> ## Documentation Index
> Fetch the complete documentation index at: https://neuraltrust-92b43583-develop.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Gateways

> A gateway is the top-level tenant in TrustGate — created in the console, it owns the registries, consumers, auth, policies, and roles beneath it.

A **gateway** is the top-level isolation boundary. Everything else — registries,
consumers, auth credentials, policies, roles — belongs to exactly one gateway. You can run
many gateways (one per team, environment, or product) and switch between them in the
console.

## Create a gateway

1. In the NeuralTrust console, open **TrustGate**.
2. Open the gateway selector and choose **New Gateway** (or **Add new Gateway** from
   Getting started).
3. Enter a **Name**.
4. Choose the data plane:
   * **SaaS** — NeuralTrust hosts the data plane (fastest path).
   * **Private** — you run the data plane; follow the generated Docker / Kubernetes /
     Manual steps, then set **LLM URL** and **MCP URL** under
     **Settings** → **Agent Gateway** → **General**.

See [Installation](/trustgate/getting-started/install) and the
[Quickstart](/trustgate/getting-started/quickstart).

## What you configure

| Setting             | Meaning                                                                       |
| ------------------- | ----------------------------------------------------------------------------- |
| **Name**            | Display name in the console.                                                  |
| **Slug**            | DNS-safe identifier used for Private discovery (`X-AG-Gateway-Slug` or host). |
| **LLM Gateway URL** | Proxy base for chat traffic (SaaS host or your Private URL).                  |
| **MCP Gateway URL** | MCP Gateway base for agents.                                                  |
| **Deployment mode** | **SaaS** or **Private** (chosen at create).                                   |

Connection details for apps also appear on each consumer's **Connect** tab.

## Delete a gateway

Deleting a gateway in the console removes everything it owns (registries, consumers, keys,
policies, roles). Config changes apply immediately to the data plane.