Can the broker skip the gateway?

You can. You will not be able to prove who called what. We will not sign that as production.

What if the broker flags a memory fetch as an attack?

Tighten the cards and the policy. Memory is not prompt injection. If the platform cannot tell, that is a finding.

Can the broker route to a non-Salesforce agent?

Yes. A code agent is a peer with declared skills, reached over A2A through the gateway. The broker decides the hop; it does not care which runtime answers.

Agent Broker

Not every hop is a model call.

The broker picks a path. Deterministic when the work is known. A model when it is not. Traces on both.

Get the written assessment Observability

Founded 2022 · Founder in the Salesforce MVP Hall of Fame · Dubai HQ · Kochi studio

Three modes

Automation. Guided. Agentic.

We will not put a model on a hop that a router already owns.

01
Automation
Known path · No model · Idempotent
02
Guided
A rule · A person · A deterministic router
03
Agentic
A model call · A capability card · A policy at the gateway
04
Observe
Trace the hop · Identity on the trail · Cost on the same trail

Public reference for Agent Broker. Automation is a known path. Guided keeps a person or a rule in the loop. Agentic is a model call with a card and a policy. Observe sits across all three.

Mermaid source

flowchart TD
  A["Request"] --> B["Broker"]
  B --> C["Automation: known path"]
  B --> D["Guided: rule or human"]
  B --> E["Agentic: model with a card"]
  C --> F["Observe: traces"]
  D --> F
  E --> F

Who this is for

One desk, three kinds of hop.

A broker routes each step to the cheapest mode that is still right.

Example
Claims lead at a Dubai motor insurer
Today: Every claim went through a model, even the ones with a complete police report.
After: Complete claims take the known path with no model; only incomplete ones reach the agent.
Example
HR operations manager at a Riyadh hospital group
Today: Leave requests were sent to an agent that kept asking the same questions.
After: A rule handles standard leave; the agent only sees the exceptions, and a person approves those.
Example
Order desk supervisor at a Chicago food distributor
Today: Agent costs grew with order volume.
After: Repeat orders route as automation; the agent handles substitutions only.

Examples of the work, not case studies. Roles and cities are typical of the desks we see.

Lifecycle

Design. Publish. Deploy. Observe.

Design
Name the skill
The inputs, and the hop that must not be a model.
Publish
Register it
The registry can see it. Discovery is still not permission.
Deploy
Put it on the gateway
Identity and policy are on the hop.
Observe
Trace every hop
Gateway to broker to agent to tool. A dark hop is not in production.

Questions

What we actually say.

Can the broker skip the gateway?: You can. You will not be able to prove who called what. We will not sign that as production.
What if the broker flags a memory fetch as an attack?: Tighten the cards and the policy. Memory is not prompt injection. If the platform cannot tell, that is a finding.
Can the broker route to a non-Salesforce agent?: Yes. A code agent is a peer with declared skills, reached over A2A through the gateway. The broker decides the hop; it does not care which runtime answers.

The brief · one email

Name the hops that are still a model.

We will mark which ones a router should own. The assessment is free: a short read of the org and a written note. If you go ahead, the first build week is a fixed AED/SAR 14,900 (about USD 4,050), credited in full when you sign the build within 60 days. The honest no: if the work is a software factory with a named delivery date, we are the wrong partner.