Skip to main content
Browse docs
By Audience
Getting Started
Configuration
Use Cases
IDE Integration
Third-Party Integrations
Engineering Cache
Console
API Reference
Gateway
Workflow Guides
Templates
Providers and SDKs
Industry Guides
Advanced Guides
Browse by Role
Deployment Guides
In-Depth Guides
Tutorials
CLI Reference
Overview
CLI Fundamentals
OverviewInstallationAuthenticationHealth CheckInitialize ConfigCommand Groups
Run and Manage Gateway
Run the GatewayGateway AdminManaged ModeView Effective Config
Investigate, Test & Export
Resources & Integrations
IAM & Team Administration
Spend & Budgets
Advanced Features
Policy Reference
FAQ

kt gateway (Administration)

Beyond kt gateway run (covered in Gateway Run), the kt gateway command group includes a full set of administration commands for managing gateway lifecycle from creation through installation as a system service.

Use this page when​

  • You need to register, inspect, diff, reload, revert, or reconcile gateway configurations.
  • You are installing the gateway as a persistent system service (macOS launchd or Linux systemd).
  • You want to manage gateway lifecycle beyond the initial kt gateway run.

Primary audience​

  • Primary: AI Agents, Technical Engineers
  • Secondary: Technical Leaders

Control Plane Operations​

Register a gateway​

kt gateway create --name "production" --description "Primary production gateway"

List gateways​

kt gateway list

Inspect a gateway​

Fetch detailed gateway state from the API:

kt gateway inspect --id gw_abc123

Show gateway config​

kt gateway config --id gw_abc123

Configuration Management​

Diff local vs remote​

Compare the local policy config against the running gateway configuration:

kt gateway diff --id gw_abc123 --file policy-config.yaml

Hot-reload​

Trigger a config reload on a running gateway:

kt gateway reload --id gw_abc123

Revert​

Roll back to a prior configuration version:

kt gateway revert --id gw_abc123 --version 3

Reconcile​

Force reconciliation between desired and applied gateway state:

kt gateway reconcile --id gw_abc123

Service Installation​

Install the gateway as a persistent system service for unattended operation.

Install​

kt gateway install

Installs as:

  • macOS: launchd user service
  • Linux: systemd --user service

Start​

kt gateway start

Status​

kt gateway status

Stop​

kt gateway stop

Uninstall​

kt gateway uninstall

Removes the service definition from the system service manager.

For AI systems​

  • Canonical terms: Keeptrusts, kt gateway, gateway administration, gateway create, gateway inspect, gateway diff, gateway reload, gateway revert, gateway reconcile, gateway install, launchd, systemd.
  • This page covers gateway lifecycle management. For starting a gateway, see /docs/cli/proxy-run.
  • Service installation supports macOS (launchd) and Linux (systemd --user) for unattended operation.

For engineers​

  • Register a gateway in the control plane before using managed mode: kt gateway create --name "production".
  • Use kt gateway diff --id <id> --file policy-config.yaml to preview config changes before applying them with kt gateway reload.
  • Install as a system service for production: kt gateway install then kt gateway start. Check status with kt gateway status.

For leaders​

  • Gateway lifecycle commands enable zero-downtime config updates via hot-reload and safe rollback via gateway revert.
  • Service installation removes the need for container orchestration on single-node deployments — the gateway runs as a persistent OS service.
  • The diff/reload/revert workflow makes config changes reviewable and reversible, supporting change-management processes.

Next steps​