WSO2 Agent Manager v0.17.0
Pre-release
Pre-release
🚀 Highlights
This release introduces multi-environment support, MCP Proxy support for agents, OAuth-based authentication for agent endpoints with gateway-managed identity providers, a greatly expanded amctl CLI capabilities, richer evaluation tooling, and private-network VM install modes.
Key Updates
-
Multi-Environment Support
- Extend the agent lifecycle with environment-based promotion
- Manage multiple environments, with promotion paths defined through deployment pipelines
- Configure environment-scoped LLM providers and provide environment-specific observability surfaces
- Organization selector and refreshed layout for environment navigation
-
MCP Proxy
- New MCP Proxy support for agents, with lifecycle management and documentation
amctlcommands for managing per-agent MCP proxy configurations
-
Identity, OAuth & Agent Authentication
- OAuth security authentication configuration for agent endpoints
- Identity providers managed from the gateway view, with a gateway-config applier that syncs them to the gateway
- Unified admin user profiles across Thunder identity and Agent Manager, plus a new profile view/edit experience
-
LLM Configuration & Providers
- Consumers listing for LLM service providers
amctlLLM provider management and agent LLM config commands- Agent configuration reorganized into LLM and tool configuration tabs
-
Evaluation & LLM-as-Judge
- Monitor sampling-rate UI, configurable trace fetch page size, and a monitor comparison view
- Duplicate action for monitors
- Agent-level eval input/output derived from LLM spans
- Preserve model vendor namespace for the monitor judge
-
amctlCLI- Declarative agent create with manifest file and template modes
- Low-level
amctl apipassthrough command - CLI versioning aligned with Agent Manager
-
Installation & Deployment
- Private-network VM install modes (DNS-01, self-signed)
- Clarified and restructured VM TLS example configurations
📦 Components
| Component | Description |
|---|---|
| amp-console | React 19 + Oxygen UI web dashboard with multi-environment support, MCP proxy and identity-provider management, and identity/profile management |
| amp-api | Go-based backend API with multi-environment support, per-environment gateway routing, MCP proxy, OAuth agent authentication, and LLM provider management |
| amp-traces-observer | Trace query API service with bulk attribute fetching in the traces export endpoint |
| amp-evaluation-monitor | Evaluation monitor service with sampling-rate control, monitor comparison, and span-derived eval input/output |
| amp-python-instrumentation-provider | Init container for automatic Python agent instrumentation (0.3.0 / traceloop-sdk 0.61.0) |
| amp-quick-start | Quick start setup container |
| amctl | CLI for managing agents, projects, deployments, observability, skills, LLM providers/configs, and MCP proxy configs |
🐳 Docker Images
ghcr.io/wso2/amp-console:v0.17.0
ghcr.io/wso2/amp-api:v0.17.0
ghcr.io/wso2/amp-traces-observer:v0.17.0
ghcr.io/wso2/amp-evaluation-monitor:v0.17.0
ghcr.io/wso2/amp-quick-start:v0.17.0
ghcr.io/wso2/amp-python-instrumentation-provider:0.3.0-python3.10
ghcr.io/wso2/amp-python-instrumentation-provider:0.3.0-python3.11
ghcr.io/wso2/amp-python-instrumentation-provider:0.3.0-python3.12
ghcr.io/wso2/amp-python-instrumentation-provider:0.3.0-python3.13
⎈ Helm Charts
oci://ghcr.io/wso2/wso2-agent-manager:0.17.0
oci://ghcr.io/wso2/wso2-amp-observability-extension:0.17.0
oci://ghcr.io/wso2/wso2-amp-platform-resources-extension:0.17.0
oci://ghcr.io/wso2/wso2-amp-thunder-extension:0.17.0
oci://ghcr.io/wso2/wso2-amp-evaluation-extension:0.17.0
oci://ghcr.io/wso2/wso2-amp-api-platform-gateway-extension:0.17.0
📚 Samples
- Customer Support Agent - Sample travel booking agent showcasing LangGraph integration
- Hotel Booking Agent - Sample hotel booking agent with chat interface and Pinecone knowledge base integration
- IT Helpdesk Agent - L1 IT support assistant built with LangGraph and FastAPI
- CrewAI Agent - Multi-agent CrewAI + FastAPI sample producing a complete multi-agent trace
- Manual Instrumentation Agent - Sample demonstrating manual OpenTelemetry instrumentation with tool-calling
📖 Documentation
See the Quick Start Guide for installation and setup instructions.
🔧 What's Changed
Multi-Environment Support
- Add multi environment support by @hanzjk in #1019
- Add gateway config to environments and route agent endpoints to it by @hanzjk in #1076
- UI and UX improvements for multi env feature by @rasika2012 in #1084
- Add unit tests and fix issues in environment management by @hanzjk in #1112
- Refactor layout components and add organization selector by @rasika2012 in #1116
- Add documentation for environment management by @hanzjk in #1149
- Make chart version an input config for environment script by @hanzjk in #1175
- Update helm version in environment creation script by @hanzjk in #1194
MCP Proxy
- Implement MCP Proxy support by @Oshanath in #961
- MCP Proxy feature bug fixes and enhancements by @Oshanath in #1092
- Add mcp proxy documentation by @Oshanath in #1095
- Stop llm-provider and mcp-proxy status from being updated after creation by @Oshanath in #1129
- Implement CLI for agent mcp proxy configs by @Oshanath in #1143
- Add tests for the MCP Proxy feature by @Oshanath in #1150
- MCP Proxy feature bug fixes by @Oshanath in #1173
- Add amctl agent mcp lifecycle CLI e2e specs by @jhivandb in #1189
Identity, OAuth & Agent Authentication
- Add validation for ouName path parameter with authorized token claim by @lashinijay in #1053
- Add OAuth security Authentication configuration for agent endpoints by @AnoshanJ in #1056
- Add identity related endpoint to open api spec by @lashinijay in #1062
- Refactor identity creation forms by @rasika2012 in #1097
- Add view button for password field in add user form by @lashinijay in #1107
- Add profile view, edit implementation by @lashinijay in #1137
- Refactor identity management components by @rasika2012 in #1139
- Update edit paths for groups, roles, and users by @rasika2012 in #1144
- Move identity providers into the gateway view by @AnoshanJ in #1154
- Add gateway-config applier interface for syncing Identity Providers with the gateway by @AnoshanJ in #1164
- Add documentation on OAuth Providers and OAuth Agent Authentication by @AnoshanJ in #1135
- Fix chart version in identity provider setup command by @AnoshanJ in #1177
- Unify admin user profiles in thunderid and agent manager by @lashinijay in #1184
- Improve gateway bootstrap identity provider seeding by @AnoshanJ in #1190
- Update documentation with admin credential change by @lashinijay in #1193
LLM Configuration & Providers
- Add Consumers listing for LLM Service providers by @menakaj in #1125
- Add CLI commands for agent LLM configs by @jhivandb in #1109
- [amctl] add llm provider management by @jhivandb in #1087
- Add CLI docs for amctl llm-provider and agent LLM config by @jhivandb in #1118
- Add LLM Provider e2e tests by @jhivandb in #1181
- Fix agent configuration move llm and tool configuraion as tabs by @menakaj in #1187
Evaluation & LLM-as-Judge
- Preserve model vendor namespace for monitor judge by @RAVEENSR in #1090
- Add duplicate action for monitors by @nadheesh in #1102
- Refactor evaluator management and configuration components by @rasika2012 in #1108
- Add monitor sampling-rate UI, configurable trace fetch page size, and monitor comparison view by @nadheesh in #1127
- Derive agent-level eval input/output from LLM spans by @RAVEENSR in #1152
amctl CLI
- Add declarative agent create with manifest file and template modes by @jhivandb in #1049
- Add amctl api low-level API passthrough command by @jhivandb in #1117
- Add agents projects and observability cli e2e tests by @jhivandb in #1146
- Cli versioning agent manager by @jhivandb in #1185
- Provision CLI-owned e2e agent once across parallel processes by @jhivandb in #1191
- Fix CLI e2e config name collision on shared agent by @jhivandb in #1192
Agent Kinds & Promotion
- Remove unused route for publishing kind in agent routes by @rasika2012 in #1079
- Remove unused api path and variables by @hanzjk in #1093
- Refactor PromoteAgentDrawer state management by @rasika2012 in #1134
- Block deleting a source agent that has published kinds by @nadheesh in #1155
- Add deployment status check and info alert in PromoteAgentDrawer by @rasika2012 in #1178
Observability & Traces
- Show OpenLLMetry version in instrumentation list by @RAVEENSR in #1069
- Use bulk attribute fetching in traces export endpoint by @RAVEENSR in #1073
- Re-create OTEL ingest RestApi until gateway matches by @RAVEENSR in #1098
- Bind OTEL ingest route via chart, drop dead manual apply by @RAVEENSR in #1099
- Coerce stringified numeric attributes in heavy tier by @RAVEENSR in #1103
- Save tracing api key in KV by @hanzjk in #1141
Console & UI
- Improve UI error handling on login flow by @rasika2012 in #1089
Installation & Deployment
- Fix VM teardown instructions in install docs by @RAVEENSR in #1083
- Pin VM install docs to the release tag by @RAVEENSR in #1105
- Add private-network VM install modes (DNS-01, self-signed) by @RAVEENSR in #1106
- Add missing vhost for default gateway and dump workload logs by @hanzjk in #1166
- Update gateway vhost in install.sh by @hanzjk in #1167
- Clarify and restructure VM TLS example configs by @RAVEENSR in #1165
- Advertise public agents host on the default environment by @RAVEENSR in #1168
- Route VM gateway host through kgateway by @RAVEENSR in #1169
- Fix external agent otel api key generation failure on first creation by @menakaj in #1171
- Upgrade OpenChoreo to v1.1.1 and fix compatibility issues by @vish-mv in #1065
Documentation
- docs: release documentation version v0.16.x by @github-actions[bot] in #1071
- Update wso2 logo favicon in documentation by @menakaj in #1124
Testing, CI & Infrastructure
- Add nightly agent manager integration test run by @menakaj in #1115
- Update integration test suite by @hanzjk in #1119
- Update openai key env name in e2e test suite by @hanzjk in #1120
- Update nightly e2e pipeline with proper docker image versions by @menakaj in #1136
- Fix git tag colision by @menakaj in #1138
- Fix image tagging by @menakaj in #1142
- Update openai secret name in pipeline by @hanzjk in #1145
- Update openai secret name in pipeline by @hanzjk in #1147
- Update e2e test logging and remove apikey config by @hanzjk in #1151
- Fix parallel executions in e2e test by @hanzjk in #1157
- Increase timeouts in e2e tests by @hanzjk in #1158
- Delete created agents to resolve the single node capacity exceeding issue by @hanzjk in #1159
- Improve unit tests, pipeline and add Agents.md for agent-manager-service by @menakaj in #1160
- Fix deployment pipeline test failures by @menakaj in #1161
- Fix gateway error logs in e2e tests by @menakaj in #1162
- Remove flaky assertions and improve error logging by @hanzjk in #1163
- Provide released chart version to e2e test suite by @hanzjk in #1180
- Update go minor version by @jhivandb in #1182
- Update go version of am-svc to 1.25.7 by @jhivandb in #1188
- Update release creation conditions by @hanzjk in #1198
- Add --keep-going to release e2e so all suites run despite a failure by @hanzjk in #1199
👥 Contributors
- @AnoshanJ
- @hanzjk
- @jhivandb
- @lashinijay
- @menakaj
- @nadheesh
- @Oshanath
- @rasika2012
- @RAVEENSR
- @vish-mv
- @vish-mv
- @Oshanath
Full Changelog: amp/v0.16.0...amp/v0.17.0