Agent Authority for developers
Endpoints, authentication, connecting a custom agent and the API, in one path.
This page is the path for developers who connect agents to the gateway or call the API from their own code. It names the three credentials you can use, and links to the reference for each.
Connect an agent to the gateway
Agents connect over MCP at https://<your-gateway-url>/gateway/mcp, or at /gateway/mcp/{slug} for one resource.
An agent that runs the browser sign-in gets an OAuth token with the mcp_gateway scope.
An agent that can't run it connects as a custom agent, with an API key or an OAuth credential.
Gateway URLs lists every endpoint, and Authenticate agents to the MCP gateway every token check and error response.
Call the management API
The management API configures and reads back policies, resources, agents, and audit data.
Its base URL is your organization's gateway host, then /api/v1.
It takes a management API key, sent as Authorization: Bearer saai_api_....
An agent's OAuth token works only at the gateway, and the management API rejects it with 401.
See API authentication to create a key and choose its permissions.