Skip to content
Talk to Us

Blocks.ai publishes this comparison and sells in this market. Every claim about another product links to a public source.

Microsoft Agent 365 vs MuleSoft Agent Fabric

Microsoft Agent 365

Microsoft 365 control plane to discover, manage, govern, and secure AI agents

MuleSoft Agent Fabric

Control plane for agents, MCP servers, and APIs across platforms

Short answer

Both are control planes for agents from many platforms: Agent 365 is a Microsoft 365 service, and Agent Fabric also covers MCP servers and APIs.⁠Source 1, Source 2 Agent 365 is licensed per user, with agent identities in Entra; Agent Fabric enforces policy at a gateway in managed agents’ request paths, metered in Mule Credits.⁠Source 3, Source 4, Source 5, Source 6, Source 7

By Blocks.ai teamLast checked

Where each one sits

Six layers of running AI agents at a company, and what each product’s own public sources say it covers.

Public sources · checked 2 October 2026
  • Offered
  • Preview
  • Not included
  • Not publicly documented

Microsoft Agent 365

  • Build agents: Not includedUse your chosen framework⁠Source 8
  • Host and run agents: Not includedYou host your agent⁠Source 9
  • Identity and access: OfferedEntra Agent ID⁠Source 3
  • Registry and governance: OfferedAgent registry in admin center⁠Source 10
  • Traffic between agents, tools, and models: PreviewTooling Gateway for MCP servers⁠Source 11
  • Agents across organizations: Not publicly documented

MuleSoft Agent Fabric

  • Build agents: OfferedAgent brokers in Agent Script⁠Source 5
  • Host and run agents: OfferedAgent brokers on CloudHub 2.0⁠Source 5
  • Identity and access: OfferedOmni Gateway authentication and authorization⁠Source 5
  • Registry and governance: OfferedAgent Registry in Anypoint Exchange⁠Source 5
  • Traffic between agents, tools, and models: OfferedOmni Gateway in request path⁠Source 5
  • Agents across organizations: Not publicly documented

At a glance

TopicMicrosoft Agent 365MuleSoft Agent Fabric
Where agents are governedAdmins can manage agents through the Agent 365 registry in the Microsoft 365 admin center, Microsoft Entra, and Microsoft Purview.⁠Source 12Policy is enforced at Omni Gateway, in the request path of each managed agent, API, or MCP server.⁠Source 5 The gateway can be managed or self-managed.⁠Source 2
Agent identityAgent identities live in Microsoft Entra Agent ID, though the inventory also lists agents without one.⁠Source 3, Source 13For rogue-agent detection, agents are set up as service identities in your own identity provider.⁠Source 14 MuleSoft says user context is carried through the call chain.⁠Source 15
Orchestrates agentsMicrosoft says the Agent 365 SDK doesn’t build, host, deploy, orchestrate, or execute the agent.⁠Source 9Agent brokers, defined in Agent Script, orchestrate A2A-compliant agents and run on CloudHub 2.0 or Runtime Fabric.⁠Source 5, Source 16
Pricing modelLists at $15 per user per month, or in Microsoft 365 E7.⁠Source 4 Basic identity and inventory come with Microsoft Cloud subscriptions; enterprise customers need Microsoft 365 E5, or E3 with the Defender and Purview suites.⁠Source 4MuleSoft packages start at $2,000 a month, billed annually, with usage metered in Mule Credits.⁠Source 6 MuleSoft lists the Agent Fabric package with no price: contact sales.⁠Source 6
Generally availableSince 1 May 2026, for the Commercial segment.⁠Source 12Yes, MuleSoft says, with new capabilities each month.⁠Source 15 The first release note is dated 3 October 2025.⁠Source 16

What each one is

Microsoft Agent 365

Microsoft Agent 365 is a Microsoft 365 service that provides a centralized control plane to discover, manage, govern, and secure AI agents.⁠Source 1 Microsoft splits the work: Agent 365 inventories agents, and Microsoft Entra Agent ID handles identities, permissions, and protections.⁠Source 17

MuleSoft Agent Fabric

MuleSoft documents Agent Fabric as a control plane for agents, MCP servers, and APIs across platforms.⁠Source 2 Scanners and manual registration fill its registry, Omni Gateway enforces policy in each managed instance’s request path, and agent brokers orchestrate A2A-compliant agents.⁠Source 5, Source 16, Source 18

The differences that matter

  1. How agents get into the registry

    Microsoft Agent 365

    Agents published through Microsoft 365 channels with an Entra Agent ID appear automatically; registry sync from platforms such as Amazon Bedrock is in preview.⁠Source 19, Source 20

    MuleSoft Agent Fabric

    Scanners automatically register agents, APIs, and MCP servers they find on supported platforms; agents they don’t reach can be registered by hand.⁠Source 5, Source 15, Source 18

    An admin starts the Agent 365 registry sync manually, in preview; MuleSoft scanners run at most once a day.⁠Source 21, Source 22

  2. Policies on agents and tools

    Microsoft Agent 365

    Policy templates bundle Entra, Purview, SharePoint, and Defender policies for agents, and admins can control tenant-wide which tools agents can access.⁠Source 1, Source 23

    MuleSoft Agent Fabric

    Governance strategies set access, privacy, cost, and compliance rules for agents, APIs, and MCP servers in scope; Omni Gateway can limit which tools agents call.⁠Source 5

    Microsoft says premium capabilities may vary by agent type, platform, or level of integration; Agent Fabric needs Omni Gateway for managed instances and rogue-agent containment.⁠Source 2, Source 4

  3. Remote and partner agents

    Microsoft Agent 365

    A published agent can be added to a customer’s tenant through a multitenant Entra blueprint; managing agents across tenants you administer is in preview.⁠Source 3, Source 24

    MuleSoft Agent Fabric

    In agent networks, an egress Omni Gateway sits on outbound paths from brokers and agents to agents outside the network, enforcing policy and emitting telemetry.⁠Source 25

For security teams

What a security review asks, answered from each vendor’s public documentation.

TopicMicrosoft Agent 365MuleSoft Agent Fabric
Network exposureNotifications (preview) need an endpoint Agent 365 sends to.⁠Source 26 Agent 365’s private networking is not publicly documented.Omni Gateway sits in each managed instance’s request path; agent-network ingress gateways have a public endpoint, egress gateways none.⁠Source 5, Source 25
IdentityAgent identities are Entra service principals, managed with Conditional Access and consent; the inventory also lists agents without one.⁠Source 3, Source 13For rogue-agent detection, agents are set up as IdP service identities; an Omni Gateway policy supports Entra ID On-Behalf-Of.⁠Source 14, Source 27
Access changes and revocationBlock agents organization-wide (Copilot Chat only for SharePoint and Foundry agents), or disable an Entra blueprint’s agents in one operation.⁠Source 3, Source 28After review, quarantine stops a flagged agent from acting and blocks it at model proxies with the Kill Switch policy.⁠Source 14
Audit trailSupported agents’ activity shows in Defender, Purview, and the admin center; Purview’s agent audit logs need E7 or Agent 365.⁠Source 1, Source 8, Source 29Anypoint Platform audit logs are kept one year by default; Omni Gateway can keep a traffic audit trail.⁠Source 5, Source 30
ComplianceNot yet a Core Online Service; runs on SOC- and ISO-audited services.⁠Source 29 Microsoft announced FedRAMP High authorization is pending.⁠Source 1MuleSoft says Anypoint Platform meets ISO 27001, SOC 2, PCI DSS, and HIPAA.⁠Source 31 Agent Fabric’s own scope: not publicly documented.

Full comparison

18 criteria in five groups. Every cell links to its source, or says no public source answers it.

Microsoft Agent 365 and MuleSoft Agent Fabric compared on 18 criteria
Microsoft Agent 365MuleSoft Agent Fabric
What it is
What it is and who it’s forMicrosoft 365 service providing a centralized control plane to discover, manage, govern, and secure AI agents, aimed at IT and security leaders.⁠Source 1, Source 19Control plane for agents, MCP servers, and APIs across platforms.⁠Source 2 MuleSoft says it discovers, governs, orchestrates, and observes agents.⁠Source 32
MaturityGenerally available since 1 May 2026 for the Commercial segment.⁠Source 12 Registry sync and multi-tenant management are in preview.⁠Source 20, Source 24, Source 33MuleSoft says it is generally available, with new capabilities each month.⁠Source 15 Its first release note is dated 3 October 2025.⁠Source 16
Control
Agent registry and discoveryAn agent registry in the Microsoft 365 admin center lists Microsoft and non-Microsoft agents, including agents without an Entra agent identity.⁠Source 10, Source 13One inventory of agents, MCP servers, and APIs, whatever platform built them.⁠Source 5 Scanners fill it; agents can also be added by uploading an agent card.⁠Source 5, Source 18
Identity and access controlAgent identities live in Microsoft Entra Agent ID, managed with Conditional Access, permission grants, and consent.⁠Source 3 The inventory also lists agents without one.⁠Source 13Omni Gateway can require authentication and authorization and limit which tools and APIs an agent can call.⁠Source 5 User roles come from Anypoint access management.⁠Source 2
Ownership, policy, and revocationEntra agent identities need a sponsor.⁠Source 3 Admins can block agents (SharePoint and Foundry ones only in Copilot Chat), apply templates, and review ownerless agents.⁠Source 10, Source 23, Source 28Governance strategies set rules for in-scope agents, APIs, and MCP servers and can block or flag noncompliance.⁠Source 5 MuleSoft says scanners pull ownership metadata.⁠Source 15
Audit log and observabilitySupported agents’ activity shows in Defender, Purview, and the admin center.⁠Source 8, Source 29 Agent 365 keeps it 30 days; Purview’s agent audit logs need E7 or Agent 365.⁠Source 1, Source 29Omni Gateway can keep a traffic audit trail.⁠Source 5 Platform audit logs are kept a year by default; Integration Advanced or Titanium adds export to third-party tools.⁠Source 30
Connection
How agents connectThe SDK works with agents on Azure, AWS, Google Cloud, or on premises.⁠Source 8 Agent 365’s private networking is not publicly documented.Omni Gateway sits in the request path of each managed agent, API, or MCP server.⁠Source 5 An egress gateway carries agent networks’ calls to agents outside the network.⁠Source 25
Agents across organizationsA published agent can join a customer tenant via a multitenant blueprint.⁠Source 3 Microsoft’s separate Foundry and standard-harness Copilot Studio speak A2A.⁠Source 34, Source 35Egress gateways enforce policy on agent networks’ calls to agents outside the network.⁠Source 25
Protocol supportTenant-wide tool control; your own MCP servers in preview.⁠Source 1, Source 11 Microsoft documents A2A for its separate Foundry and standard-harness Copilot Studio, not Agent 365.⁠Source 34, Source 35Omni Gateway supports MCP and A2A, and A2A powers orchestration in agent networks.⁠Source 36, Source 37 MCP Bridge turns an existing API into an MCP server without custom code.⁠Source 5
Frameworks, models, and clouds supportedWorks with Microsoft and third-party agents.⁠Source 1 SDK docs name LangChain, CrewAI, LlamaIndex, and the OpenAI Agents SDK; agents keep their own host.⁠Source 9, Source 20MuleSoft calls it vendor agnostic and says scanners cover Amazon, Google, Microsoft, Databricks, and more.⁠Source 15, Source 32 Brokers orchestrate only A2A-compliant agents.⁠Source 5
Operations
Deployment options and data residencyA Microsoft 365 service that honors the EU Data Boundary and doesn’t currently support Advanced Data Residency.⁠Source 1, Source 29 Self-hosting it is not publicly documented.MuleSoft hosts regional Anypoint control planes.⁠Source 38 Omni Gateway can be self-managed.⁠Source 2, Source 39 A self-hosted Agent Fabric control plane isn’t publicly documented.
Compliance attestationsNot yet a Core Online Service; runs on SOC- and ISO-audited services.⁠Source 29 Microsoft announced FedRAMP High authorization is pending.⁠Source 1MuleSoft says Anypoint Platform meets ISO 27001, SOC 2, PCI DSS, HIPAA, and GDPR.⁠Source 31 An attestation naming Agent Fabric is not publicly documented.
Support and SLANo specific SLA for the Frontier preview program.⁠Source 40 An SLA or support plan specific to the generally available service is not publicly documented.MuleSoft’s Cloud Offerings SLA commits to 99.95% monthly for covered services, on subscriptions started by 1 May 2025.⁠Source 41 Anypoint plans include Premier Success.⁠Source 42
Time and effort to get runningEnterprise customers need Microsoft 365 E5, or E3 with Defender Suite and Purview Suite, and at least one user with an Agent 365 license.⁠Source 4, Source 12With product access, an admin turns Agent Fabric on.⁠Source 2 Agent networks need a Managed Omni Gateway; scanners need a connected cloud provider per source.⁠Source 2
Pricing model and public pricesPer user, not per agent: lists at $15 a month standalone, or in Microsoft 365 E7.⁠Source 4 Microsoft Cloud subscribers get foundational capabilities at no extra cost.⁠Source 4MuleSoft packages start at $2,000 a month, billed annually, with usage in Mule Credits.⁠Source 6 MuleSoft lists the Agent Fabric package with no price: contact sales.⁠Source 6
Building
Agent building toolsMicrosoft says the Agent 365 SDK isn’t an agent-building framework.⁠Source 8 For low-code building, its docs point to Microsoft’s separate Copilot Studio.⁠Source 43Agent networks are defined in YAML, brokers in Agent Script.⁠Source 5, Source 44 MuleSoft says Salesforce’s separate Agentforce is for building agents within Salesforce.⁠Source 15
Model accessMicrosoft says the SDK doesn’t call or select models; the agent keeps making its own model calls.⁠Source 8, Source 9Brokers support OpenAI, Azure OpenAI, Bedrock OpenAI, and Gemini models.⁠Source 44 Model Proxy is one access layer for several providers, with spend caps.⁠Source 5, Source 45
Integrations and ecosystemLaunched with preintegrated partner agents and agent factories.⁠Source 46 Work IQ MCP tools are in preview.⁠Source 47The catalog has curated MCP servers from the Official MCP Registry and Informatica.⁠Source 5 Policies can apply to Apigee, Kong Gateway, and Azure API Management APIs.⁠Source 48

Which to choose

Choose Microsoft Agent 365 if

  • You use Microsoft’s separate Copilot Studio or Microsoft Foundry, which Microsoft says can provide built-in Agent 365 integration for some scenarios.⁠Source 20, Source 49
  • You want agent identities in Microsoft Entra, under the same Conditional Access, consent, and lifecycle controls as the rest of your tenant.⁠Source 3
  • You want named accountability: each Entra agent identity needs a sponsor, and admins can block or delete agents without owners.⁠Source 3, Source 10
  • You’d rather license per user than per agent: one Agent 365 license covers all of a user’s agents.⁠Source 4

Choose MuleSoft Agent Fabric if

  • Your agents run on several platforms, and you want scanners that MuleSoft says cover Amazon, Google, Microsoft, and more.⁠Source 5, Source 32
  • You want rules for in-scope agents, MCP servers, and APIs, and a gateway enforcing policy in each managed instance’s request path.⁠Source 5
  • You want brokers to orchestrate A2A-compliant agents, and model spend capped per caller through a model proxy.⁠Source 5, Source 16
  • You already run MuleSoft’s Anypoint Platform: Agent Fabric uses Anypoint Platform access management and is turned on there.⁠Source 2

Questions buyers ask

How is each one priced?

Agent 365 lists at $15 per user per month standalone, or in Microsoft 365 E7; foundational capabilities come with Microsoft Cloud subscriptions.⁠Source 4 MuleSoft packages start at $2,000 a month, billed annually.⁠Source 6 MuleSoft lists the Agent Fabric package with no price: contact sales.⁠Source 6

Do they support MCP and A2A?

Agent 365 can control agents’ tool access; registering your own MCP servers is in preview.⁠Source 1, Source 11 Microsoft documents A2A for its separate Foundry and standard-harness Copilot Studio, not Agent 365 itself.⁠Source 34, Source 35 Agent Fabric’s Omni Gateway supports both; A2A powers orchestration in its agent networks.⁠Source 36, Source 37

How does each one handle Salesforce Agentforce agents?

Agent 365 registry sync, in preview, has a connection guide for Salesforce Agentforce; an admin starts the sync manually, and capabilities vary by platform.⁠Source 21 Agent Fabric’s A2A bridge supports Agentforce, so Agent Fabric can discover, govern, and orchestrate those agents.⁠Source 2, Source 52

Can either one be self-hosted?

Agent 365 is a Microsoft 365 service, and self-hosting it is not publicly documented.⁠Source 1 Agent Fabric’s Omni Gateway can be self-managed in a data center or on AKS, EKS, or GKE; a self-hosted Agent Fabric control plane isn’t publicly documented.⁠Source 39

How we compare

Read the full method

Every claim on this page links to a public source. Where none answers a question, the page says so.

We re-check every fact at least every 90 days. This page was last checked .

Something wrong or out of date? Tell us and we’ll correct it.

Sources

57 public sources, each with the date we checked it. Every one opens in a new tab.

  1. Source 1: Microsoft Agent 365 - Service Descriptions | Microsoft Learn Microsoft · checked Back:abcdefghijklm

  2. Source 2: Get Started with Agent Fabric Salesforce · checked Back:abcdefghijk

  3. Source 3: Agent 365 identity | Microsoft Learn Microsoft · checked Back:abcdefghijk

  4. Source 4: Licensing Documents Microsoft · checked Back:abcdefghi

  5. Source 5: Agent Fabric Overview Salesforce · checked Back:abcdefghijklmnopqrstuvwxyz27

  6. Source 6: MuleSoft Pricing | Plans From $2,000 a Month Salesforce · checked Back:abcdefg

  7. Source 7: Understand Mule Credits Usage and Rates Salesforce · checked Back to text

  8. Source 8: Agent 365 SDK frequently asked questions | Microsoft Learn Microsoft · checked Back:abcdef

  9. Source 9: Microsoft Agent 365 SDK overview | Microsoft Learn Microsoft · checked Back:abcd

  10. Source 10: Agent Registry in Microsoft 365 admin center - Microsoft 365 admin | Microsoft Learn Microsoft · checked Back:abcd

  11. Source 11: Bring your own (BYO) MCP server in Microsoft 365 admin center - Microsoft 365 admin | Microsoft Learn Microsoft · checked Back:abc

  12. Source 12: Microsoft Agent 365 overview | Microsoft Learn Microsoft · checked Back:abcd

  13. Source 13: Agent Registry convergence with Microsoft Agent 365 | Microsoft Learn Microsoft · checked Back:abcd

  14. Source 14: Detect and Contain Rogue Agents Salesforce · checked Back:abc

  15. Source 15: See Every Agent. Govern Every Agent. Control AI Costs. (mulesoft.com home page) Salesforce · checked Back:abcdefg

  16. Source 16: Agent Fabric Release Notes Salesforce · checked Back:abcde

  17. Source 17: Protect agent identities with Microsoft Entra | Microsoft Learn Microsoft · checked Back to text

  18. Source 18: Register Services Manually Salesforce · checked Back:abc

  19. Source 19: Microsoft Agent 365: The Control Plane for Agents Microsoft · checked Back:ab

  20. Source 20: Choose an Agent 365 Integration Option | Microsoft Learn Microsoft · checked Back:abcde

  21. Source 21: Connected platforms in Microsoft Agent 365 | Microsoft Learn Microsoft · checked Back:ab

  22. Source 22: Discovering and Cataloging External Services with Scanners Salesforce · checked Back to text

  23. Source 23: Policy templates | Microsoft Learn Microsoft · checked Back:ab

  24. Source 24: Manage agents across multiple tenants in the Microsoft 365 admin center - Microsoft 365 admin | Microsoft Learn Microsoft · checked Back:ab

  25. Source 25: Deploying Agent Network Ingress and Egress Managed Omni Gateways Salesforce · checked Back:abcd

  26. Source 26: Agent Messaging Endpoint | Microsoft Learn Microsoft · checked Back to text

  27. Source 27: OAuth 2.0 OBO Credential Injection Policy Salesforce · checked Back to text

  28. Source 28: Governance and Lifecycle actions for agents available in Microsoft 365 admin center - Microsoft 365 admin | Microsoft Learn Microsoft · checked Back:ab

  29. Source 29: Data handling, data residency, and compliance in Agent 365 observability | Microsoft Learn Microsoft · checked Back:abcdef

  30. Source 30: Audit Logging in Anypoint Platform Salesforce · checked Back:ab

  31. Source 31: Anypoint Platform Trust Center Salesforce · checked Back:ab

  32. Source 32: MuleSoft Agent Fabric | Agent Governance and Orchestration Salesforce · checked Back:abc

  33. Source 33: Microsoft Agent 365, now generally available, expands capabilities and integrations | Microsoft Security Blog Microsoft · checked Back to text

  34. Source 34: Connect to an agent over the Agent2Agent (A2A) protocol - Microsoft Copilot Studio | Microsoft Learn Microsoft · checked Back:abc

  35. Source 35: Connect to an A2A agent endpoint from Foundry Agent Service - Microsoft Foundry | Microsoft Learn Microsoft · checked Back:abc

  36. Source 36: Securing Agent Interactions with Omni Gateway Salesforce · checked Back:ab

  37. Source 37: Using A2A Protocol in Agent Networks Salesforce · checked Back:ab

  38. Source 38: Salesforce Hyperforce Overview Salesforce · checked Back to text

  39. Source 39: Requirements and Limits for Omni Gateway Salesforce · checked Back:ab

  40. Source 40: Preview Agent 365 features through the Frontier program | Microsoft Learn Microsoft · checked Back to text

  41. Source 41: MuleSoft Cloud Offerings Service Level Agreement (SLA) for subscriptions with an Order Start Date on or before May 1, 2025 Salesforce · checked Back to text

  42. Source 42: MuleSoft Subscription Plans - effective for Customer purchases made from Salesforce on or after June 27, 2025 Salesforce · checked Back to text

  43. Source 43: Get started with Microsoft Agent 365 | Microsoft Learn Microsoft · checked Back to text

  44. Source 44: Building Agent Networks for Agent Fabric Salesforce · checked Back:ab

  45. Source 45: Creating and Managing Model Proxies Salesforce · checked Back to text

  46. Source 46: Ecosystem partner agents available in Agent 365 | Microsoft Learn Microsoft · checked Back to text

  47. Source 47: Connect existing agents to Microsoft Agent 365 | Microsoft Learn Microsoft · checked Back to text

  48. Source 48: Enhanced MuleSoft Experience Overview Salesforce · checked Back to text

  49. Source 49: What is Microsoft Foundry? - Microsoft Foundry | Microsoft Learn Microsoft · checked Back to text

  50. Source 50: Adding a Scanner for Microsoft Azure Copilot Salesforce · checked Back to text

  51. Source 51: Make an Agent A2A-Compliant Salesforce · checked Back to text

  52. Source 52: Enhanced MuleSoft Experience Release Notes Salesforce · checked Back to text

  53. Source 53: Your company's private network Blocks.ai · checked Back to text

  54. Source 54: Network requirements Blocks.ai · checked Back to text

  55. Source 55: Solutions: Agent sprawl Blocks.ai · checked Back to text

  56. Source 56: Solutions: Partner networks Blocks.ai · checked Back to text

  57. Source 57: Pricing Blocks.ai · checked Back to text