> ## Documentation Index
> Fetch the complete documentation index at: https://docs.groundforge.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Gateway Rules

> Choose what happens when an Agent or MCP capability is requested.

A Gateway applies rules to one Agent or one MCP provider. Each rule matches a discovered capability and chooses one action.

| Action  | What the user experiences                                                 |
| ------- | ------------------------------------------------------------------------- |
| Allow   | The capability runs normally.                                             |
| Observe | The capability runs and GroundForge highlights the decision in the Trace. |
| Review  | GroundForge pauses the call and creates an Operator Task.                 |
| Block   | The capability does not run.                                              |

## Example

The Weather MCP exposes two capabilities:

```text theme={null}
get_alerts(state)
get_forecast(latitude, longitude)
```

You could configure:

```text theme={null}
get_alerts       Allow
get_forecast     Review
```

When the Agent requests `get_alerts`, the call runs immediately. When it requests `get_forecast`, GroundForge waits for a person to approve or reject the call.

You can change a Gateway rule without changing the Agent or MCP source code.

Continue with [Operator Review](/concepts/operator-review), [Gateways in the platform](/governance/gateways), or [Govern the Weather Capability](/guides/tool-governance).


## Related topics

- [Gateways](/governance/gateways.md)
- [Security](/help/security.md)
- [Examples](/examples/index.md)
- [Drifts](/concepts/drifts.md)