# Hosted AI egress in early access

> OpenWAF Cloud runs the egress gateway at egress.openwaf.dev: agents with their own tokens, write-only provider keys and blocked requests in the dashboard.

OpenWAF Cloud now runs the egress gateway for you at `https://egress.openwaf.dev`, in early access. From the new **AI egress** page, the API or the MCP server, an organization admin creates one agent per app with its own token (shown once), stores provider keys that can only be replaced, never read back, and adds custom HTTPS targets next to a catalog of 13 providers. Every refused call appears in **Blocked requests**, live. Write to support@openwaf.dev to join.

See [get started with hosted egress](https://developers.openwaf.dev/egress/cloud/get-started/).