> ## Documentation Index
> Fetch the complete documentation index at: https://docs.groundforge.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Gateways

> Set Allow, Observe, Review, or Block for discovered capabilities.

A Gateway protects one Agent or one MCP provider.

## 1. Choose what to govern

Select an Agent or MCP provider. GroundForge loads the capabilities discovered for that resource.

Example Agent capability list:

```text theme={null}
get_weather
get_forecast
delete_weather_cache
```

## 2. Choose an action

| Action  | What the user experiences                                     |
| ------- | ------------------------------------------------------------- |
| Allow   | The capability runs normally                                  |
| Observe | The capability runs and the Trace marks it as monitored       |
| Review  | The request waits for a person to approve or reject it        |
| Block   | The capability does not run and a policy response is returned |

For example, allow weather lookups, observe forecasts, and require Review before deleting a cache.

## 3. Add a clear message

A Block message might be:

```text theme={null}
This action is restricted by policy.
```

A Review message might be:

```text theme={null}
This action needs approval. You will receive the result after it is reviewed.
```

Avoid exposing internal policy details in user-facing messages.

## 4. Test the rule

Send a request that selects the capability, then open its Trace. Confirm the action, whether the capability ran, and the final response.

> **Screenshot placeholder**\
> Add `/images/governance/gateway-overview.png` showing the selected Agent or MCP, discovered capability rows, actions, reasons, messages, and manifest preview.

See [Gateway Rules](/concepts/governance) and [Tool governance tutorial](/guides/tool-governance).


## Related topics

- [Get Gateway](/api-reference/endpoints/get-gateway.md)
- [Delete Gateway](/api-reference/endpoints/delete-gateway.md)
- [Update Gateway](/api-reference/endpoints/update-gateway.md)
- [Gateway Rules](/concepts/governance.md)