2026-05-04

Microsoft Agent 365 GA + Agent Framework 1.0 — enterprise agent control plane is live

Agent 365 GA at $15/user: per-agent Entra IDs, Defender MCP blocking. Agent Framework 1.0 is the open-source multi-agent baseline with A2A and MCP interop.

Microsoft shipped two significant agent infrastructure pieces this week. Agent 365 (GA since May 1, $15/user/month) gives every AI agent its own Entra identity, integrates with Purview for data classification on agent outputs, and adds Defender runtime blocking for MCP abuse attempts. The May update adds cross-cloud registry sync for AWS and Google Cloud agents, plus real-time MCP server threat detection.

Agent Framework 1.0 (open-source, .NET + Python, GA’d April 3) is the underlying multi-agent orchestration layer. It ships with A2A (Agent-to-Agent) and MCP interop baked in, and is now the Microsoft-blessed production baseline for building orchestrated agent systems on Azure.

Practitioner note

For enterprise teams on Azure, Agent Framework 1.0 is the correct foundation — stop rolling custom orchestration. The Defender MCP threat detection layer is worth evaluating independently even if you don’t run Agent 365: it’s the first production-grade runtime security layer for MCP pipelines and the threat model applies across vendors. The $15/user price point puts this in the same conversation as GitHub Copilot Enterprise — expect bundling pressure from Microsoft sales shortly.

Sources

• Microsoft Agent 365 GA — Microsoft Security Blog ↗
• Microsoft Agent Framework 1.0 — devblog ↗
• Agent 365 May 2026 update ↗

Tags