Virtual Private Cloud

Agents reach services inside the user’s network through an Agent Gateway.

Preview. Not available yet.

An agent on the user’s Network reaches services inside the user’s network, such as MCP servers and APIs, through an Agent Gateway instance. No service needs a public address. These are the pieces that build it:

Artifact	What It Does	Where
Network	Holds the instance, the agents, and the routes to the user’s network.	Telnyx
WireGuard Interface	Attaches the instance and the agents to the Network.	Telnyx
Agent Gateway instance	Takes every request from the agents at its gateway_url, and reaches the services for them.	Telnyx
Edge Compute function with a network binding	Runs an agent on the Network, public or private.	Telnyx
Route	Sends a CIDR of the user’s network to a forwarding peer or to a tunnel.	Telnyx
Forwarding peer, a WireGuard peer	Forwards traffic from the Network to the subnets behind it.	The user’s network
Tunnel hosts, running a Tunnel	Connect out to Telnyx, with no change to the user’s router or firewall, and carry traffic to the subnets they reach.	The user’s network

A forwarding peer and tunnel hosts are two ways into the same subnets. Either one carries the instance’s requests to the services.