Injection Protection: Server-side include injection - Policy

After creating the policy, add server-side-include to the policies array of your AI Model. The tool examples update an existing AI Model with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI Model.

kongctl

model.yaml

Copied!

ai_gateway_models:
  - ref: my-gpt-4o
    ai_gateway: !lookup {id: !env AI_GATEWAY_ID}
    display_name: my-gpt-4o
    name: my-gpt-4o
    type: model
    capabilities:
    - generate
    formats:
    - type: openai
    targets:
    - name: gpt-4o
      provider: my-openai-account
      config:
        type: openai
    config:
      route:
        paths:
        - "/v1"
        model:
          body_param: model
          values:
          - my-gpt-4o
      logging:
        payloads: false
    policies:
    - !ref server-side-include#name

After creating the policy, add server-side-include to the policies array of your AI Model. The tool examples update an existing AI Model with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI Model.

curl -X PUT https://{region}.api.konghq.com/v1/ai-gateways/{AIGatewayId}/models/my-gpt-4o \
    --header "accept: application/json" \
    --header "Content-Type: application/json" \
    --header "Authorization: Bearer $KONNECT_TOKEN" \
    --data '
    {
      "display_name": "my-gpt-4o",
      "name": "my-gpt-4o",
      "type": "model",
      "capabilities": [
        "generate"
      ],
      "formats": [
        {
          "type": "openai"
        }
      ],
      "policies": [
        "server-side-include"
      ],
      "targets": [
        {
          "name": "gpt-4o",
          "provider": "my-openai-account",
          "config": {
            "type": "openai"
          }
        }
      ],
      "config": {
        "route": {
          "paths": [
            "/v1"
          ],
          "model": {
            "body_param": "model",
            "values": [
              "my-gpt-4o"
            ]
          }
        },
        "logging": {
          "payloads": false
        }
      }
    }
    '

Copied!

After creating the policy, add server-side-include to the policies array of your AI Model. The tool examples update an existing AI Model with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI Model.

resource "konnect_ai_gateway_model" "my_model" {
  display_name = "my-gpt-4o"
  name = "my-gpt-4o"
  type = "model"
  capabilities = ["generate"]
  formats = [
    {
      type = "openai"
    }  ]
  targets = [
    {
      name = "gpt-4o"
      provider = "my-openai-account"

      config = {
        type = "openai"
      }
    }  ]
  config = jsonencode({

    route = {
      paths = ["/v1"]

      model = {
        body_param = "model"
        values = ["my-gpt-4o"]
      }
    }

    logging = {
      payloads = false
    }
  })
  policies = [konnect_ai_gateway_policy.my_policy.name]


  gateway_id = konnect_ai_gateway.my_ai_gateway.id
}

Copied!

After creating the policy, add server-side-include to the policies array of your AI Agent. The tool examples update an existing AI Agent with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI Agent.

kongctl

agent.yaml

Copied!

ai_gateway_agents:
  - ref: kongair-flight-booking-agent
    ai_gateway: !lookup {id: !env AI_GATEWAY_ID}
    display_name: KongAir Flight Booking Agent
    name: kongair-flight-booking-agent
    type: a2a
    access:
      acls:
        allow:
        - internal-teams
    config:
      url: https://booking-agent.internal.kongair.com
      route:
        paths:
        - "/kongair-flight-booking"
      logging:
        payloads: false
        max_payload_size: 1048576
    policies:
    - !ref server-side-include#name

After creating the policy, add server-side-include to the policies array of your AI Agent. The tool examples update an existing AI Agent with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI Agent.

curl -X PUT https://{region}.api.konghq.com/v1/ai-gateways/{AIGatewayId}/agents/kongair-flight-booking-agent \
    --header "accept: application/json" \
    --header "Content-Type: application/json" \
    --header "Authorization: Bearer $KONNECT_TOKEN" \
    --data '
    {
      "display_name": "KongAir Flight Booking Agent",
      "name": "kongair-flight-booking-agent",
      "type": "a2a",
      "access": {
        "acls": {
          "allow": [
            "internal-teams"
          ]
        }
      },
      "policies": [
        "server-side-include"
      ],
      "config": {
        "url": "https://booking-agent.internal.kongair.com",
        "route": {
          "paths": [
            "/kongair-flight-booking"
          ]
        },
        "logging": {
          "payloads": false,
          "max_payload_size": 1048576
        }
      }
    }
    '

Copied!

After creating the policy, add server-side-include to the policies array of your AI Agent. The tool examples update an existing AI Agent with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI Agent.

resource "konnect_ai_gateway_agent" "my_agent" {
  display_name = "KongAir Flight Booking Agent"
  name = "kongair-flight-booking-agent"
  type = "a2a"
  access = {

    acls = {
      allow = ["internal-teams"]
    }
  }
  config = jsonencode({
    url = "https://booking-agent.internal.kongair.com"

    route = {
      paths = ["/kongair-flight-booking"]
    }

    logging = {
      payloads = false
      max_payload_size = 1048576
    }
  })
  policies = [konnect_ai_gateway_policy.my_policy.name]


  gateway_id = konnect_ai_gateway.my_ai_gateway.id
}

Copied!

After creating the policy, add server-side-include to the policies array of your AI MCP Server. The tool examples update an existing AI MCP Server with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI MCP Server.

kongctl

mcp_server.yaml

Copied!

ai_gateway_mcp_servers:
  - ref: petstore-mcp
    ai_gateway: !lookup {id: !env AI_GATEWAY_ID}
    display_name: Petstore API
    name: petstore-mcp
    type: conversion-listener
    enabled: true
    access:
      acl_attribute_type: consumer
      acls:
        allow: []
      default_tool_acls:
        deny: []
    config:
      url: http://host.docker.internal:8080/api/v3
      route:
        paths:
        - "/petstore"
      logging:
        payloads: false
      server:
        timeout: 60000
    tools:
    - name: get-pets-by-status
      description: Find pets by status
      method: GET
      path: "/petstore/pet/findByStatus"
      parameters:
      - name: status
        in: query
        required: true
        schema:
          type: string
          enum:
          - available
          - pending
          - sold
        description: Status value to filter pets by
    - name: get-pet-by-id
      description: Get pet by ID
      method: GET
      path: "/petstore/pet/{petId}"
      parameters:
      - name: petId
        in: path
        required: true
        schema:
          type: integer
        description: ID of the pet to retrieve
    policies:
    - !ref server-side-include#name

After creating the policy, add server-side-include to the policies array of your AI MCP Server. The tool examples update an existing AI MCP Server with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI MCP Server.

curl -X PUT https://{region}.api.konghq.com/v1/ai-gateways/{AIGatewayId}/mcp-servers/petstore-mcp \
    --header "accept: application/json" \
    --header "Content-Type: application/json" \
    --header "Authorization: Bearer $KONNECT_TOKEN" \
    --data '
    {
      "display_name": "Petstore API",
      "name": "petstore-mcp",
      "type": "conversion-listener",
      "enabled": true,
      "policies": [
        "server-side-include"
      ],
      "access": {
        "acl_attribute_type": "consumer",
        "acls": {
          "allow": []
        },
        "default_tool_acls": {
          "deny": []
        }
      },
      "config": {
        "url": "http://host.docker.internal:8080/api/v3",
        "route": {
          "paths": [
            "/petstore"
          ]
        },
        "logging": {
          "payloads": false
        },
        "server": {
          "timeout": 60000
        }
      },
      "tools": [
        {
          "name": "get-pets-by-status",
          "description": "Find pets by status",
          "method": "GET",
          "path": "/petstore/pet/findByStatus",
          "parameters": [
            {
              "name": "status",
              "in": "query",
              "required": true,
              "schema": {
                "type": "string",
                "enum": [
                  "available",
                  "pending",
                  "sold"
                ]
              },
              "description": "Status value to filter pets by"
            }
          ]
        },
        {
          "name": "get-pet-by-id",
          "description": "Get pet by ID",
          "method": "GET",
          "path": "/petstore/pet/{petId}",
          "parameters": [
            {
              "name": "petId",
              "in": "path",
              "required": true,
              "schema": {
                "type": "integer"
              },
              "description": "ID of the pet to retrieve"
            }
          ]
        }
      ]
    }
    '

Copied!

After creating the policy, add server-side-include to the policies array of your AI MCP Server. The tool examples update an existing AI MCP Server with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI MCP Server.

resource "konnect_ai_gateway_mcp_server" "my_mcp_server" {
  display_name = "Petstore API"
  name = "petstore-mcp"
  type = "conversion-listener"
  enabled = true
  access = {
    acl_attribute_type = "consumer"

    acls = {
      allow = []
    }

    default_tool_acls = {
      deny = []
    }
  }
  tools = [
    {
      name = "get-pets-by-status"
      description = "Find pets by status"
      method = "GET"
      path = "/petstore/pet/findByStatus"
      parameters = [
        {
          name = "status"
          in = "query"
          required = true

          schema = {
            type = "string"
            enum = ["available", "pending", "sold"]
          }
          description = "Status value to filter pets by"
        }      ]
    }, 

    {
      name = "get-pet-by-id"
      description = "Get pet by ID"
      method = "GET"
      path = "/petstore/pet/{petId}"
      parameters = [
        {
          name = "petId"
          in = "path"
          required = true

          schema = {
            type = "integer"
          }
          description = "ID of the pet to retrieve"
        }      ]
    }  ]
  config = jsonencode({
    url = "http://host.docker.internal:8080/api/v3"

    route = {
      paths = ["/petstore"]
    }

    logging = {
      payloads = false
    }

    server = {
      timeout = 60000
    }
  })
  policies = [konnect_ai_gateway_policy.my_policy.name]


  gateway_id = konnect_ai_gateway.my_ai_gateway.id
}

Copied!

Injection Protection Policy

Server-side include injection

Set up the policy

Attach the policy

Help us make these docs great!

Still need help?