KDCube
← AI Industry News

Open Agent Governance vs. the Control-Plane Land Grab

WSO2 shipped a sovereign, self-hostable update to its open Apache-2.0 Agent Manager, an open counterweight to the proprietary control planes vendors are racing to ship. Meanwhile Docusign's MCP server hits GA Sept 30 and Salesforce's new AIforce pushes agents past the org boundary — turning MCP into a ...

Highlights

  • WSO2 pushed a "sovereign AI governance" update to its open, Apache-2.0 Agent Manager control plane — a self-hostable, framework-neutral answer to the proprietary control planes vendors have been racing to ship (WSO2, GlobeNewswire)
  • Docusign's MCP server goes GA September 30, making governed agreement actions callable from Claude, ChatGPT, Gemini, Copilot, Slack, and any MCP client through one interface — MCP graduating from "read records" to "run operations" (Docusign / PR Newswire)
  • Salesforce unveiled AIforce, exposing business logic to external agents, plus Agentforce Coworker, which Adecco will roll out across 40 countries — agents crossing the org boundary (AI Agents News)
  • The 2026-07-28 MCP spec — stateless core, formal extensions, Tasks moved out of experimental — is the standard all of this now builds on (MCP)

Key Signals

  1. WSO2 Agent Manager positions open governance against the proprietary land grab Sept 15, 2026

    WSO2's Sept 15 release frames Agent Manager as sovereign, self-hostable governance for enterprise agent sprawl: lifecycle management, policy enforcement, and full-stack observability across any framework, model, or deployment, under Apache 2.0 to avoid lock-in (GlobeNewswire, WSO2). It's the open counterweight to the vendor-owned control planes previewed earlier this week — and it leans on WSO2's OpenID Foundation identity work and an OAuth 2 extension for MCP (WSO2).

  2. Docusign turns MCP into an enterprise action layer GA Sept 30 (announced Sept 4)

    Docusign's MCP server reaches general availability Sept 30 with account-level admin controls, multi-region infrastructure, and multilingual support, letting any MCP client call real agreement operations — not just query them (PR Newswire, Docusign). For builders, this is a concrete template for exposing a system of record to agents with tool-level authorization built in.

  3. Salesforce AIforce and Agentforce Coworker push agents past the org boundary Sept 16, 2026

    Beyond last week's long-horizon runtime, AIforce exposes internal workflows to outside agents while Agentforce Coworker orchestrates specialist agents as a "teammate" — with Adecco committing to a 40-country recruiting rollout (AI Agents News). Cross-vendor agent-to-agent access makes identity scoping and audit non-optional.

Why It Matters / What To Watch

  1. Open vs. proprietary control planes is now a live decision
    • Weigh WSO2's self-hosted, Apache-2.0 Agent Manager against vendor-owned control planes when you need data sovereignty and multi-framework coverage (GlobeNewswire).
    • Track the identity substrate — OpenID Foundation's agentic-identity work and the OAuth 2 MCP extension are becoming the interoperability layer beneath all of these (WSO2).
  2. MCP is maturing into the enterprise action layer — plan for it
    • Pilot governed MCP connectors (Docusign is a clean reference) and design tool-level authorization and admin scoping before agents get write access (Docusign).
    • Build against the stateless 2026-07-28 core and the new extensions/Tasks model so connectors survive the deprecations (Roots, Sampling, Logging) on their 12-month clock (MCP).

Quick Links