AgenticOrg

AgenticOrg is an Apache-2.0 enterprise AI agent platform for building, running, and governing agent workflows across finance, HR, marketing, operations, back office, communications, and bounded agentic-commerce use cases.

Ownership: AgenticOrg is owned by Orchestrum Technologies LLP.

Inventor / Owner: Sanjeev Kumar

Contact: sanjeev@orchestrum.in | mishra.sanjeev@gmail.com

See the canonical ownership and contact statement and NOTICE.

Website | Application | Playground | Documentation | Current product status | Security policy

Source of truth

Live product totals and the deployed product version are published by the public product facts endpoint:

GET https://app.agenticorg.ai/api/v1/product-facts

The response contains version, agent_count, connector_count, and tool_count. Do not copy those values into documentation, page copy, or tests: they are computed from runtime registries and can change independently of a documentation release. The version declared for source builds is in pyproject.toml.

Billing limits and list prices come from core/billing/catalog.py. Production deployment behavior comes from scripts/deploy_cloud_run.sh.

Current release at a glance

The production platform currently includes governed agent/workflow execution, document ingestion with scanned-document OCR, signed Twilio voice with provider-managed STT/TTS, tenant-scoped browser RPA, Python and TypeScript SDKs, MCP/A2A surfaces, and the bounded Shopify-to-OACP commerce runtime. See the current product status for the exact shipped, configuration-dependent, and not-shipped boundaries.

External actions remain explicit. A voice provider, connector, browser script, buyer channel, payment rail, merchant system, or POS path is usable only when the target tenant has the required credentials, scopes, configuration, and provider approval.

Voice, email, OCR, and browser RPA can be exercised together before release with the Docker-backed local multichannel simulation. It uses fresh PostgreSQL, local Mailpit delivery, real Tesseract, and optional real Playwright Chromium while keeping paid calls and production mutations off.

What is in this repository

A source definition is not evidence that a specific tenant has connected the provider or enabled write access. Connector actions still require approved credentials, scopes, policies, and provider availability.

Capability status

Implemented in the platform

• Agent definitions and tenant-created agents
• Agent and workflow execution through authenticated APIs
• Human approval queues and configurable escalation conditions
• Audit records for governed runtime activity
• Prompt templates, organization structure, and role-aware application views
• Native connector definitions and a scoped tool gateway
• Public A2A and MCP discovery with authenticated execution paths
• Python and TypeScript client packages plus an MCP server package
• Hosted billing limits and checkout integration
• OACP commerce configuration, Shopify read-only sync, artifact caching, buyer channels, and safe handoff preparation

Configuration-dependent or provider-gated

• LLM calls require a configured supported model provider or a local model runtime.
• Each connector requires provider credentials, tenant authorization, and the relevant scopes.
• Composio is an optional integration gateway; its catalog is not the same as the native connector registry.
• Document OCR ships with Tesseract, Poppler, and LibreOffice in the production image. See Knowledge ingestion.
• The production voice path uses signed Twilio webhooks with provider-managed STT/TTS and encrypted transcript storage. See Voice runtime.
• Browser automation includes tenant-scoped scripts, schedules, durable history, and approved-domain egress controls. A run remains an explicit external action. See RPA runtime.
• Outbound notifications and local-model profiles require their supporting services.
• SSO, SCIM, enterprise support, and custom SLAs depend on plan and deployment configuration.
• WhatsApp, Telegram, payment-provider, bank, POS, and merchant-system flows require provider setup and verified callbacks or adapters.
• WooCommerce, ERP, PIM, OMS, WMS, custom commerce APIs, and additional payment rails can be recorded as adapter-ready configuration but are not represented as active execution paths until an approved adapter exists.

Explicit non-goals and boundaries

• OACP artifacts do not create orders, reserve inventory, create mandates, capture payments, issue refunds, or prove a paid state.
• AgenticOrg does not replace the merchant, bank, payment provider, POS, or SaaS system as its source of record.
• Cached commerce evidence can support an answer or a prepared handoff; provider-owned execution must be confirmed by the provider.
• A connector listed in source is not proof of a live customer integration.
• Example workflows and editorial content are not performance guarantees.
• Security controls in the repository are not a claim of third-party certification.

How the runtime fits together

Browser or SDK
    |
    v
React 19 application / FastAPI API
    |
    +-- Authentication, tenant context, roles, and scopes
    +-- Agent registry and LangGraph execution
    +-- Workflow engine, schedules, and approval queues
    +-- Tool gateway and connector adapters
    +-- Audit, evaluation, observability, and cost records
    |
    +-- PostgreSQL / Cloud SQL
    +-- Redis
    +-- GCS or compatible object storage
    +-- Configured LLM and external service providers

The managed production path runs separate API and UI services on Google Cloud Run. Artifact Registry images are commit-pinned, migrations can run before rollout, and traffic movement is explicit. Legacy Kubernetes material is not the current production path.

OACP commerce boundary

AgenticOrg owns the buyer and seller agent runtime around OACP-backed commerce. Grantex owns trust authority, protocol and policy governance, canonical artifacts, artifact verification, and adapter authority. Shopify and merchant systems remain operational sources of record. Pine Labs Plural/P3P, banks, POS systems, and payment providers own their execution rails.

The current supported source path is:

1. A merchant saves tenant-, merchant-, store-, and seller-agent-scoped configuration.
2. AgenticOrg stores Shopify credentials through the approved custody path.
3. AgenticOrg performs read-only Shopify Admin GraphQL sync.
4. Public-safe evidence is submitted to the configured Grantex authority path.
5. Issued OACP artifacts are cached with freshness, scope, risk, and revocation posture.
6. Buyer surfaces answer from valid artifacts and disclose source and freshness.
7. Purchase intent becomes a non-executing provider, merchant, or POS handoff, or a fail-closed blocker.
8. Only a verified provider or merchant callback can confirm the external outcome.

Start with docs/oacp/README.md and the runtime launch closure PRD.

Requirements

• Python 3.12 or newer
• Node.js 20 or newer
• Docker with Docker Compose for local PostgreSQL and Redis
• At least one supported LLM provider key, or a configured local model runtime, for model-backed execution

The UI currently uses React 19. Dependency versions are declared in pyproject.toml and ui/package.json.

Local development

Clone and configure the repository:

git clone https://github.com/mishrasanjeev/agentic-org.git
cd agentic-org
cp .env.example .env

Install the platform and development extras:

python -m venv .venv
python -m pip install -e ".[v4,dev]"

Start local dependencies:

docker compose up -d postgres redis minio

Run migrations and the API: