WSO2 Releases Agent Manager for Centralized AI Agent Governance and Security

WSO2 Agent Manager General Availability

WSO2 announced the general availability of WSO2 Agent Manager, an open-source platform. This platform provides centralized governance, identity management, security controls, and operational oversight for AI agents. It supports agents running across different models, frameworks, and deployment environments.

Addressing AI Agent Sprawl

The release addresses the challenge enterprises face with fragmented infrastructure for managing AI agent identity, permissions, behavior, and lifecycle. WSO2's approach separates agent governance from agent logic, allowing common controls to be applied independently of the underlying model, framework, or runtime.

Agent Manager entered beta in June 2026. The general availability release adds deeper agent identity capabilities, governance controls for Model Context Protocol (MCP) interactions, and a Kubernetes-native sandboxed runtime. The platform operates across cloud, on-premises, and hybrid environments.

Focus on Identity and Authorization

A central focus of the release is agent identity and authorization. Unlike conventional applications, agents can invoke tools, access APIs, delegate work, and interact with other agents, raising questions about authority and accountability.

Agent Manager provides a central inventory and management layer with features such as verifiable agent identity, role-based access, delegation, token exchange, and access revocation. It also includes lifecycle controls for moving agents through development, staging, and production, and the ability to suspend agents.

Built-in Controls and Sandboxed Execution

The platform includes over 40 built-in controls covering areas like personally identifiable information masking and rate limiting. These policies can be applied across different parts of an agent workflow, including the agent, MCP, and LLM layers.

The general availability release also introduces a sandboxed execution runtime, a Kubernetes-native environment for executing agents. This addresses concerns about agents accessing files, tools, APIs, and enterprise systems, allowing activity to be monitored and managed. Agent Manager uses OpenTelemetry for tracing and includes evaluation capabilities to monitor agent behavior over time, using rule-based and LLM-based evaluations.