Agent 365 and the control-plane era — Microsoft's bid to govern an agent economy it didn't build
Microsoft Agent 365 reaching GA this week reframes the agent market. Microsoft doesn't ship the best agent runtime. It doesn't need to. It ships the surface where enterprise admins decide which agents are allowed to run at all — and that is the chokepoint the model labs cannot reach.
The model labs have spent eighteen months arguing about who has the best agent runtime: Claude Managed Agents, OpenAI's Operator descendants, Google's Gemini Enterprise Agent Platform, Salesforce's Agentforce. Microsoft's Agent 365 GA announcement sidesteps the argument by occupying a different layer entirely. The control plane.
The strategic precedent is Active Directory. In the 1990s, every Windows-era startup believed the operating system was the durable platform. Microsoft quietly let the OS commoditize while owning identity. The chokepoint moved from "which OS does this app run on" to "which identity directory is authoritative for this organization." That chokepoint has been worth tens of billions of dollars in margin for thirty years.
Agent 365 plays the same hand on agents. Microsoft is fine with Anthropic, OpenAI, and Google all shipping superior agent runtimes — provided every enterprise authorization to actually run those agents in an M365 tenant flows through Microsoft's control plane. The pricing follows: agent runtime is a commodity priced by tokens; agent governance is a seat license priced per admin.
The signal worth watching is whether competing control-plane offerings emerge from the identity-and-governance vendors who already serve large enterprises — Okta, CrowdStrike, Cisco, Palo Alto. Salesforce's Agentforce Coworker beta takes a different bet — colonize the search bar, not the governance surface — and the two strategies will play out in different parts of the enterprise stack. But if a true cross-vendor agent governance standard emerges over the next twelve months, it will look less like MCP (which Anthropic still controls) and more like SAML or SCIM. Open, multi-vendor, and standardized exactly because no incumbent can win control of it.
The throughline from prior coverage: we've been arguing that the agent runtime layer would consolidate around a few standards while the differentiation moved upward. Agent 365 is that thesis becoming visible at the control-plane layer. The labs build the runtimes. Microsoft sells the kill switch.
Futurum — Microsoft Agent 365 Turns Shadow AI Into a Governed Asset Class → · AI Business — AI Agents Are Becoming Operational Infrastructure →