diff --git a/aigw/product/enterprise-offering/org-management/gateway-urls.mdx b/aigw/product/enterprise-offering/org-management/gateway-urls.mdx index f8ef87727..ba859841c 100644 --- a/aigw/product/enterprise-offering/org-management/gateway-urls.mdx +++ b/aigw/product/enterprise-offering/org-management/gateway-urls.mdx @@ -5,6 +5,8 @@ description: "Configure custom gateway endpoints for your organisation's AI gate The Gateway URLs settings let you point Prisma AIRS AI Gateway at your own self-hosted gateway deployments instead of the AI Gateway's cloud endpoints. Once configured, the dashboard uses your custom URLs when generating code snippets, running playground completions, and constructing MCP server endpoints. +To stop traffic to the SaaS gateways altogether, see [Disable the SaaS Gateway](/aigw/self-hosting/hybrid-deployments/gateway-registration#disable-the-saas-gateway). + Both fields are set at the **organisation level** and apply across all workspaces within that organisation. --- diff --git a/aigw/self-hosting/hybrid-deployments/gateway-registration.mdx b/aigw/self-hosting/hybrid-deployments/gateway-registration.mdx index 85ae3530b..415823e4d 100644 --- a/aigw/self-hosting/hybrid-deployments/gateway-registration.mdx +++ b/aigw/self-hosting/hybrid-deployments/gateway-registration.mdx @@ -71,6 +71,40 @@ The overview page shows: --- +## Disable the SaaS Gateway + +The **SaaS Gateway** toggle at the top of the Gateway Registration page controls whether your organisation can send traffic to the Prisma AIRS AI Gateway SaaS gateway. Turn it off to route all traffic through your own registered gateways. + + + SaaS Gateway toggle on the Gateway Registration page, shown as Disabled + + +When the toggle is **Disabled**, the SaaS AI gateway and the SaaS MCP gateway do not accept traffic for your account. Requests only work through gateways you have registered. + + + The toggle is available on all accounts. Only organisation admins can change it. + + + + Point your applications and MCP clients at your registered gateways **before** disabling the SaaS Gateway. Requests that still use the SaaS gateway are not allowed once it is disabled. + + +### Disable or re-enable + + + +Go to **Admin Settings → Gateway Registration**. + + +Check that at least one registration shows an **Active** status. + + +Turn the **SaaS Gateway** toggle off to disable the SaaS gateway, or on to re-enable it. + + + +--- + ## Deployment Steps For Helm chart deployment details, refer to the [values.yaml reference](https://github.com/Portkey-AI/airs-gw-helm/blob/main/charts/airs-gw/README.md). diff --git a/images/self-hosting/saas-gateway-toggle.png b/images/self-hosting/saas-gateway-toggle.png new file mode 100644 index 000000000..31851405b Binary files /dev/null and b/images/self-hosting/saas-gateway-toggle.png differ diff --git a/product/enterprise-offering/org-management/gateway-urls.mdx b/product/enterprise-offering/org-management/gateway-urls.mdx index afb8bcc1d..f60cce179 100644 --- a/product/enterprise-offering/org-management/gateway-urls.mdx +++ b/product/enterprise-offering/org-management/gateway-urls.mdx @@ -9,6 +9,8 @@ description: "Configure custom gateway endpoints for your organisation's AI gate The Gateway URLs settings let you point the Portkey dashboard at your own self-hosted gateway deployments instead of Portkey's cloud endpoints. Once configured, the dashboard uses your custom URLs when generating code snippets, running playground completions, and constructing MCP server endpoints. +To stop traffic to the SaaS gateways altogether, see [Disable the SaaS Gateway](/self-hosting/hybrid-deployments/gateway-registration#disable-the-saas-gateway). + Both fields are set at the **organisation level** and apply across all workspaces within that organisation. --- diff --git a/self-hosting/hybrid-deployments/gateway-registration.mdx b/self-hosting/hybrid-deployments/gateway-registration.mdx index 51bde85af..8f54c5468 100644 --- a/self-hosting/hybrid-deployments/gateway-registration.mdx +++ b/self-hosting/hybrid-deployments/gateway-registration.mdx @@ -80,6 +80,40 @@ The overview page shows: --- +## Disable the SaaS Gateway + +The **SaaS Gateway** toggle at the top of the Gateway Registration page controls whether your organisation can send traffic to the Portkey SaaS gateway. Turn it off to route all traffic through your own registered gateways. + + + SaaS Gateway toggle on the Gateway Registration page, shown as Disabled + + +When the toggle is **Disabled**, the SaaS AI gateway and the SaaS MCP gateway do not accept traffic for your account. Requests only work through gateways you have registered. + + + The toggle is available on all accounts. Only organisation admins can change it. + + + + Point your applications and MCP clients at your registered gateways **before** disabling the SaaS Gateway. Requests that still use the SaaS gateway are not allowed once it is disabled. + + +### Disable or re-enable + + + +Go to **Settings > Organisation > Gateway Registration**. + + +Check that at least one registration shows an **Active** status. + + +Turn the **SaaS Gateway** toggle off to disable the SaaS gateway, or on to re-enable it. + + + +--- + ## Deployment Steps For Helm chart deployment details, refer to the [values.yaml reference](https://github.com/Portkey-AI/airs-gw-helm/blob/main/charts/airs-gw/README.md).