Overview

A programmatic way to build and manage your chatbot, for an AI agent or for your own code, with access you scope and revoke.

What it is

The Agent Gateway is a programmatic surface for building and managing your chatbot from outside the dashboard. It exposes the same things you work with there, your flows, knowledge base, storage tables, deployments, and conversations, as tools that can be called over a connection. Anything you would normally do by clicking through the dashboard, you can do through the gateway instead.

It is mainly a management surface. Most of its tools change things: building and publishing flows, configuring deployments, creating collections and sources, managing storage tables and rows. It also reads: searching knowledge, listing conversations, and reading transcripts.

Every call is authenticated with a token you create, limited to the scopes you grant, and confined to a workspace you belong to. Nothing done through the gateway can exceed what you could do in the dashboard yourself.

Who calls it

The gateway serves two kinds of caller from one set of tools:

  • An AI agent, such as Claude Code, Claude Desktop, Cursor, or one you build, connecting over MCP. You point it at your workspace and it builds and manages your chatbot for you.
  • Your own code, a script or backend calling the REST API directly, for automating management tasks without an agent in the loop.

Both go through the same tools, the same scopes, and the same checks, so it does not matter which one you use.

What you can do

  • Flow: read a flow's graph and run its bot in test mode, and (with write access) build, edit, publish, and deploy flows and configure their deployments.
  • Knowledge: search the knowledge base and read documents, and (with write access) manage collections and sources.
  • Storage: read your storage tables and rows, and (with write access) create tables and add, update, or delete rows.
  • Conversations: list conversations and read transcripts, and (with debug access) inspect a run's step trace.

The full, always-current list is on the Tool catalog page, which reads straight from the running gateway.

How access works

Access rests on three things:

  • A token you create on your profile. It carries the scopes you choose and, optionally, a list of workspaces it may reach.
  • A scope for every tool. A read tool needs a read scope, a write tool a write scope, and so on. A token that lacks a tool's scope cannot call it.
  • A workspace, named on every call. One token reaches every workspace you belong to, and each call says which one it runs in, so an agent can move between them freely. workspaces.list tells it which ones those are and what it may do in each.
Your role in a workspace still caps what a token can do there. If you are a member with read-only access, a token you own gets read-only tools in that workspace even if you granted it more.

Get started

  1. Create an access token from your profile and copy it.
  2. Connect an MCP client, or use the REST API.
  3. Call workspaces.list to see the workspaces the token can reach, then pass a workspace subdomain to each tool you use.
  4. Browse the Tool catalog to see what is available and what each tool returns.
Request a demo
This form is running on UniversalChatbot.