Agent-net Open Sources Webagent: A Go Harness That Turns Any Website into a Guarded AI Agent
Agent-net, the crew constructing an agent-to-agent market the place AI brokers uncover, belief, and pay one another, has launched Webagent, an open supply harness for standing up public-facing enterprise brokers. So, mainly you give it your web site, get an agent, and let it speak to different brokers. Instead of writing orchestration code, a enterprise fills in a declarative JSON spec, picks 1 supplier for every of 9 pluggable slots, and runs webagent serve.
Is it deployable? Yes, with caveats. The repo ships underneath Apache 2.0, builds inexperienced, and runs dwell Slack, WhatsApp, and HTTP brokers backed by MCP instruments right this moment. It remains to be labeled v0, and the browser motion supplier, OAuth-gated MCP, OTel export, and the AgentInternet id and billing layer are listed as not but constructed.
Slots, suppliers, picks
Webagent is written in Go. An agent is 1 Brain (an LLM plus instruction) over a set of slots outlined in core/. Each slot is a Service Provider Interface with a registry of suppliers in spi/ and a designated default:
| Slot | Built-in suppliers | Default |
|---|---|---|
| Retrieval | dwell, key phrase, hybrid | dwell |
| Memory | session | session |
| Guardrail | primary, off | primary |
| Channel | a2a, internet, slack, whatsapp (telegram stub) | a2a |
| Secrets | env, file, static | env |
| Presenter | textual content, terminal (QR), internet | textual content |
| Model | echo, openrouter, gateway | echo |
| Action | none, demo, mcp | none |
| Observability | none, log, reminiscence | none |
The design serves 3 audiences on 1 contract: companies that configure by selecting from the menu, companies that reach by registering a customized supplier, and companion corporations that ship adapters. Nobody forks the core. Every supplier should cross its slot’s conformance suite to be licensed.
Safety is code-enforced, not prompt-enforced
The most vital architectural choice is motion.Guard. Every instrument the agent holds, whether or not it comes from the motion supplier or is injected by the host, is wrapped so the chosen guardrail runs on the motion earlier than it executes. The mannequin can not bypass it. The DESIGN.md frames the entire challenge round a analysis discovering that structure, not mannequin functionality, decides agent success, citing arXiv 2511.19477 and an 85% versus 50% task-success hole on the identical fashions.
What runs right this moment
The default echo mind wants no credentials, so webagent validate and webagent serve work out of the field on the two instance specs, zomato.json and bakery.json. To drive a actual mannequin, webagent keys set openrouter shops a key within the OS config listing with mode 0600. Keys are by no means written into a spec, and an exported setting variable at all times wins. Both openrouter and gateway are OpenAI-compatible shoppers with a tool-calling loop.
A enterprise with an current MCP server turns into an performing agent with 1 spec block. The mcp motion supplier connects over Streamable HTTP (JSON and SSE) with bearer or API-key auth, performs the handshake at construct time, and fingers every instrument to the agent behind the guard, so validate studies the true instrument rely.
The Slack and WhatsApp channel adapters confirm each inbound webhook signature, acknowledge instantly, reply via the platform API, ignore their very own messages, and de-duplicate retried deliveries. Slack factors at /slack/occasions; Meta’s callback goes to /whatsapp/webhook.
Secrets observe a naming rule: any config key ending in Secret is a reference resolved via the chosen vault at construct time, so specs are secure to commit. A reference that can not be resolved fails the construct slightly than beginning a channel with out a credential. Observability emits a per-turn FlipTrace aligned to the OpenTelemetry GenAI conventions, and an eval/ harness runs eventualities with checks.
Key Takeaways
- 1 JSON spec, 9 slots, 1 supplier every;
webagent servedoes the remaining - Every instrument name passes via
motion.Guardearlier than execution - Live right this moment: OpenRouter or gateway brains, MCP instruments, Slack, WhatsApp, HTTP channels
- Not but: browser actions, OAuth MCP, OTel export, AgentInternet billing
- Apache 2.0, Go, v0; learn the deferred-hardening record earlier than manufacturing
Check out the GitHub repo and the launch post. All credit score goes to the researcher of this challenge. Also, be happy to observe us on Twitter and don’t overlook to hitch our 150k+ML SubReddit and Subscribe to our Newsletter. Wait! are you on telegram? now you can join us on telegram as well.
Need to companion with us for selling your GitHub Repo OR Hugging Face Page OR Product Release OR Webinar and so forth.? Connect with us
The submit Agent-net Open Sources Webagent: A Go Harness That Turns Any Website into a Guarded AI Agent appeared first on MarkTechPost.
