Skip to main content
Identity (Agent Gateway → Identity) is where you manage credentials and identity-based access for the selected gateway. It has two tabs: Auth and Roles.

​
Auth tab

Create reusable auth entities, then attach them to consumers.

​
Create an auth entity

  1. Open Identity → Auth → New Auth.
  2. Choose the type and fill issuer / JWKS / client / key fields as prompted.
  3. For API Key, generate the key and set expiry (Never, 30 days, 90 days, 1 year). Copy the secret once.
  4. Save. Attach the entity from a consumer Auth tab or during consumer create.

​
OAuth2 setup modes (UI)

OIDC fields include issuer, JWKS URL, audiences, required scopes, allowed algorithms, subject claim, and optional public keys / certificate constraints. Full IdP walkthroughs: Authorization, Okta, Entra ID.

​
Consumer attachment

Consumers can also create API keys on their own Auth tab (LLM). See Auth.

​
Roles tab

Roles power Identity-based consumer routing.
  1. Open Identity → Roles → New Role.
  2. Set Claim and Value (for example groups = engineering).
  3. Add Registry — grant LLM and/or MCP registries.
  4. Optionally restrict models or tools (or leave all permitted).
  5. On a consumer, set Routing mode → Identity-based and select the role(s). Ensure the consumer uses an OIDC (or OAuth2) credential whose tokens carry matching claims.
Details: Roles.
  • Consumers — attach auth and choose routing mode.
  • MCP — agent OAuth on the MCP plane.