests that name it in `policies` and to those its attachments match. - [Retrieve a policy](https://developers.telnyx.com/api-reference/agent-gateway-policies/retrieve-a-policy.md): Returns one policy, in its current version. - [Update a policy](https://developers.telnyx.com/api-reference/agent-gateway-policies/update-a-policy.md): Changes a policy, which publishes a new version of it. A field left out stays as it is; `guardrails` and `pipeline` are replaced whole, and `model: null` remov… - [Delete a policy](https://developers.telnyx.com/api-reference/agent-gateway-policies/delete-a-policy.md): Deletes a policy and every version of it, and returns it as it was. A policy that an attachment names, or that another policy builds on, cannot be deleted. ### Agent Gateway Policy Attachments - [List policy attachments](https://developers.telnyx.com/api-reference/agent-gateway-policy-attachments/list-policy-attachments.md): Lists where the instance applies each policy. - [Attach a policy](https://developers.telnyx.com/api-reference/agent-gateway-policy-attachments/attach-a-policy.md): Applies a policy to every request, or to the requests for the models named. It applies from the next request on. - [Detach a policy](https://developers.telnyx.com/api-reference/agent-gateway-policy-attachments/detach-a-policy.md): Removes an attachment and returns it as it was. The policy stays.