OpenWAF Cloud now runs the egress gateway for you at https://egress.openwaf.dev, in early access. From the new AI egress page, the API or the MCP server, an organization admin creates one agent per app with its own token (shown once), stores provider keys that can only be replaced, never read back, and adds custom HTTPS targets next to a catalog of 13 providers. Every refused call appears in Blocked requests, live. Write to [email protected] to join.