Skip to content

Configure an agent control plane from a business requirement

BailingHub governs the full path from an agent request to a business consequence. It is not merely a chat box. Your system exposes selected actions through stable contracts; BailingHub governs their reach and execution; your system retains tenant isolation, permissions, state validation, and final authority.

  1. Where does the request start? A backend event, embedded chat, local agent, or automation platform?
  2. Who is acting? Which signed-in user, tenant, store, or organization becomes the trusted subject?
  3. What may it do? Start with one verifiable action, not the entire back office.
  4. When is approval required? Separate reads, requests/drafts, and direct side effects.
  5. Who gives final authorization? The existing business system—not a prompt or a hub admin session.
  6. How is it traced? Preserve request_id, job_id, tool calls, approver, and final business result.
Object Question it answers Deliverable for developers
Route Which scenario, context, rules, and tools apply? Stable route, input, and metadata contract
Client Which system may call which routes? Server token, allowlist, and rate limits
Target Does an in-hub LLM, executor, or other runtime do the work? Target name and runtime boundary
Tool Provider Which business APIs are agent-callable? OpenAPI/ACC spec, signature, and authorization rules
Agent Client Which local app and workspace may be authorized? Public clientAppId, authorization entry, and allowed routes
Knowledge Base Which documents should a route retrieve? kb_id, synchronization, and deletion rules
Chat Entry Which page may embed which route? entry_key, Origin allowlist, and identity ticket
Jobs and Audit What happened and where did it fail? job_id, trace, and redacted diagnostics

Prefer a low-risk action with an externally verifiable result: read one order, list low-stock products, create a support draft, or update a non-sensitive field on a development account. Do not define the first milestone as “let the agent manage the whole back office.”

Scenario: order lookup and support ticket
Entry: embedded admin chat / local agent
Route: order-support
Trusted subject: metadata.principal.id + tenant
Tool provider: order-tools
Allowed scopes: order.read / ticket.create
Write boundary: may create a ticket, may not execute a refund
Approval: actual refunds remain in the business approval flow
Final authority: existing order permission checks
Evidence: request_id, job_id, and trace

Continue with the Client API, Business Tools, and SDK.