WSO2 Agent Manager GA adds per-agent identity controls, MCP governance, and a sandboxed runtime for managing agent sprawl across any framework.
WSO2 announced the general availability of WSO2 Agent Manager on September 21, 2026 — an open control plane that governs AI agents across any framework, model, or deployment. The release matters for engineering teams drowning in agent prototypes that bypass IT, security, and compliance on the way to production.
The problem Agent Manager targets
Enterprise agent sprawl is real. Individual teams spin up LangChain apps, Copilot extensions, MCP-connected workflows, and custom harnesses without a shared identity layer, observability stack, or policy engine. WSO2 Agent Manager launched in beta in June 2026 and exits GA with features aimed at that fragmentation.
Agent Manager lets enterprises secure, operate, and manage their entire agent estate — whether controlling what agents access through LLM, MCP, and agent-level guardrails and agent identity, or how they run through sandboxed runtime, observability, and evaluation.
What's new in GA
General availability adds per-agent, per-environment agent identity controls, MCP-level governance, and a sandboxed runtime within the platform. Companies can manage the full agent lifecycle in one place, cleanly separating agent governance infrastructure from agent logic.
Implementing agent controls in a centralized and open platform gives teams consistent compliance enforcement and flexibility: swapping models, frameworks, or deployments without rebuilding agent governance from scratch.
Architecture and deployment options
WSO2 Agent Manager is released under the Apache 2.0 license and deployable self-hosted, giving enterprises sovereignty over where agent data lives and runs, or as managed SaaS. That dual option reflects how regulated industries approach AI infrastructure in 2026 — they want open code for auditability and the choice to keep data in their own regions.
The platform supports any agent framework because it focuses on the control plane rather than the agent logic itself. That design choice mirrors how Kubernetes won by orchestrating containers without caring what language applications were written in.
Who should evaluate it
Platform engineering teams responsible for internal developer platforms should put Agent Manager on their shortlist if agents are entering production this quarter. Security teams reviewing MCP server proliferation will appreciate MCP-level governance as a single choke point for tool access.
Developers building agents should not view governance tools as friction. In a month of sandbox escapes and threat intelligence reports about stolen API keys, centralized guardrails are what keep prototypes from becoming incidents.
Getting started
WSO2 is hosting a webinar on September 29, 2026. Documentation lives at wso2.com/agent-platform/agent-manager. For teams already using WSO2's API management stack, Agent Manager extends familiar patterns into the agent era rather than forcing a greenfield toolchain.
The agent gold rush of 2025–2026 produced impressive demos. GA releases like WSO2 Agent Manager signal the next phase: making agents operable at enterprise scale.
Comments
Loading comments…