Platform & Operations
Triggering Workflows: Scheduled, Webhook, and Event
The three ways to start an AI workflow—cron schedules, signed webhooks, and platform events—and which trigger fits each operational pattern.
Blog
Insights & updates — page 17
AI agent security, identity, governance, cost, and the engineering behind the control plane.
Platform & Operations
Executing and Monitoring Workflow Runs
How workflow runs execute node-by-node, how per-run spend caps prevent cost overruns, and how to observe, pause, cancel, and retry runs in real time.
Platform & Operations
Designing AI Workflows on a Visual Canvas
A node-and-edge visual canvas lets you compose, version, and audit multi-step AI agent workflows before anything runs — catching gaps that code reviews miss.
AI Agent Security
Inside the Agent Management Console
Register, configure, version, and debug every AI agent in your fleet from a single governed control surface with full audit trails and per-agent access control.
Platform & Operations
Managing API Consumers with Applications
Register every API consumer as a named Application with scoped credentials and per-agent access controls — so you can see and revoke what each can do.
AI Agent Security
Agent-to-Agent (A2A) Communication, Governed
Governed A2A communication makes every inter-agent call authenticated, scoped, and audited — with agent cards, least-privilege identity, and guardrails.
AI Agent Security
Governed Connections Between Agents and Resources
Turn implicit agent-to-resource links into policy-bound connections with rate limits, spend caps, trust gates, and guardrails enforced at dispatch.
AI Agent Security
Securely Sharing AI Agents Across Organizations
Share AI agents with partner organizations under explicit policies — request caps, expiry, instant revocation — without handing over credentials.
AI Agent Security
Cross-Org Agent Federation with Trust Manifests
How signed trust manifests let organizations share AI agents across boundaries without shared secrets—each delegation explicit, verifiable, and revocable.
AI Agent Security
Trust Scores and Attestations: Which Agents to Trust
Learn how agent trust scores combine behavioral signals, compliance state, and cryptographic attestations into an auditable dispatch gate for AI agents.
AI FinOps
Reliable Billing: Stripe Webhooks, Reconciliation, Dunning
Signed webhook verification, idempotent handlers, reconciliation, and a dunning state machine are the four layers that keep billing state correct.
AI FinOps
Tracking Per-Connection AI Usage and Cost
Per-connection usage tracking attributes every AI request and dollar to its source, enabling accurate chargebacks, capacity planning, and anomaly detection.
AI FinOps
Revenue Monitoring and Payouts for AI Marketplaces
How AI marketplaces track MRR, ARR, and per-agent earnings, and manage partner payouts — the outbound money flow that billing dashboards miss.
AI FinOps
Budget Policies in Praesidia: Spend Limits for AI Agents
How Praesidia's budget policies (Team and Enterprise) pause or block new agent tasks at a threshold you set and refuse over-budget gateway model calls.
AI FinOps
Credits and Cost Monitoring for Agent Spend
Understand task-completion credit settlement, per-agent usage records, dispatch budget reservations and how BYOK provider billing differs.
AI FinOps
Subscriptions, Invoices, and Contracts for AI Platforms
How subscription plans, metered usage, invoices, and enterprise contracts fit together so AI token and tool costs map cleanly to billing.
Identity & Access
User Account Self-Service and Admin Controls
How splitting user self-service from admin controls reduces the attack surface of an AI platform and keeps account hygiene manageable at scale.
Identity & Access
Security Policies: Passwords, Sessions, and IP Restrictions
Per-org security policies let tenants enforce password complexity, session timeouts, MFA mandates, and IP allow-lists — enforced server-side on every request.
Identity & Access
RBAC and Custom Roles for AI Operations
Fine-grained RBAC and custom roles let AI operations teams enforce least privilege across agents, workflows, and security settings — without admin grants.
Identity & Access
Organizing Access with Teams
Teams add a functional access layer beneath org roles: scoping agents, enforcing per-team budgets, and integrating SCIM for automated provisioning.
Identity & Access
Multi-Tenant Organizations and Membership
How multi-tenant org isolation protects AI agents and data, with invite flows, role lifecycle, and layered enforcement that prevents cross-tenant data leakage.
Identity & Access
Automating User Lifecycle with SCIM 2.0
SCIM 2.0 automates user lifecycle for AI platforms — collapsing the access-change window from days to minutes and enforcing token revocation on deprovision.
Identity & Access
Single Sign-On for AI Agent Management: SAML and OIDC
How enterprise SSO with SAML and OIDC maps IdP identities into org-scoped access for AI platforms — and why federated authentication matters for AI tooling.
Identity & Access
Passkeys and WebAuthn for AI Platforms
Passkeys eliminate phishing risk on AI control planes by binding credentials to the device. How the WebAuthn ceremony works and what to verify in any platform.