Existing SaaS providers must determine how and where agents best fit into their offerings. Getting there requires organizations to transform existing IP and functionality into agent-powered experiences. This breakout will dig into the details of this transformation, examining the patterns, strategies, and techniques that can be used to introduce agents into an existing multi-tenant system. Well focus heavily on identifying the target agents, digging into how/where theyre built and introduced, how theyre integrated, and so on. Well also dig into how multi-tenancy lands in new agents, integrating with MCP servers, using RAG, applying tenant isolation, supporting onboarding, and on on.
What this session is about
Playbook
Editorial commentary · what to actually do about this on Monday
The concept
Existing multi-tenant SaaS platforms bolt on agents, requiring new thinking on tenant isolation, MCP server scoping, RAG, onboarding, and pricing.
Why it matters
If a competitor ships agents into your category before you do, you've ceded the AI-native narrative. Renewals get harder.
The hard parts
Tenant isolation in agent state — memory, vectors, available tools — is genuinely novel. Your existing isolation model was designed for HTTP requests, not stateful agent conversations.
Playbook moves
(1) Build tenant-scoped MCP servers — never share an MCP across tenants. (2) Audit every tool call for tenant boundary correctness. (3) Re-think onboarding: agents need access to tenant data, which means new permission flows.
The surprise
The right pricing model for agentic SaaS isn't seats or usage — it's *outcome-based* (per resolved ticket, per successful workflow, per accurate document processed). Almost no SaaS has the billing infra to do this. Start the billing rebuild now, not after launch. Your finance team will become a bottleneck if you don't.
---
Independent editorial perspective — not an official AWS or speaker statement. Designed for executives evaluating what to brief their teams on next.
Live updates related to this session LIVE
Sourced via Parallel AI Monitor — continuous web watch on 21 topical streams. Updated .
- glean.com high confidence Decision lineage & audit trails for agents
The horizontal AI platform for enterprise superintelligence
Aiceberg introduced the 'Guardian Agent,' a system designed to make every agentic AI decision visible, traceable, and easy to understand to ensure security and policy enforcement.
- github.com high confidence Open-source agent infrastructure
GitHub - agentgateway/agentgateway: Next Generation Agentic Proxy for AI Agents and MCP servers · GitHub
Agentgateway released version v1.2.0-alpha.1, continuing the development of its open-source AI-native proxy for agent-to-agent and agent-to-tool communication. The project maintains approximately 2.6k GitHub stars and is part of the Linux Foundation.
- github.github.com high confidence Scaling infra for agent workloads
Rate Limiting Controls | GitHub Agentic Workflows
GitHub introduced 'Rate Limiting Controls' for Agentic Workflows to prevent runaway agent behavior. The system implements a defense-in-depth architecture including dual concurrency control (per-workflow and per-engine) to prevent parallel execution explosions, 'Safe Output Limits
- techcommunity.microsoft.com high confidence Agent governance & policy gating
What’s New in Agent 365: May 2026 | Microsoft Community Hub
Microsoft announced the general availability of Agent 365, a comprehensive control plane for agents focused on observability, governance, and security. Key governance features include a centralized registry of all agents, an admin approval and publication workflow for onboarding
- aiceberg.ai high confidence Decision lineage & audit trails for agents
AI Detection & Response: Secure Your Systems | Aiceberg
Aiceberg introduced the 'Guardian Agent,' a system designed to make every agentic AI decision visible, traceable, and easy to understand to ensure security and policy enforcement.
External links matched to this session via topic relevance. The KB does not endorse third-party content; verify before citing.