Meet the New MuleSoft Agent Fabric: Salesforce’s Solution to Rogue Agents

Salesforce has announced a significant expansion of MuleSoft Agent Fabric, its agent coordination tool, designed to help businesses manage their multi-vendor agent environments.

This expansion brings a series of new features, including centralized governance, more control over agent decisions, and upgraded security capabilities. 

What Is Agent Fabric? 

MuleSoft Agent Fabric (sometimes referred to as just Agent Fabric) is a solution Salesforce rolled out last September to “discover, orchestrate, govern, and observe any AI agent, regardless of where it’s built or operating.”

It was created to tackle so-called “agent sprawl” – a form of agent fragmentation that occurs when agents are running across multiple workflows or environments with no real connection. Agent Script seeks to solve this problem by giving enterprise businesses a bird’s-eye view of every agent and their operations.

What Does This Expansion Include? 

Announced formally at this year’s TrailblazerDX conference, Agent Script has been upgraded to include even more features and capabilities, largely centered around increased trust, control, and connectivity. 

This includes:

• Accelerated Production and Discovery With Agent Scanners: Agent Scanners act like an auto-scan for your network. It automatically finds and organizes all the AI tools you already have – including those from other companies like Amazon or GoDaddy – so developers can start using them immediately without setting everything up from scratch.
• Visual Authoring Canvas: Use a new drag-and-drop interface alongside MuleSoft

Vibes to map workflows and human checkpoints, helping developers decide on best-fit agents for projects.

• MCP Bridge: Make existing APIs agent-ready by enabling MCP easily. Plus, extend security provisions and rate-limiting without touching the code.
• Informatica-Hosted MCPs: Pull Informatica’s data quality and governance MCP servers directly into your workflows. This is automatically available in the Agent Registry. 
• Enterprise-Grade Trust and Security: This ensures that an AI can only do things it is allowed to do, just like a human employee has limited access. For big decisions, like moving money, the system can send a notification to a manager’s phone to get a “thumbs up” before the AI proceeds.

“As agent adoption matures, the challenge shifts from building individual agents to bringing them together,” said Andrew Comstock, SVP & GM of MuleSoft. “Agent Fabric gives you total oversight over your AI landscape.”

All Roads Lead to Multi-Agent Orchestration 

Salesforce has been hinting that multi-agent orchestration is a big focus for its current and future agent endeavours, and a few of these upgrades in this expansion also reflect that.

A notable upgrade within this realm is the introduction of Agentforce Script for Agent Broker, MuleSoft’s agent orchestration tool. This will allow businesses to bring the same guided determinism behind Agentforce to Agent Broker, defining fixed hand-off rules while LLMs handle the reasoning in between.

Another key advancement is the ability to govern your LLMs on MuleSoft’s AI Gateway, standardizing token management and compliance across your entire multi-LLM stack. This prevents you from running into spiralling costs or data being used where it shouldn’t. 

Final Thoughts

Salesforce has confirmed that Agent Fabric & Infrastructure is available today in new regions, Canada and Japan. It also now supports Runtime Fabric deployment, which allows businesses to run guardrails directly on their own infrastructure for private cloud workloads.

AI Gateway, MCP Bridge, and Trusted Agent Identity with mobile authorization for high-risk agent actions are generally available today, and the beta for deterministic orchestration in Agent Broker begins in April 2026. Full GA, including the visual authoring canvas and Salesforce model support, arrives in June 2026. 

Lastly, Support for additional platforms, Amazon Bedrock, Azure AI Foundry, and GoDaddy is available today. Support for MCP servers arrives in May, followed by OAuth in June.