---
title: "POST /v1/{+parent}/agentGateways"
method: POST
path: "/v1/{+parent}/agentGateways"
tags: ["projects"]
---

# POST /v1/{+parent}/agentGateways

`POST /v1/{+parent}/agentGateways`

Creates a new AgentGateway in a given project and location.

## Path parameters

- `parent` string, required

## Query parameters

- `agentGatewayId` string

## Request body

- AgentGateway — AgentGateway represents the agent gateway resource.
  - `googleManaged` AgentGatewayGoogleManaged — Configuration for Google Managed deployment mode. Proxy is orchestrated and managed by GoogleCloud in a tenant project.
    - `governedAccessPath` 'GOVERNED_ACCESS_PATH_UNSPECIFIED' | 'AGENT_TO_ANYWHERE' | 'CLIENT_TO_AGENT' — Optional. Operating Mode of Agent Gateway.
  - `selfManaged` AgentGatewaySelfManaged — Configuration for Self Managed deployment mode. Attach to existing Application Load Balancers or Secure Web Proxies.
    - `resourceUri` string — Optional. A supported Google Cloud networking proxy in the Project and Location
  - `name` string — Identifier. Name of the AgentGateway resource. It matches pattern `projects/*/locations/*/agentGateways/`.
  - `createTime` string, google-datetime — Output only. The timestamp when the resource was created.
  - `updateTime` string, google-datetime — Output only. The timestamp when the resource was updated.
  - `labels` object — Optional. Set of label tags associated with the AgentGateway resource.
  - `description` string — Optional. A free-text description of the resource. Max length 1024 characters.
  - `etag` string — Optional. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
  - `protocols` string[] — Optional. Deprecated.
  - `registries` string[] — Optional. A list of Agent registries containing the agents, MCP servers and tools governed by the Agent Gateway. Note: Currently limited to project-scoped registries Must be of format `//agentregistry.googleapis.com/projects/{project}/locations/{location}/`
  - `networkConfig` AgentGatewayNetworkConfig — NetworkConfig contains network configurations for the AgentGateway.
    - `egress` AgentGatewayNetworkConfigEgress — Configuration for Egress
      - `networkAttachment` string — Optional. The URI of the Network Attachment resource.
    - `dnsPeeringConfig` AgentGatewayNetworkConfigDnsPeeringConfig — DNS peering config for the user VPC network.
      - `domains` string[] — Required. Domain names for which DNS queries should be forwarded to the target network.
      - `targetProject` string — Required. Target project ID to which DNS queries should be forwarded to. This can be the same project that contains the AgentGateway or a different project.
      - `targetNetwork` string — Required. Target network in 'target project' to which DNS queries should be forwarded to. Must be in format of `projects/{project}/global/networks/{network}`.
  - `agentGatewayCard` AgentGatewayAgentGatewayOutputCard — AgentGatewayOutputCard contains informational output-only fields
    - `mtlsEndpoint` string — Output only. mTLS Endpoint associated with this AgentGateway
    - `rootCertificates` string[] — Output only. Root Certificates for Agents to validate this AgentGateway
    - `serviceExtensionsServiceAccount` string — Output only. Service Account used by Service Extensions to operate.

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/networkservices.md) · [All operations](https://skmtc.net/google/apis/networkservices/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/networkservices/versions/ff841dec54e1/schema)