REST Resource: projects.locations.agentGateways

Resource: AgentGateway

AgentGateway represents the agent gateway resource.

JSON representation
{
  "name": string,
  "createTime": string,
  "updateTime": string,
  "labels": {
    string: string,
    ...
  },
  "description": string,
  "etag": string,
  "protocols": [
    enum (Protocol)
  ],
  "registries": [
    string
  ],
  "networkConfig": {
    object (NetworkConfig)
  },
  "agentGatewayCard": {
    object (AgentGatewayOutputCard)
  },

  // Union field deployment_mode can be only one of the following:
  "googleManaged": {
    object (GoogleManaged)
  },
  "selfManaged": {
    object (SelfManaged)
  }
  // End of list of possible types for union field deployment_mode.
}
Fields
name

string

Identifier. Name of the AgentGateway resource. It matches pattern projects/*/locations/*/agentGateways/<agentGateway>.

createTime

string (Timestamp format)

Output only. The timestamp when the resource was created.

Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".

updateTime

string (Timestamp format)

Output only. The timestamp when the resource was updated.

Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".

labels

map (key: string, value: string)

Optional. Set of label tags associated with the AgentGateway resource.

An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.

description

string

Optional. A free-text description of the resource. Max length 1024 characters.

etag

string

Optional. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.

protocols[]

enum (Protocol)

Required. List of protocols supported by an Agent Gateway

registries[]

string

Optional. A list of Agent registries containing the agents, MCP servers and tools governed by the Agent Gateway. Note: Currently limited to project-scoped registries Must be of format `//agentregistry.googleapis.com/projects/{project}/locations/{location}/

networkConfig

object (NetworkConfig)

Optional. Network configuration for the AgentGateway.

agentGatewayCard

object (AgentGatewayOutputCard)

Output only. Field for populated AgentGateway card.

Union field deployment_mode. Deployment mode of the network proxy. Exactly one of the fields in this oneof must be set. deployment_mode can be only one of the following:
googleManaged

object (GoogleManaged)

Optional. Proxy is orchestrated and managed by GoogleCloud in a tenant project.

selfManaged

object (SelfManaged)

Optional. Attach to existing Application Load Balancers or Secure Web Proxies.

GoogleManaged

Configuration for Google Managed deployment mode. Proxy is orchestrated and managed by GoogleCloud in a tenant project.

JSON representation
{
  "governedAccessPath": enum (GovernedAccessPath)
}
Fields
governedAccessPath

enum (GovernedAccessPath)

Optional. Operating Mode of Agent Gateway.

GovernedAccessPath

GovernedAccessPath defines the type of access to protect.

Enums
GOVERNED_ACCESS_PATH_UNSPECIFIED Governed access path is not specified.
AGENT_TO_ANYWHERE Govern agent conections to destinations.
CLIENT_TO_AGENT Protect connection to Agent or Tool.

SelfManaged

Configuration for Self Managed deployment mode. Attach to existing Application Load Balancers or Secure Web Proxies.

JSON representation
{
  "resourceUri": string
}
Fields
resourceUri

string

Optional. A supported Google Cloud networking proxy in the Project and Location

Protocol

Enums of all supported protocols

Enums
PROTOCOL_UNSPECIFIED Unspecified protocol.
MCP Message Control Plane protocol.

NetworkConfig

NetworkConfig contains network configurations for the AgentGateway.

JSON representation
{
  "egress": {
    object (Egress)
  },
  "dnsPeeringConfig": {
    object (DnsPeeringConfig)
  }
}
Fields
egress

object (Egress)

Optional. Optional PSC-Interface network attachment for connectivity to your private VPCs network.

dnsPeeringConfig

object (DnsPeeringConfig)

Optional. Optional DNS peering configuration for connectivity to your private VPC network.

Egress

Configuration for Egress

JSON representation
{
  "networkAttachment": string
}
Fields
networkAttachment

string

Optional. The URI of the Network Attachment resource.

DnsPeeringConfig

DNS peering config for the user VPC network.

JSON representation
{
  "domains": [
    string
  ],
  "targetProject": string,
  "targetNetwork": string
}
Fields
domains[]

string

Required. Domain names for which DNS queries should be forwarded to the target network.

targetProject

string

Required. Target project ID to which DNS queries should be forwarded to. This can be the same project that contains the AgentGateway or a different project.

targetNetwork

string

Required. Target network in 'target project' to which DNS queries should be forwarded to. Must be in format of projects/{project}/global/networks/{network}.

AgentGatewayOutputCard

AgentGatewayOutputCard contains informational output-only fields

JSON representation
{
  "mtlsEndpoint": string,
  "rootCertificates": [
    string
  ],
  "serviceExtensionsServiceAccount": string
}
Fields
mtlsEndpoint

string

Output only. mTLS Endpoint associated with this AgentGateway

rootCertificates[]

string

Output only. Root Certificates for Agents to validate this AgentGateway

serviceExtensionsServiceAccount

string

Output only. Service Account used by Service Extensions to operate.

Methods

create

Creates a new AgentGateway in a given project and location.

delete

Deletes a single AgentGateway.

get

Gets details of a single AgentGateway.

list

Lists AgentGateways in a given project and location.

patch

Updates the parameters of a single AgentGateway.