# agenticorg [Health: Active]

**Category:** 💻 Developer Tools  
**Repository:** https://github.com/mishrasanjeev/agentic-org  
**GitHub Stars:** 11  
**Views:** 0  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/agenticorg

## Description
Run 25+ enterprise AI agents and 269 tools with human-in-the-loop governance

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "agenticorg": {
    "command": "npx",
    "args": ["-y","agenticorg-mcp-server"]
  }
}
```

## Documentation & README

# AgenticOrg

AgenticOrg is an Apache-2.0 enterprise AI agent platform for building, running, and governing agent workflows across finance, HR, marketing, operations, back office, communications, and bounded agentic-commerce use cases.

> **Ownership:** AgenticOrg is owned by **Orchestrum Technologies LLP**.
>
> **Inventor / Owner:** **Sanjeev Kumar**
>
> **Contact:** [sanjeev@orchestrum.in](mailto:sanjeev@orchestrum.in) | [mishra.sanjeev@gmail.com](mailto:mishra.sanjeev@gmail.com)
>
> See the canonical [ownership and contact statement](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/OWNERSHIP.md) and [NOTICE](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/NOTICE).

[Website](https://agenticorg.ai) | [Application](https://app.agenticorg.ai) | [Playground](https://agenticorg.ai/playground) | [Documentation](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/README.md) | [Current product status](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/PRODUCT_STATUS.md) | [Security policy](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/SECURITY.md)

![Python 3.12+](https://img.shields.io/badge/Python-3.12%2B-3776AB)
![React 19](https://img.shields.io/badge/React-19-149ECA)
![License: Apache 2.0](https://img.shields.io/badge/License-Apache--2.0-blue)

## Source of truth

Live product totals and the deployed product version are published by the public [product facts endpoint](https://app.agenticorg.ai/api/v1/product-facts):

    GET https://app.agenticorg.ai/api/v1/product-facts

The response contains version, agent_count, connector_count, and tool_count. Do not copy those values into documentation, page copy, or tests: they are computed from runtime registries and can change independently of a documentation release. The version declared for source builds is in [pyproject.toml](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/pyproject.toml).

Billing limits and list prices come from [core/billing/catalog.py](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/core/billing/catalog.py). Production deployment behavior comes from [scripts/deploy_cloud_run.sh](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/scripts/deploy_cloud_run.sh).

## Current release at a glance

The production platform currently includes governed agent/workflow execution,
document ingestion with scanned-document OCR, signed Twilio voice with
provider-managed STT/TTS, tenant-scoped browser RPA, Python and TypeScript SDKs,
MCP/A2A surfaces, and the bounded Shopify-to-OACP commerce runtime. See the
[current product status](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/PRODUCT_STATUS.md) for the exact shipped,
configuration-dependent, and not-shipped boundaries.

External actions remain explicit. A voice provider, connector, browser script,
buyer channel, payment rail, merchant system, or POS path is usable only when
the target tenant has the required credentials, scopes, configuration, and
provider approval.

Voice, email, OCR, and browser RPA can be exercised together before release
with the Docker-backed [local multichannel simulation](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/local-multichannel-simulation.md).
It uses fresh PostgreSQL, local Mailpit delivery, real Tesseract, and optional
real Playwright Chromium while keeping paid calls and production mutations off.

## What is in this repository

| Area | Current implementation |
| --- | --- |
| Agent runtime | FastAPI and LangGraph runtime with model routing, tool invocation, confidence handling, retry policy, and persisted execution state |
| Agent authoring | Built-in agent definitions, custom agents, prompt templates, organization hierarchy, and a no-code UI |
| Workflows | Workflow definitions, runs, schedules, conditions, approvals, and audit events |
| Governance | Tenant and role boundaries, scoped tools, human-in-the-loop queues, shadow evaluation, policy checks, and kill-switch patterns |
| Integrations | Native connector registry plus optional integration gateways; actual availability depends on credentials, scopes, provider access, and tenant configuration |
| Knowledge and channels | Native and OCR document ingestion/search, reports, notifications, signed Twilio voice calls, RPA, and other configured channels |
| Developer access | REST API, Python SDK and CLI, TypeScript SDK, MCP server, and A2A discovery/task surfaces |
| Commerce | Merchant-scoped Shopify read-only sync, OACP artifact intake/cache, buyer-safe answers, public catalog surfaces, and prepared provider or POS handoffs |
| Operations | PostgreSQL, Redis, object storage, observability hooks, migrations, security checks, and Cloud Run deployment tooling |

A source definition is not evidence that a specific tenant has connected the provider or enabled write access. Connector actions still require approved credentials, scopes, policies, and provider availability.

## Capability status

### Implemented in the platform

- Agent definitions and tenant-created agents
- Agent and workflow execution through authenticated APIs
- Human approval queues and configurable escalation conditions
- Audit records for governed runtime activity
- Prompt templates, organization structure, and role-aware application views
- Native connector definitions and a scoped tool gateway
- Public A2A and MCP discovery with authenticated execution paths
- Python and TypeScript client packages plus an MCP server package
- Hosted billing limits and checkout integration
- OACP commerce configuration, Shopify read-only sync, artifact caching, buyer channels, and safe handoff preparation

### Configuration-dependent or provider-gated

- LLM calls require a configured supported model provider or a local model runtime.
- Each connector requires provider credentials, tenant authorization, and the relevant scopes.
- Composio is an optional integration gateway; its catalog is not the same as the native connector registry.
- Document OCR ships with Tesseract, Poppler, and LibreOffice in the production image. See [Knowledge ingestion](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/knowledge-ingestion.md).
- The production voice path uses signed Twilio webhooks with provider-managed STT/TTS and encrypted transcript storage. See [Voice runtime](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/voice-runtime.md).
- Browser automation includes tenant-scoped scripts, schedules, durable history,
  and approved-domain egress controls. A run remains an explicit external
  action. See [RPA runtime](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/rpa-runtime.md).
- Outbound notifications and local-model profiles require their supporting services.
- SSO, SCIM, enterprise support, and custom SLAs depend on plan and deployment configuration.
- WhatsApp, Telegram, payment-provider, bank, POS, and merchant-system flows require provider setup and verified callbacks or adapters.
- WooCommerce, ERP, PIM, OMS, WMS, custom commerce APIs, and additional payment rails can be recorded as adapter-ready configuration but are not represented as active execution paths until an approved adapter exists.

### Explicit non-goals and boundaries

- OACP artifacts do not create orders, reserve inventory, create mandates, capture payments, issue refunds, or prove a paid state.
- AgenticOrg does not replace the merchant, bank, payment provider, POS, or SaaS system as its source of record.
- Cached commerce evidence can support an answer or a prepared handoff; provider-owned execution must be confirmed by the provider.
- A connector listed in source is not proof of a live customer integration.
- Example workflows and editorial content are not performance guarantees.
- Security controls in the repository are not a claim of third-party certification.

## How the runtime fits together

    Browser or SDK
        |
        v
    React 19 application / FastAPI API
        |
        +-- Authentication, tenant context, roles, and scopes
        +-- Agent registry and LangGraph execution
        +-- Workflow engine, schedules, and approval queues
        +-- Tool gateway and connector adapters
        +-- Audit, evaluation, observability, and cost records
        |
        +-- PostgreSQL / Cloud SQL
        +-- Redis
        +-- GCS or compatible object storage
        +-- Configured LLM and external service providers

The managed production path runs separate API and UI services on Google Cloud Run. Artifact Registry images are commit-pinned, migrations can run before rollout, and traffic movement is explicit. Legacy Kubernetes material is not the current production path.

## OACP commerce boundary

AgenticOrg owns the buyer and seller agent runtime around OACP-backed commerce. [Grantex](https://grantex.dev) owns trust authority, protocol and policy governance, canonical artifacts, artifact verification, and adapter authority. Shopify and merchant systems remain operational sources of record. Pine Labs Plural/P3P, banks, POS systems, and payment providers own their execution rails.

The current supported source path is:

1. A merchant saves tenant-, merchant-, store-, and seller-agent-scoped configuration.
2. AgenticOrg stores Shopify credentials through the approved custody path.
3. AgenticOrg performs read-only Shopify Admin GraphQL sync.
4. Public-safe evidence is submitted to the configured Grantex authority path.
5. Issued OACP artifacts are cached with freshness, scope, risk, and revocation posture.
6. Buyer surfaces answer from valid artifacts and disclose source and freshness.
7. Purchase intent becomes a non-executing provider, merchant, or POS handoff, or a fail-closed blocker.
8. Only a verified provider or merchant callback can confirm the external outcome.

Start with [docs/oacp/README.md](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/oacp/README.md) and the [runtime launch closure PRD](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/oacp/runtime-launch-closure-prd.md).

## Requirements

- Python 3.12 or newer
- Node.js 20 or newer
- Docker with Docker Compose for local PostgreSQL and Redis
- At least one supported LLM provider key, or a configured local model runtime, for model-backed execution

The UI currently uses React 19. Dependency versions are declared in [pyproject.toml](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/pyproject.toml) and [ui/package.json](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/ui/package.json).

## Local development

Clone and configure the repository:

    git clone https://github.com/mishrasanjeev/agentic-org.git
    cd agentic-org
    cp .env.example .env

Install the platform and development extras:

    python -m venv .venv
    python -m pip install -e ".[v4,dev]"

Start local dependencies:

    docker compose up -d postgres redis minio

Run migrations and the API:

    python scripts/alembic_migrate.py
    uvicorn api.main:app --host 0.0.0.0 --port 8000 --reload

In another terminal, install and run the UI:

    cd ui
    npm ci
    npm run dev

Do not use example secrets in staging or production. Configure real secrets through the approved secret-management path.

Optional Compose profiles include local CPU/GPU model runtimes and supporting RAG or voice services. Review [docker-compose.yml](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docker-compose.yml) before enabling a profile because hardware, images, and credentials vary by feature.

## Public API and protocols

All application API routes are mounted below /api/v1.

| Surface | Purpose | Authentication posture |
| --- | --- | --- |
| GET /api/v1/health | Service health | Public |
| GET /api/v1/product-facts | Live version and registry totals | Public |
| GET /api/v1/a2a/agent-card | A2A discovery card | Public |
| GET /api/v1/a2a/.well-known/agent.json | A2A discovery alias | Public |
| GET /api/v1/mcp/tools | MCP-compatible agent discovery | Public |
| Agent, workflow, tool, billing, and commerce mutations | Tenant operations | Authenticated and scoped |

Interactive OpenAPI documentation is available from the API service when enabled by the deployment. The detailed route inventory is maintained in [docs/route_inventory.json](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/route_inventory.json), and narrative API documentation is in [docs/api-reference.md](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/api-reference.md).

### Python SDK and CLI

See [sdk/README.md](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/sdk/README.md).

    pip install agenticorg
    agenticorg agents list
    agenticorg a2a card

SDK `0.4.0` covers agents, workflows, connector diagnostics, knowledge/OCR,
voice, RPA, local bridges, and the seller-commerce runtime. External-action
methods such as outbound calls, RPA runs, connector sync, and bridge routing
remain explicit calls and still require tenant authorization. Server features
may require a newer deployment than the installed client, so consumers should
check package and server release notes.

### TypeScript SDK

See [sdk-ts/README.md](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/sdk-ts/README.md).

    npm install agenticorg-sdk

The TypeScript `0.4.0` resource surface mirrors the Python runtime coverage,
including knowledge/OCR, voice, RPA, bridges, and commerce preparation APIs.

### MCP server

See [mcp-server/README.md](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/mcp-server/README.md).

    npx agenticorg-mcp-server

The MCP package exposes governed AgenticOrg agent and commerce discovery surfaces. It does not grant an MCP client unrestricted access to every connector action.

## Pricing and limits

The hosted plan source of truth is the typed `PUBLIC_PLAN_CATALOG` in [core/billing/catalog.py](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/core/billing/catalog.py). A compatibility view in `core/billing/limits.py` is derived from that catalog.

| Plan | USD list price | INR list price | Agents | Runs | Storage |
| --- | ---: | ---: | ---: | ---: | ---: |
| <!-- claim-id: BILLING-CATALOG-PUBLIC-PLANS --> Free | $0/month | INR 0/month | 3 | 1,000/month | 1 GB |
| <!-- claim-id: BILLING-CATALOG-PUBLIC-PLANS --> Pro | $2/month | INR 9,999/month | 15 | 10,000/month | 50 GB |
| <!-- claim-id: BILLING-CATALOG-PUBLIC-PLANS --> Enterprise | $499/month | INR 49,999/month | Unlimited | Unlimited | Unlimited |

The repository is Apache-2.0 licensed. Infrastructure, model-provider, external API, payment-provider, and support costs are separate from the software license.

## Security and governance

The codebase includes:

- Tenant, role, and scope checks around protected API operations
- Configurable human approvals and confidence or policy gates
- Scoped connector tools and a centralized tool gateway
- Secret-reference patterns for connector and cloud credentials
- Configurable PII redaction before model calls and in logs
- JWT verification through PyJWT with cryptographic support
- Rate limiting, security headers, and authentication-state controls
- Dependency, static-analysis, container, and regression security checks
- Audit and observability records for governed operations
- Fail-closed OACP freshness, revocation, and provider-boundary checks

Production security depends on correct deployment configuration, key custody, provider settings, tenant policies, and operational monitoring. Report vulnerabilities through [SECURITY.md](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/SECURITY.md); do not open a public issue for a suspected vulnerability.

## Testing

Backend:

    pytest

Focused backend checks can be run by directory or file:

    pytest tests/unit
    pytest tests/regression
    pytest tests/connector_harness

Frontend:

    cd ui
    npm ci
    npm run lint
    npm run typecheck
    npm test
    npm run build

Browser tests:

    cd ui
    npx playwright test

Playwright suites require the target application and any documented test credentials or fixtures. CI workflow files under [.github/workflows](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/.github/workflows) are the source of truth for which suites run on each event; the README does not claim that every E2E suite runs on every push.

## Production deployment

The current managed rollout helper targets Google Cloud Run:

    bash scripts/deploy_cloud_run.sh --sha <commit-sha> --yes

Useful modes include:

    bash scripts/deploy_cloud_run.sh --sha <commit-sha> --skip-build --with-migrations --yes
    bash scripts/deploy_cloud_run.sh --sha <commit-sha> --skip-build --traffic preserve --yes
    bash scripts/deploy_cloud_run.sh --sha <commit-sha> --dry-run

The helper stages revision-specific images, verifies image and commit metadata, supports migration-first deployment, probes health, and moves traffic according to the selected mode. Read the script help and [docs/deployment.md](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/deployment.md) before using production credentials.

Default script configuration places Cloud Run services in asia-southeast1 and Artifact Registry in asia-south1. Both are configurable. Older Kubernetes material is retained only for historical or alternative deployment context.

## Repository map

    api/                 FastAPI application and versioned routes
    auth/                Authentication and authorization middleware
    core/                Agent runtime, models, billing, commerce, and orchestration
    connectors/          Native connector implementations and framework
    workflows/           Workflow definitions and runtime helpers
    sdk/                 Python SDK and CLI
    sdk-ts/              TypeScript SDK
    mcp-server/          MCP server package
    ui/                  React 19 application and public web assets
    migrations/          Database migrations
    observability/       Metrics, tracing, and logging helpers
    tests/               Backend unit, regression, security, and integration tests
    ui/e2e/              Playwright browser tests
    docs/                Product, architecture, operations, and protocol documentation
    scripts/             Validation, migration, release, and deployment helpers

## Search and answer-engine assets

The public site includes conventional search and answer-engine discovery assets:

- [robots.txt](https://agenticorg.ai/robots.txt)
- [sitemap.xml](https://agenticorg.ai/sitemap.xml)
- [llms.txt](https://agenticorg.ai/llms.txt)
- [llms-full.txt](https://agenticorg.ai/llms-full.txt)
- Per-route titles, descriptions, canonicals, social metadata, and structured data
- Crawlable blog, resource, product, protocol, solution, trust, and legal pages

The two llms files are generated by [ui/scripts/generate-llms.mjs](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/ui/scripts/generate-llms.mjs). They are supplemental machine-readable navigation documents, not replacements for crawlable HTML, accurate structured data, robots controls, or the sitemap.

To refresh the tracked sitemap and llms copies plus route JSON-LD CSP hashes:

    cd ui
    npm run seo:sync
    npm run seo:verify

## Documentation

- [Documentation home](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/README.md)
- [Current product status](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/PRODUCT_STATUS.md)
- [Architecture](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/architecture.md)
- [API reference](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/api-reference.md)
- [Deployment](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/deployment.md)
- [Knowledge ingestion and OCR](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/knowledge-ingestion.md)
- [Local voice, email, RPA, and OCR simulation](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/local-multichannel-simulation.md)
- [Voice runtime](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/voice-runtime.md)
- [RPA runtime](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/rpa-runtime.md)
- [OACP runtime documentation](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/oacp/README.md)
- [Production smoke runbook](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/runbooks/production_smoke.md)
- [Testing guide](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/TEST_PLAN.md)
- [Python SDK](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/sdk/README.md)
- [TypeScript SDK](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/sdk-ts/README.md)
- [MCP server](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/mcp-server/README.md)
- [Changelog](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/CHANGELOG.md)
- [Roadmap](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/ROADMAP.md)

The [documentation home](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/docs/README.md) labels current, configuration-dependent,
historical, and target-design material. Dated audits, old PRDs, and incremental
implementation reports remain useful history, but they do not override current
code, OpenAPI, runbooks, retained release evidence, or live product facts.

## Contributing

Read [CONTRIBUTING.md](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/CONTRIBUTING.md) and [CODE_OF_CONDUCT.md](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/CODE_OF_CONDUCT.md). Keep pull requests focused, add tests for behavior changes, and update generated public documentation when a source-of-truth field changes.

## License

AgenticOrg is licensed under the [Apache License 2.0](https://github.com/mishrasanjeev/agentic-org/blob/HEAD/LICENSE).