What happened
On Sept 22, 2026, WSO2 announced general availability of WSO2 Agent Manager, an open-source (Apache 2.0, self-hostable or SaaS) agent control plane that governs the full agent lifecycle across any framework/model (LangChain, CrewAI, Bedrock Strands, MS Agent Framework): per-agent per-environment verifiable identity, MCP-level governance, 40+ guardrails, sandboxed K8s-native runtime with single-click suspension, OpenTelemetry tracing and continuous evals.
Why it matters
It is one of the few GA, framework-agnostic agent governance platforms that separates control infrastructure from agent logic, giving sovereignty from vendor lock-in. Built on the OpenID Foundation's Identity Management for Agentic AI work and an OAuth 2 extension for MCP that WSO2 co-authored, it is open (no per-vendor lock-in), making it a strong reference point for agent identity and MCP governance standards.
Applicability
Platform/security engineering teams managing heterogeneous agent estates (multi-framework, multi-model, hybrid cloud) should evaluate it for agent identity, MCP guardrails and sandboxed runtime — viable now given Apache 2.0 self-host options.