THE COMPLETE CAPABILITY CATALOG

The whole platform.
The details that matter.

59 capability areas, organized around six responsibilities. Explore the model without losing the boundaries.

59 capabilitiesSTABLE IDs. EXPLICIT SCOPE.
T

Tooling & Environment Control

Explore domain
T01↗

Approved MCPs

Discover and assign reviewed MCP servers, tools and versions. A catalog entry is not blanket action permission.

See this capability in practice

Onboarding becomes a controlled setup journey rather than a folder of copied credentials. Debugging begins with the actual project and observed revision. Updates move through review and deliberate activation. A useful environment can be reused without making every project identical.

Review the update before it changes your agents’ permissions.Explore the control domain
T02↗

Skills and plugins

Review, release, pin and update skills and client-specific plugins with provenance and compatibility.

See this capability in practice

Onboarding becomes a controlled setup journey rather than a folder of copied credentials. Debugging begins with the actual project and observed revision. Updates move through review and deliberate activation. A useful environment can be reused without making every project identical.

A working environment should travel. Credentials should not.Review the update before it changes your agents’ permissions.Explore the control domain
T03↗

Model management

Manage supported model preferences and observed settings without pooling subscriptions or provider quotas.

See this capability in practice

Onboarding becomes a controlled setup journey rather than a folder of copied credentials. Debugging begins with the actual project and observed revision. Updates move through review and deliberate activation. A useful environment can be reused without making every project identical.

Explore the control domain
T04↗

Environment sync

Apply approved profiles across enrolled contexts while preserving unmanaged settings and independent authorization.

See this capability in practice

Onboarding becomes a controlled setup journey rather than a folder of copied credentials. Debugging begins with the actual project and observed revision. Updates move through review and deliberate activation. A useful environment can be reused without making every project identical.

A working environment should travel. Credentials should not.Find the difference behind “it works on my other machine.”Explore the control domain
T05↗

Version control

Pin artifact and profile revisions. Activate upgrades or rollbacks deliberately, not on every source edit.

See this capability in practice

Onboarding becomes a controlled setup journey rather than a folder of copied credentials. Debugging begins with the actual project and observed revision. Updates move through review and deliberate activation. A useful environment can be reused without making every project identical.

A working environment should travel. Credentials should not.Review the update before it changes your agents’ permissions.Explore the control domain
T06↗

Infrastructure templates

Reuse reviewed runtime and deployment patterns with explicit prerequisites, ownership and approval.

See this capability in practice

Onboarding becomes a controlled setup journey rather than a folder of copied credentials. Debugging begins with the actual project and observed revision. Updates move through review and deliberate activation. A useful environment can be reused without making every project identical.

Explore the control domain
T07↗

Secrets and configuration

Distribute managed settings and opaque credential references, never raw secrets in portable profiles.

See this capability in practice

Onboarding becomes a controlled setup journey rather than a folder of copied credentials. Debugging begins with the actual project and observed revision. Updates move through review and deliberate activation. A useful environment can be reused without making every project identical.

A working environment should travel. Credentials should not.Read-only should be a permission. Not a request.Explore the control domain
T08↗

Drift detection

Compare expected, approved, installed, loaded and observed state. Explain differences and precise unknowns.

See this capability in practice

Onboarding becomes a controlled setup journey rather than a folder of copied credentials. Debugging begins with the actual project and observed revision. Updates move through review and deliberate activation. A useful environment can be reused without making every project identical.

A working environment should travel. Credentials should not.Find the difference behind “it works on my other machine.”Explore the control domain
T09↗

Tool sandboxing

Bound approved execution by qualified filesystem, network, credential, time and resource controls.

See this capability in practice

Onboarding becomes a controlled setup journey rather than a folder of copied credentials. Debugging begins with the actual project and observed revision. Updates move through review and deliberate activation. A useful environment can be reused without making every project identical.

Review the update before it changes your agents’ permissions.Read-only should be a permission. Not a request.Explore the control domain
I

Identity & Policy

Explore domain
I01↗

Agent identity

Identify agents through authenticated, server-bound principals rather than self-reported names.

See this capability in practice

Security and platform teams can explain who requested an operation, whose authority it used, what it was allowed to reach and why it was permitted or denied. Developers retain flexibility in their agent’s reasoning while protected actions stay within explicit boundaries.

A convincing request is still just a request.Give a task temporary access. Not a permanent master key.Explore the control domain
I02↗

Human identity

Keep the authenticated human authorizer distinct from the client and executing agent.

See this capability in practice

Security and platform teams can explain who requested an operation, whose authority it used, what it was allowed to reach and why it was permitted or denied. Developers retain flexibility in their agent’s reasoning while protected actions stay within explicit boundaries.

A convincing request is still just a request.Your application status. Not someone else’s records.Explore the control domain
I03↗

Service accounts

Scope organization-owned identities for unattended workloads without permanent employee impersonation.

See this capability in practice

Security and platform teams can explain who requested an operation, whose authority it used, what it was allowed to reach and why it was permitted or denied. Developers retain flexibility in their agent’s reasoning while protected actions stay within explicit boundaries.

Give a task temporary access. Not a permanent master key.Offboard the employee. Don’t leave the agent’s access behind.Explore the control domain
I04↗

Roles and scopes

Limit operations and resources within the applicable tenant, project, application and environment.

See this capability in practice

Security and platform teams can explain who requested an operation, whose authority it used, what it was allowed to reach and why it was permitted or denied. Developers retain flexibility in their agent’s reasoning while protected actions stay within explicit boundaries.

A working environment should travel. Credentials should not.Read-only should be a permission. Not a request.Explore the control domain
I05↗

Policy engine

Evaluate shared, versioned rules using trusted inputs. Distinguish observation, warnings, approval and enforcement.

See this capability in practice

Security and platform teams can explain who requested an operation, whose authority it used, what it was allowed to reach and why it was permitted or denied. Developers retain flexibility in their agent’s reasoning while protected actions stay within explicit boundaries.

A convincing request is still just a request.Resolve the complaint. Control the refund.Explore the control domain
I06↗

Permissions and entitlements

Intersect policy, consent, delegated authority, resource permissions and plan eligibility.

See this capability in practice

Security and platform teams can explain who requested an operation, whose authority it used, what it was allowed to reach and why it was permitted or denied. Developers retain flexibility in their agent’s reasoning while protected actions stay within explicit boundaries.

Explore the control domain
I07↗

Credential vaults

Protect independently selected accounts and credentials, with scoped reauthorization and disconnection.

See this capability in practice

Security and platform teams can explain who requested an operation, whose authority it used, what it was allowed to reach and why it was permitted or denied. Developers retain flexibility in their agent’s reasoning while protected actions stay within explicit boundaries.

Rotate a credential with its consumers in view.Explore the control domain
I08↗

Delegation

Grant bounded, expiring task or child-agent authority without widening the parent’s scope.

See this capability in practice

Security and platform teams can explain who requested an operation, whose authority it used, what it was allowed to reach and why it was permitted or denied. Developers retain flexibility in their agent’s reasoning while protected actions stay within explicit boundaries.

A convincing request is still just a request.Give a task temporary access. Not a permanent master key.Explore the control domain
I09↗

Multi-tenant isolation

Preserve tenant and personal/business boundaries across reads, writes, sessions, caches and exports.

See this capability in practice

Security and platform teams can explain who requested an operation, whose authority it used, what it was allowed to reach and why it was permitted or denied. Developers retain flexibility in their agent’s reasoning while protected actions stay within explicit boundaries.

A working environment should travel. Credentials should not.Your application status. Not someone else’s records.Explore the control domain
I10↗

Compliance rules

Apply organization-defined requirements through supported controls. Rules alone do not establish certification.

See this capability in practice

Security and platform teams can explain who requested an operation, whose authority it used, what it was allowed to reach and why it was permitted or denied. Developers retain flexibility in their agent’s reasoning while protected actions stay within explicit boundaries.

Explore the control domain
E

Runtime Governance & Execution Control

Explore domain
E01↗

Action authorization

Check the exact actor, operation, target, connection and current authority before a protected effect.

See this capability in practice

A trace can show that a tool was called. Runtime governance addresses whether it may be called, under which current authority, against which resource, and how an uncertain result is resolved. A receipt makes that relationship inspectable; it is not just a green checkmark in a timeline.

Read-only should be a permission. Not a request.A convincing request is still just a request.Explore the control domain
E02↗

Approval workflows

Bind approvals to material inputs, resource, revision and expiry. Re-evaluate changed requests.

See this capability in practice

A trace can show that a tool was called. Runtime governance addresses whether it may be called, under which current authority, against which resource, and how an uncertain result is resolved. A receipt makes that relationship inspectable; it is not just a green checkmark in a timeline.

A convincing request is still just a request.Resolve the complaint. Control the refund.Explore the control domain
E03↗

Capability controls

Constrain eligible tools and actions, and enforce those constraints on direct invocation.

See this capability in practice

A trace can show that a tool was called. Runtime governance addresses whether it may be called, under which current authority, against which resource, and how an uncertain result is resolved. A receipt makes that relationship inspectable; it is not just a green checkmark in a timeline.

Read-only should be a permission. Not a request.A convincing request is still just a request.Explore the control domain
E04↗

Execution limits

Bound supported operations by concurrency, duration, size and rate at the actual execution point.

See this capability in practice

A trace can show that a tool was called. Runtime governance addresses whether it may be called, under which current authority, against which resource, and how an uncertain result is resolved. A receipt makes that relationship inspectable; it is not just a green checkmark in a timeline.

Keep your support agent focused on support.An unusual export should lead to a useful investigation.Explore the control domain
E05↗

Budgets and quotas

Track and constrain supported usage. Hard limits require enforceable reservations or provider controls.

See this capability in practice

A trace can show that a tool was called. Runtime governance addresses whether it may be called, under which current authority, against which resource, and how an uncertain result is resolved. A receipt makes that relationship inspectable; it is not just a green checkmark in a timeline.

Keep your support agent focused on support.A campaign approval is not a blank check.Explore the control domain
E06↗

Runtime policy enforcement

Apply shared decisions through qualified adapters, including revocation and queued-work rechecks.

See this capability in practice

A trace can show that a tool was called. Runtime governance addresses whether it may be called, under which current authority, against which resource, and how an uncertain result is resolved. A receipt makes that relationship inspectable; it is not just a green checkmark in a timeline.

Give a task temporary access. Not a permanent master key.Offboard the employee. Don’t leave the agent’s access behind.Explore the control domain
E07↗

Effect isolation

Bind effects to intended destinations and isolate owned execution resources from unrelated environments.

See this capability in practice

A trace can show that a tool was called. Runtime governance addresses whether it may be called, under which current authority, against which resource, and how an uncertain result is resolved. A receipt makes that relationship inspectable; it is not just a green checkmark in a timeline.

Read-only should be a permission. Not a request.A timed-out refund should not become two refunds.Explore the control domain
E08↗

Idempotency and safety

Preserve operation identity, reject material conflicts and avoid unsafe duplicate effects.

See this capability in practice

A trace can show that a tool was called. Runtime governance addresses whether it may be called, under which current authority, against which resource, and how an uncertain result is resolved. A receipt makes that relationship inspectable; it is not just a green checkmark in a timeline.

A timed-out refund should not become two refunds.Stop an unproductive loop from consuming the entire run budget.Explore the control domain
E09↗

Execution receipts

Retain scoped, attributable records of authority, relevant versions, execution state and bounded results.

See this capability in practice

A trace can show that a tool was called. Runtime governance addresses whether it may be called, under which current authority, against which resource, and how an uncertain result is resolved. A receipt makes that relationship inspectable; it is not just a green checkmark in a timeline.

Give a task temporary access. Not a permanent master key.Offboard the employee. Don’t leave the agent’s access behind.Explore the control domain
E10↗

Reconciliation

Resolve an uncertain outcome using the original effect identity before considering a retry or recovery.

See this capability in practice

A trace can show that a tool was called. Runtime governance addresses whether it may be called, under which current authority, against which resource, and how an uncertain result is resolved. A receipt makes that relationship inspectable; it is not just a green checkmark in a timeline.

Resolve the complaint. Control the refund.A timed-out refund should not become two refunds.Explore the control domain
O

Observability & Assurance

Explore domain
O01↗

Tracing and telemetry

Correlate requests, decisions, approvals, attempts, workflows and receipts with scoped telemetry.

See this capability in practice

Keep credentials out of logs and receipts. Capture only the information needed to explain the operation. Compare independently authorized connections and actual revisions to find a specific correction instead of resetting every client or collecting all private conversation content.

Keep your support agent focused on support.A timed-out refund should not become two refunds.Explore the control domain
O02↗

Audit logs

Inspect governed changes and actions through tenant-scoped history and declared retention.

See this capability in practice

Keep credentials out of logs and receipts. Capture only the information needed to explain the operation. Compare independently authorized connections and actual revisions to find a specific correction instead of resetting every client or collecting all private conversation content.

Your application status. Not someone else’s records.Don’t stop at “the agent did it.”Explore the control domain
O03↗

Evidence capture

Connect outcomes to source, release, permission basis and exercised enforcement boundaries.

See this capability in practice

Keep credentials out of logs and receipts. Capture only the information needed to explain the operation. Compare independently authorized connections and actual revisions to find a specific correction instead of resetting every client or collecting all private conversation content.

Review the update before it changes your agents’ permissions.Read-only should be a permission. Not a request.Explore the control domain
O04↗

Risk detection

Surface suspicious or unexpected patterns for review without turning risk scores into authority.

See this capability in practice

Keep credentials out of logs and receipts. Capture only the information needed to explain the operation. Compare independently authorized connections and actual revisions to find a specific correction instead of resetting every client or collecting all private conversation content.

Keep your support agent focused on support.An unusual export should lead to a useful investigation.Explore the control domain
O05↗

Forensics

Reconstruct source-to-decision-to-effect lineage while preserving original evidence and privacy.

See this capability in practice

Keep credentials out of logs and receipts. Capture only the information needed to explain the operation. Compare independently authorized connections and actual revisions to find a specific correction instead of resetting every client or collecting all private conversation content.

An unusual export should lead to a useful investigation.Don’t stop at “the agent did it.”Explore the control domain
O06↗

Replay and simulation

Inspect compatible history and simulate policy without repeating live external effects.

See this capability in practice

Keep credentials out of logs and receipts. Capture only the information needed to explain the operation. Compare independently authorized connections and actual revisions to find a specific correction instead of resetting every client or collecting all private conversation content.

Improve the policy without breaking every agent at once.Share the proven fix. Not the private conversation.Explore the control domain
O07↗

Verification

Read back actual state. A written configuration alone is not proof of synchronization.

See this capability in practice

Keep credentials out of logs and receipts. Capture only the information needed to explain the operation. Compare independently authorized connections and actual revisions to find a specific correction instead of resetting every client or collecting all private conversation content.

A working environment should travel. Credentials should not.Find the difference behind “it works on my other machine.”Explore the control domain
O08↗

Metrics and reporting

Measure setup, adoption, drift resolution, action outcomes and approval burden.

See this capability in practice

Keep credentials out of logs and receipts. Capture only the information needed to explain the operation. Compare independently authorized connections and actual revisions to find a specific correction instead of resetting every client or collecting all private conversation content.

Keep your support agent focused on support.Stop an unproductive loop from consuming the entire run budget.Explore the control domain
O09↗

Incident response

Link investigation, scoped suspension and evidence-led recovery to appropriate authority.

See this capability in practice

Keep credentials out of logs and receipts. Capture only the information needed to explain the operation. Compare independently authorized connections and actual revisions to find a specific correction instead of resetting every client or collecting all private conversation content.

An unusual export should lead to a useful investigation.Stop an unproductive loop from consuming the entire run budget.Explore the control domain
O10↗

Runtime health

Distinguish reachability, expiry, callable state, client freshness and observed runtime identity.

See this capability in practice

Keep credentials out of logs and receipts. Capture only the information needed to explain the operation. Compare independently authorized connections and actual revisions to find a specific correction instead of resetting every client or collecting all private conversation content.

Find the difference behind “it works on my other machine.”A green dashboard is only as useful as its evidence.Explore the control domain
L

Lifecycle & Change Management

Explore domain
L01↗

Agent registry

Track ownership, approved definitions, environment bindings and observed running state.

See this capability in practice

A team can test a skill against representative tasks, activate it for a selected group and verify the result before expanding. If a change introduces a problem, select a known approved revision while retaining what changed, who approved it and which consumers received it. Offboarding removes relevant authority, not independently authorized peers.

Offboard the employee. Don’t leave the agent’s access behind.Explore the control domain
L02↗

Versioning

Separate editable drafts from approved, immutable revisions and their active consumers.

See this capability in practice

A team can test a skill against representative tasks, activate it for a selected group and verify the result before expanding. If a change introduces a problem, select a known approved revision while retaining what changed, who approved it and which consumers received it. Offboarding removes relevant authority, not independently authorized peers.

Review the update before it changes your agents’ permissions.Improve the policy without breaking every agent at once.Explore the control domain
L03↗

Provisioning

Establish supported resources and bindings through explicit ownership and verified enrollment.

See this capability in practice

A team can test a skill against representative tasks, activate it for a selected group and verify the result before expanding. If a change introduces a problem, select a known approved revision while retaining what changed, who approved it and which consumers received it. Offboarding removes relevant authority, not independently authorized peers.

Explore the control domain
L04↗

Change management

Plan, review and activate changes with affected-consumer visibility and a rollback path.

See this capability in practice

A team can test a skill against representative tasks, activate it for a selected group and verify the result before expanding. If a change introduces a problem, select a known approved revision while retaining what changed, who approved it and which consumers received it. Offboarding removes relevant authority, not independently authorized peers.

Review the update before it changes your agents’ permissions.Find the difference behind “it works on my other machine.”Explore the control domain
L05↗

Reviews and approvals

Review governed releases and lifecycle transitions without granting blanket execution authority.

See this capability in practice

A team can test a skill against representative tasks, activate it for a selected group and verify the result before expanding. If a change introduces a problem, select a known approved revision while retaining what changed, who approved it and which consumers received it. Offboarding removes relevant authority, not independently authorized peers.

Review the update before it changes your agents’ permissions.Improve the policy without breaking every agent at once.Explore the control domain
L06↗

Rotation

Replace supported credentials and bindings deliberately, accounting for consumer impact.

See this capability in practice

A team can test a skill against representative tasks, activate it for a selected group and verify the result before expanding. If a change introduces a problem, select a known approved revision while retaining what changed, who approved it and which consumers received it. Offboarding removes relevant authority, not independently authorized peers.

Rotate a credential with its consumers in view.Explore the control domain
L07↗

Suspension

Pause intended governed use without deleting history or obscuring in-flight work.

See this capability in practice

A team can test a skill against representative tasks, activate it for a selected group and verify the result before expanding. If a change introduces a problem, select a known approved revision while retaining what changed, who approved it and which consumers received it. Offboarding removes relevant authority, not independently authorized peers.

Offboard the employee. Don’t leave the agent’s access behind.Contain the incident without shutting down the company.Explore the control domain
L08↗

Revocation

Remove relevant authority, account for queued work and preserve independently authorized peers.

See this capability in practice

A team can test a skill against representative tasks, activate it for a selected group and verify the result before expanding. If a change introduces a problem, select a known approved revision while retaining what changed, who approved it and which consumers received it. Offboarding removes relevant authority, not independently authorized peers.

Offboard the employee. Don’t leave the agent’s access behind.Yesterday’s approval is not today’s authority.Explore the control domain
L09↗

Deprecation

Identify affected consumers and supported replacements before retiring a version or integration.

See this capability in practice

A team can test a skill against representative tasks, activate it for a selected group and verify the result before expanding. If a change introduces a problem, select a known approved revision while retaining what changed, who approved it and which consumers received it. Offboarding removes relevant authority, not independently authorized peers.

Explore the control domain
L10↗

Retirement

Retire scoped resources while preserving required lineage and reconciling uncertain deletions.

See this capability in practice

A team can test a skill against representative tasks, activate it for a selected group and verify the result before expanding. If a change introduces a problem, select a known approved revision while retaining what changed, who approved it and which consumers received it. Offboarding removes relevant authority, not independently authorized peers.

Offboard the employee. Don’t leave the agent’s access behind.Contain the incident without shutting down the company.Explore the control domain
D

Data & Context Governance

Explore domain
D01↗

Knowledge bases

Connect selected sources and deliberately publish and bind approved knowledge revisions.

See this capability in practice

A support workflow’s useful lesson may be how to reconcile an uncertain refund—not the customer’s entire conversation or payment details. A reviewer can approve a reusable workflow improvement for the appropriate team without sharing unrelated source material. Context isolation and governed promotion make that distinction explicit.

Read the document. Don’t obey the document.Explain the policy. Don’t invent the policy.Explore the control domain
D02↗

Vector stores

Use scoped, derived retrieval indexes where needed. Stale or failed indexing cannot satisfy activation.

See this capability in practice

A support workflow’s useful lesson may be how to reconcile an uncertain refund—not the customer’s entire conversation or payment details. A reviewer can approve a reusable workflow improvement for the appropriate team without sharing unrelated source material. Context isolation and governed promotion make that distinction explicit.

Explore the control domain
D03↗

Data classification

Carry sensitivity, ownership and intended-consumer labels into access and handling decisions.

See this capability in practice

A support workflow’s useful lesson may be how to reconcile an uncertain refund—not the customer’s entire conversation or payment details. A reviewer can approve a reusable workflow improvement for the appropriate team without sharing unrelated source material. Context isolation and governed promotion make that distinction explicit.

Help with the appointment. Respect the patient-record boundary.Explore the control domain
D04↗

Context isolation

Keep retrieval and context within declared boundaries. Separate sessions where isolation requires it.

See this capability in practice

A support workflow’s useful lesson may be how to reconcile an uncertain refund—not the customer’s entire conversation or payment details. A reviewer can approve a reusable workflow improvement for the appropriate team without sharing unrelated source material. Context isolation and governed promotion make that distinction explicit.

Your application status. Not someone else’s records.Read the document. Don’t obey the document.Explore the control domain
D05↗

Redaction and PII protection

Apply qualified redaction and data-handling controls without claiming perfect detection.

See this capability in practice

A support workflow’s useful lesson may be how to reconcile an uncertain refund—not the customer’s entire conversation or payment details. A reviewer can approve a reusable workflow improvement for the appropriate team without sharing unrelated source material. Context isolation and governed promotion make that distinction explicit.

Help with the appointment. Respect the patient-record boundary.Explore the control domain
D06↗

Data-access policies

Check current grants, connection state, source permissions and release approval at retrieval boundaries.

See this capability in practice

A support workflow’s useful lesson may be how to reconcile an uncertain refund—not the customer’s entire conversation or payment details. A reviewer can approve a reusable workflow improvement for the appropriate team without sharing unrelated source material. Context isolation and governed promotion make that distinction explicit.

A convincing request is still just a request.Your application status. Not someone else’s records.Explore the control domain
D07↗

Retention and deletion

Apply defined retention to each data class and verify supported deletion outcomes.

See this capability in practice

A support workflow’s useful lesson may be how to reconcile an uncertain refund—not the customer’s entire conversation or payment details. A reviewer can approve a reusable workflow improvement for the appropriate team without sharing unrelated source material. Context isolation and governed promotion make that distinction explicit.

Don’t stop at “the agent did it.”Explore the control domain
D08↗

Provenance and lineage

Trace released or retrieved context to its source, revision and transformation history.

See this capability in practice

A support workflow’s useful lesson may be how to reconcile an uncertain refund—not the customer’s entire conversation or payment details. A reviewer can approve a reusable workflow improvement for the appropriate team without sharing unrelated source material. Context isolation and governed promotion make that distinction explicit.

Don’t stop at “the agent did it.”Read the document. Don’t obey the document.Explore the control domain
D09↗

Egress controls

Restrict supported outbound data paths and disclose what can actually be intercepted.

See this capability in practice

A support workflow’s useful lesson may be how to reconcile an uncertain refund—not the customer’s entire conversation or payment details. A reviewer can approve a reusable workflow improvement for the appropriate team without sharing unrelated source material. Context isolation and governed promotion make that distinction explicit.

A campaign approval is not a blank check.An unusual export should lead to a useful investigation.Explore the control domain
D10↗

Cross-agent knowledge sharing

Share reviewed knowledge through explicit grants, purpose, audience and revision.

See this capability in practice

A support workflow’s useful lesson may be how to reconcile an uncertain refund—not the customer’s entire conversation or payment details. A reviewer can approve a reusable workflow improvement for the appropriate team without sharing unrelated source material. Context isolation and governed promotion make that distinction explicit.

Share the proven fix. Not the private conversation.Explore the control domain
BUILD WITH INTENTION

Your next agent.
A better starting point.

EXPLORE DRIFTGATE

Find your starting point.

Search DriftGate

Quick jumps