> ## Documentation Index
> Fetch the complete documentation index at: https://docs.bluee.sh/llms.txt
> Use this file to discover all available pages before exploring further.

# Describe gateway policy and runtime readiness without contacting the gateway



## OpenAPI

````yaml /openapi/next.yaml get /gateway/status
openapi: 3.1.0
info:
  title: Blue — Service Contract
  version: 0.1.0
  description: >
    The client-side contract the `blue` CLI expects from the provisioned
    service. The reference `control-api` implements it; any BYO service that
    honors these shapes can be swapped in. Gateway-mode inference JWT issuance
    is OPTIONAL — governance-only deployments need only `GET
    /governance-config`. CLI callers use OAuth 2.0 access tokens issued through
    RFC 8628 device authorization; dashboard callers use an HTTP-only Better
    Auth session cookie.
servers:
  - url: https://harness.example.com
    description: Replace with the Control API URL for your deployment.
security:
  - oauthDevice: []
tags:
  - name: System
    description: Service health and authenticated identity.
  - name: Configuration
    description: Personalized governance policy and client reconciliation state.
  - name: Gateway
    description: Per-user managed inference-gateway credential lifecycle.
  - name: Sessions
    description: Raw-session upload, metadata, and download lifecycle.
  - name: Administration
    description: Organization-administrator policy and client operations.
  - name: User management
    description: >-
      Organization user lifecycle, session revocation, and invitation
      operations.
  - name: Identity provisioning
    description: SCIM 2.0 user and group provisioning for an external identity provider.
paths:
  /gateway/status:
    get:
      tags:
        - Gateway
      summary: >-
        Describe gateway policy and runtime readiness without contacting the
        gateway
      operationId: getGatewayStatus
      responses:
        '200':
          description: Gateway mode state and per-harness routing policy
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GatewayStatusResponse'
components:
  schemas:
    GatewayStatusResponse:
      type: object
      required:
        - enabled
        - runtime_configured
      properties:
        enabled:
          type: boolean
          description: True when the global gateway policy enables gateway mode.
        runtime_configured:
          type: boolean
          description: True when all required server-side gateway settings are present.
        inference_proxy_url:
          type:
            - string
            - 'null'
          format: uri
          description: Administrator-only inference proxy URL.
        upstream_gateway_url:
          type:
            - string
            - 'null'
          format: uri
          description: Administrator-only upstream inference gateway URL.
        provisioner_type:
          type:
            - string
            - 'null'
          description: >-
            Administrator-only built-in or executable provisioner selected by
            configuration.
        harnesses:
          type: array
          description: Administrator-only routed harness details.
          items:
            $ref: '#/components/schemas/GatewayHarnessStatus'
        runtime_checks:
          description: >-
            Administrator-only configuration-presence checks. Credential values
            are never returned.
          oneOf:
            - $ref: '#/components/schemas/GatewayRuntimeChecks'
            - type: 'null'
    GatewayHarnessStatus:
      type: object
      required:
        - name
        - gateway_type
      properties:
        name:
          type: string
          example: codex
        gateway_type:
          type: string
          example: litellm
    GatewayRuntimeChecks:
      type: object
      required:
        - gateway_policy
        - gateway_url
        - inference_proxy_url
        - provisioner
        - secret_encryption
        - internal_auth
        - inference_jwt_signing
      properties:
        gateway_policy:
          type: boolean
        gateway_url:
          type: boolean
        inference_proxy_url:
          type: boolean
        provisioner:
          type: boolean
        secret_encryption:
          type: boolean
        internal_auth:
          type: boolean
        inference_jwt_signing:
          type: boolean
  securitySchemes:
    oauthDevice:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: >
        OAuth 2.0 access token obtained through RFC 8628 at
        /api/auth/device/code and /api/auth/oauth2/token. The API enforces
        governance:read, session:write, and client-status:write as appropriate.

````