← All Insights
5 min read

Almost all of the agentic conversation is about the agent. Which model, which framework, which clever loop of reasoning and tool calls. Very little of it is about the boring question that decides whether any of it is safe to run: when the agent reaches out and does something to another system, who governed that? This is a call on where the answer lands, and it is a call, not a certainty. I think the platforms that already sit between your systems are the ones best placed to win it.

Here is the reasoning, and where I would happily be proven wrong.

APIs were easy. Agents are not.

The API economy got comfortable with point-to-point integration because an API is binary. You call it, it returns, the contract is fixed, and either the call is allowed or it is not. There is nothing to interpret. Agentic work is the opposite. It runs on inference, it takes multiple steps, it can loop, and it decides at runtime what to do next. It does not live in the binary. It lives in the grey.

And the grey is governed by the process the agent exists to support, not by the agent. That is the part the noise skips over. A model that is usually right is fine when it is reading, finding, or drafting. The moment it acts on a real system, usually is not a standard anyone should accept, and the thing that decides what the agent is allowed to actually do is a governing layer sitting outside the model. We made the wider version of that argument in the AI conversation is backwards: process and governance first, agents second.

"APIs are binary. Agentic lives in the grey, and the grey is governed by the process, not the agent."

The category that already owns the wiring

Now look at where the connective tissue between systems already lives. Integration platforms like Workato and n8n exist for one reason: to govern and control how systems talk to each other. They are the plumbing between applications, overlaid with process definition and monitoring. Strip away the branding and that is a process layer with a map of every system, every credential, and every hop already in it. AI is not a departure for that category. It is just the new frontier it is being pointed at.

So when people ask what should orchestrate agents, the honest answer is that the thing best positioned already exists, and it was not built for AI at all. It was built to make integrations trustworthy. That lineage is the whole advantage. An agent orchestrator has to know what connects to what, what each action costs, what is allowed, and what happened afterwards. That is not a new problem. It is the API-governance problem wearing a different hat.

Being well positioned is not the same as having won

Here is the honest catch, and it is a real one. Today these platforms are plumbing, not governance. They are very good at moving work between systems and monitoring that it ran. They are not yet the layer that underwrites trust, lineage, and policy for an agent the way they did for an API. Nobody in the category has solved agentic governance properly. It is the unclaimed prize sitting in plain sight of the companies best placed to claim it.

Whoever builds that layer first wins, because the buyer of consequential agentic work is going to ask the same question they always ask about a system that acts on their behalf: can you show me what it did, why, and under whose authority? The platform that answers that natively is the one that gets to run agents in a bank, a regulator, or an insurer. My bet is that it comes from the integration category, because the map and the control plane are already theirs. But I would not stake the business on which logo it is. A model vendor could build outward into governance; a hyperscaler could bolt it on. Time will tell, and I would genuinely like to see the category itself get there first.

The one place it will not come from

There is one answer I am confident is wrong: the agent does not belong inside the app it happens to be talking to. The CRM that offers to orchestrate your agents, the ERP that adds an assistant, the point tool with a copilot bolted on. Each one governs only its own patch and pulls the process toward its own centre of gravity, and you end up with agentic work governed in fragments by vendors who each see one corner of it. Governance that only covers one system is not governance. The orchestration layer has to sit above the applications, hold the whole process, and answer for all of it. On that much I am not hedging.

What to do before you pick a platform

Triage before tooling. Before you shortlist an orchestrator, name the process the agent is there to serve, and find the point where the probabilistic work hands off to a decision that has to hold. That handoff is the thing an orchestrator has to govern, and if you cannot describe it, no platform will save you. We map where it sits in the Decision Pyramid, and why finding an answer is not the same as being able to stand behind it in AI is brilliant at finding an answer. The deterministic layer that governs the outcome is the same discipline we describe in Process and Decision Automation, and where the probabilistic work belongs is Artificial Intelligence.

Pick the process first. The orchestration platform is the easier decision once you know what it has to govern.

Frequently asked questions

What is agent orchestration?

Agent orchestration is the layer that coordinates what an AI agent is allowed to do across the systems it touches: which actions it can take, in what order, under what policy, and with what record of what happened. Unlike a single API call, agentic work is multi-step and decided at runtime, so it needs a governing layer that sits above the individual applications rather than inside any one of them.

Why is iPaaS well positioned for agentic AI?

Integration platforms such as Workato and n8n already exist to govern and control how systems talk to each other. They hold the map of what connects to what, the credentials, and the monitoring, which is exactly the control plane agent orchestration requires. Their lineage is API governance, and agentic orchestration is the same problem in a harder form, so the category is well placed by design rather than by luck. The caveat is that today they are still plumbing, not governance platforms; the platform that closes that gap first is the one to watch.

Do I need an agent, or is an API enough?

Often a robust API is enough. If the task is a fixed, binary exchange, a well-defined API is simpler, cheaper, and easier to govern than an agent. Agentic work earns its place when the task genuinely needs inference across multiple steps that cannot be specified in advance. The test is whether the work lives in the grey; if it does not, adding an agent adds risk without adding value.

Should agentic governance sit inside the application or above it?

Above it. When each application governs only its own agent, agentic work ends up governed in fragments, with no single view of what happened across the process. Governance that covers one system is not governance. The orchestration layer has to sit above the applications, hold the whole process, and be able to account for every action the agent took and the authority under which it took it.

Related reading: The AI conversation is backwards
Read next
The Decision Pyramid
Where the probabilistic work hands off to the decision that has to hold, and why that handoff is the thing an orchestrator has to govern.
Read the Decision Pyramid →
Process first, agents second. Agentic work lives in the grey, and the grey is governed by the process it serves. We name the process and the point where synthesis hands off to a decision before anyone picks an orchestration platform.
Governance is the unclaimed prize. The layer that underwrites trust, lineage, and policy for agents the way it did for APIs is what turns an impressive demo into something a regulated business can run.