> ## Documentation Index > Fetch the complete documentation index at: https://developers.telnyx.com/llms.txt > Use this file to discover all available pages before exploring further. # Retrieve a key's tool permissions > Returns the MCP servers and APIs the key may use, and the tools within each. `servers: []` means none. The instance must be `ready`; otherwise the request answers `409`. ## OpenAPI ````yaml /openapi/source/external/agent-gateway/agent-gateway.json get /agent_gateways/{instance_id}/keys/{key_id}/tool_permissions openapi: 3.1.0 info: version: 1.0.0 title: Telnyx API x-latency-category: interactive x-endpoint-cost: light description: >- Agent Gateway authenticates, authorizes, and audits the requests agents send to models, tools, and other agents. Each gateway runs as a dedicated instance on the account's [*Network*](https://developers.telnyx.com/docs/network/overview). This API creates, lists, and deletes instances, and manages the keys, teams, spend logs, MCP servers, APIs, tool permissions, and guardrails on them. Each instance serves an OpenAI-compatible API at its `gateway_url`. servers: - url: https://api.telnyx.com/v2 description: Telnyx API v2 security: - bearerAuth: [] tags: - name: Agent Gateways description: Create, list, retrieve, and delete Agent Gateway instances. - name: Agent Gateway Keys description: Keys on an instance. - name: Agent Gateway Teams description: 'Teams on an instance: shared model lists, budgets, and rate limits.' - name: Agent Gateway Spend Logs description: The requests an instance served, with their cost. - name: Agent Gateway MCP Servers description: MCP servers on an instance, served to agents at one MCP endpoint. - name: Agent Gateway APIs description: REST APIs on an instance, served to agents as tools. - name: Agent Gateway Tool Permissions description: The MCP servers and tools a key or team may use. - name: Agent Gateway Guardrails description: Checks an instance runs on model and tool requests. - name: Agent Gateway Policies description: Named sets of guardrails an instance applies to requests. - name: Agent Gateway Policy Attachments description: Where an instance applies each policy. paths: /agent_gateways/{instance_id}/keys/{key_id}/tool_permissions: get: tags: - Agent Gateway Tool Permissions summary: Retrieve a key's tool permissions description: >- Returns the MCP servers and APIs the key may use, and the tools within each. `servers: []` means none. The instance must be `ready`; otherwise the request answers `409`. operationId: GetAgentGatewayKeyToolPermissions parameters: - name: instance_id in: path required: true description: The Agent Gateway's `id`. schema: type: string format: uuid example: 32ce035d-3165-4031-b1a7-a7c0c259590a - name: key_id in: path required: true description: >- The key's `id`, a 64-character hash the instance stores in place of the key. schema: type: string pattern: ^[0-9a-f]{64}$ example: f739ad190d29e2a5e658c3a486111953e6c18d746fd04374962ab150aae17757 responses: '200': description: The grant content: application/json: schema: $ref: '#/components/schemas/AgentGatewayToolPermissionsResponse' example: data: servers: - id: 88d5a97b-4080-4855-8bac-a39811b1dc24 tools: - get_order '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/TelnyxErrors' example: errors: - code: '10009' title: Authentication failed detail: >- The required authentication headers were either invalid or not included in the request. meta: url: https://developers.telnyx.com/docs/overview/errors/10009 '404': description: Not found content: application/json: schema: $ref: '#/components/schemas/TelnyxErrors' example: errors: - code: '10005' title: Resource not found detail: The requested resource or URL could not be found. meta: url: https://developers.telnyx.com/docs/overview/errors/10005 '409': description: The instance is not `ready` content: application/json: schema: $ref: '#/components/schemas/TelnyxErrors' example: errors: - code: '99901' title: Instance not ready detail: The instance is not ready; its engine is not running. '502': description: The instance's engine did not answer content: application/json: schema: $ref: '#/components/schemas/TelnyxErrors' example: errors: - code: '99903' title: Engine unavailable detail: The instance's engine did not answer; try again shortly. x-codeSamples: - lang: JavaScript source: >- import Telnyx from 'telnyx'; const client = new Telnyx({ apiKey: process.env['TELNYX_API_KEY'], // This is the default and can be omitted }); // Automatically fetches more pages as needed. for await (const response of client.agentGateways.keys.toolPermissions.list()) { console.log(response); } - lang: Python source: | import os from telnyx import Telnyx client = Telnyx( api_key=os.environ.get("TELNYX_API_KEY"), # This is the default and can be omitted ) page = client.agent_gateways.keys.tool_permissions.list( "instance_id", "key_id", ) print(page.data) - lang: Go source: "package main\n\nimport (\n\t\"context\"\n\t\"fmt\"\n\n\t\"github.com/team-telnyx/telnyx-go\"\n\t\"github.com/team-telnyx/telnyx-go/option\"\n)\n\nfunc main() {\n\tclient := telnyx.NewClient(\n\t\toption.WithAPIKey(\"My API Key\"),\n\t)\n\ttoolPermissions, err := client.AgentGateways.Keys.ToolPermissions.List(\n\t\tcontext.TODO(),\n\t\t\"instance_id\",\n\t\t\"key_id\",\n\t)\n\tif err != nil {\n\t\tpanic(err.Error())\n\t}\n\tfmt.Printf(\"%+v\\n\", toolPermissions.Data)\n}\n" - lang: Java source: |- package com.telnyx.sdk.example; import com.telnyx.sdk.client.TelnyxClient; import com.telnyx.sdk.client.okhttp.TelnyxOkHttpClient; public final class Main { private Main() {} public static void main(String[] args) { TelnyxClient client = TelnyxOkHttpClient.fromEnv(); var page = client.agentGateways().keys().toolPermissions().list("instance_id", "key_id"); } } - lang: Ruby source: >- require "telnyx" telnyx = Telnyx::Client.new(api_key: "My API Key") page = telnyx.agent_gateways.keys.tool_permissions.list("instance_id", "key_id") puts(page) - lang: PHP source: >- agentGateways->keys->toolPermissions->list( 'instance_id', 'key_id', ); var_dump($page); } catch (APIException $e) { echo $e->getMessage(); } - lang: CLI source: |- telnyx agent-gateways:keys:tool-permissions list \ --api-key 'My API Key' \ --instance-id 32ce035d-3165-4031-b1a7-a7c0c259590a \ --key-id f739ad190d29e2a5e658c3a486111953e6c18d746fd04374962ab150aae17757 components: schemas: AgentGatewayToolPermissionsResponse: type: object required: - data properties: data: $ref: '#/components/schemas/AgentGatewayToolPermissions' TelnyxErrors: type: object properties: errors: type: array items: $ref: '#/components/schemas/TelnyxError' AgentGatewayToolPermissions: type: object required: - servers properties: servers: type: array items: $ref: '#/components/schemas/AgentGatewayServerGrant' description: The servers granted, each with its tools. `[]` grants none. TelnyxError: type: object properties: code: type: string title: type: string detail: type: string source: type: object properties: pointer: type: string parameter: type: string meta: type: object properties: url: type: string AgentGatewayServerGrant: type: object required: - id properties: id: type: string format: uuid description: An MCP server's or API's `id` on the instance. tools: type: array items: type: string description: >- The tools the grant covers, by name without the server prefix. `[]` covers every tool the server exposes. securitySchemes: bearerAuth: type: http scheme: bearer description: Telnyx API key ````