Can we skip the gateway and call the model from the agent?

You can. You will not be able to prove who spent the tokens or which policy applied. We will not sign that as production.

Is Flex Gateway the same as Agent Fabric?

No. Flex Gateway is the edge. Agent Fabric is the control plane that inventories agents, MCP, and policies. You usually want both.

MuleSoft

Every tool call gets a front door.

The first week is in the org, reading what already exists. Flex Gateway is where identity, policy, and traces live. Agents do not get a shared key. The honest no: if the work is a software factory with a named delivery date, we are the wrong partner.

Send the brief

Jobs

What the gateway is for.

Identity

The user authenticates once. Every hop exchanges.

01
User authenticates
The identity provider issues the first token. The channel is Slack, a portal, or Salesforce.
02
Gateway exchanges
OAuth on-behalf-of credential injection. The next audience is narrower than the last.
03
Broker and agents
The broker routes. Downstream agents and MCP servers see a user, not a shared service account.
04
Trace
Which identity, which policy, which tool. That is observability, not a log dump.

Trusted agent identity: the user signs in. Each Flex Gateway hop exchanges for a narrower token scoped to the next audience. The agent does not run as a god-mode connected app unless you choose that, and we will say when that is a demo.

Mermaid source

flowchart LR
  U[User] --> C[Channel]
  C --> G1[Flex Gateway]
  G1 --> B[Broker]
  B --> G2[Flex Gateway]
  G2 --> A[Agent]
  G2 --> M[MCP]
  U -. authenticates .-> I[Identity provider]
  I -. OBO token .-> G1
  I -. OBO token .-> G2

MCP

Catalog, entitle, then serve.

The gateway is the front door for tools. Listing a server is not permission.

Questions

What we actually say.

Can we skip the gateway and call the model from the agent?: You can. You will not be able to prove who spent the tokens or which policy applied. We will not sign that as production.
Is Flex Gateway the same as Agent Fabric?: No. Flex Gateway is the edge. Agent Fabric is the control plane that inventories agents, MCP, and policies. You usually want both.

Doors that belong next.

The brief

Show us what the agent can call today.

We will mark the hops with no identity, and the ones that should not exist.

flowchart LR U[User] --> C[Channel] C --> G1[Flex Gateway] G1 --> B[Broker] B --> G2[Flex Gateway] G2 --> A[Agent] G2 --> M[MCP] U -. authenticates .-> I[Identity provider] I -. OBO token .-> G1 I -. OBO token .-> G2