WSO2 ships Agent Manager to rein in enterprise AI agent sprawl

WSO2 has announced the general availability of Agent Manager, an open control plane built to govern AI agents across any framework, model, or deployment. The launch comes as enterprises struggle to keep pace with the rapid growth of automated AI agents in their operations.

The platform is fully open source under the Apache 2.0 licence and can be deployed anywhere, self-hosted or as managed SaaS. WSO2 frames it around two questions: what agents can access, and how agents run.

On the access side, Agent Manager governs large language models, MCP servers, and agent-level guardrails. On the runtime side, it provides a sandboxed runtime, observability, and evaluation.

Agent Manager entered beta in June 2026. General availability adds per-agent, per-environment identity controls, MCP-level governance, and a sandboxed runtime, pulling the full agent lifecycle into a single system.

WSO2's key architectural bet is separating governance infrastructure from agent logic, so teams can switch models or frameworks without rebuilding compliance controls. Chief AI Officer Dr Rania Khalaf said teams want the freedom to use the best model or framework for the job at hand, and that "control has to respect that heterogeneity. When governance is separated from agent logic, it can scale across frameworks instead of being locked into one ecosystem."

That framing targets a market problem now taking shape. Once enterprises move from pilots to production, the number of agents, their permissions, and the chains of calls between them expand quickly, and agents scattered across teams become a governance blind spot. Consolidating identity, permissions, MCP access, and runtime isolation into one control plane is one of the main industry answers to agent sprawl.

The open-source approach is worth watching. Apache 2.0 plus self-hosting means companies can keep the governance layer inside their own infrastructure rather than entrusting agent permissions to an outside vendor, but it also means WSO2 needs a commercial path beyond the open core, which is where managed SaaS comes in.

Two things to watch next: whether Agent Manager stays compatible with the main agent frameworks and the MCP ecosystem, and whether enterprises are willing to converge cross-department agent governance onto a single control plane.