New Microsoft Copilot Harness | More power, token efficiency & control for agents in Foundry
Build agents you can trust with your company's data, apps, and resources using Microsoft Foundry. Start with a fully managed prompt agent and move it onto the Microsoft Copilot harness so it plans, loops, calls subagents, and delivers finished reports. You can also bring your own harness, such as the Claude Agent SDK, and run it as a hosted agent with isolated VM sandboxes, autoscaling, and zero idle cost.
Give every agent its own Entra Agent ID, restrict its egress to approved endpoints, and trace every action it takes. Curate tools once in a governed, MCP-compatible toolbox, cut token use with tool search, and tune agents against your own benchmark with Agent Optimizer.
Jeff Hollan, Microsoft Foundry VP, shares how to balance agent autonomy with enterprise control from first build through production.
👥 Who it's for:Â
Developers and AI engineers building production agents, solution architects designing agent platforms, and IT and security teams responsible for governing agent identity, access, and network egress.
⏱️ Chapters:Â
00:00 Why the harness decides agent trust
00:59 What an agent harness does
01:22 Five components built into every harness
02:15 Microsoft Copilot harness meets Foundry controls
03:28 Where a prompt agent falls short
04:57 Same agent on the Microsoft Copilot harness
06:10 Guardrails block unauthorized agent actions
07:29 Entra Agent ID and egress rules
08:05 Bring your own harness as a hosted agent
09:06 Private networking, regions, and your own registryÂ
10:13 Curate tools once with Foundry toolboxes
11:13 Tool search keeps agent context lean
11:54 Benchmark agents against your real tasks
12:54 Auto-tune agents with Agent Optimizer
13:53 Start building in Microsoft Foundry
What is an agent harness? The harness is the environment you wrap around your model and agents. It runs the agent loop, manages context as it grows, provides skills and tools such as MCP servers, delegates work to subagents in parallel, and maintains memory across turns and sessions. The Microsoft Copilot harness is model-agnostic, optimized for enterprise task completion, and runs behind Microsoft services like GitHub and Microsoft 365.
Inside Microsoft Foundry, it respects your existing permissions and data protection controls and runs each agent instance in its own isolated sandbox. Hosted agents in Microsoft Foundry Agent Service also support Hermes, OpenClaw, and fully custom harnesses, along with your own virtual network, container images from your own registry, and expanded regions so agents run where your data is.
đź”— Related links:
â–ş Head to Microsoft Foundry to build your first project at https://ai.azure.com
â–şFor hosted agent templates and the SDKs to start coding, check out https://github.com/foundry-samples
â–ş Unfamiliar with Microsoft Mechanics?
Microsoft's Official Video Series for IT
— Subscribe https://www.youtube.com/c/MicrosoftMechanicsSeries
— Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog
— Podcast: https://microsoftmechanics.libsyn.com/podcast
â–şJoin us on social:
— https://twitter.com/MSFTMechanics
— https://www.linkedin.com/company/microsoft-mechanics/
— https://www.instagram.com/msftmechanics/
— https://www.tiktok.com/@msftmechanics
Published on:
Learn moreWe can help you with New Microsoft Copilot Harness | More power, token efficiency & control for agents in Foundry
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Made for tech enthusiasts and IT professionals. Expanded coverage of your favorite technologies across Microsoft; including Office, Azure, Windows and Data Platforms. We'll even bring you broader topics such as device innovation with Surface, machine learning, and predictive analytics.
Related posts
New Conditional Access policy plans in Microsoft Entra
Group related Conditional Access policies into policy plans and define users, apps and conditions once for every rule in the plan. Add a rule ...
Fight AI with AI | Multi-Agent Security Defense
Match AI-powered attacks at machine speed with Project Perception. Point red, blue, and green AI agent teams at a known threat actor, confirm ...
Build Automated Agents, Workflows, and Apps - New in Copilot Studio
Take a business process from prompt to production by building agents, workflows, and apps in one place with Copilot Studio. Describe the agent...
Create agents fast with Agent Builder in Copilot
Build a specialist AI agent without writing a line of code. Describe what you want in one prompt, and Copilot Agent Builder generates the name...
New Agent 365 controls for Microsoft admins
Govern every AI agent running across your organization with Agent 365. Track agents from Microsoft, Amazon, Google, and Salesforce in one regi...
Windows 365: Five Years In, See What's New
An AI agent works inside your Windows 365 Cloud PC from a Teams chat on your phone — finding downloaded files, editing documents, and drafting...
Build your first Power App from data in seconds
Build a fully working model-driven app from your existing Dataverse, SharePoint, or SQL data in under a minute — screens, navigation, and form...
Microsoft Entra Suite hands-on tour of identity and network access protections
Unify identity and network access controls. Enforce least privilege access across every app and resource. Wire lifecycle workflows directly to...
New agentic platform in Dynamics 365 for Sales and Service
Qualify a lead, close a case, or walk into a renewal meeting fully briefed, all from the sales and service agents built into Dynamics 365. Ask...
Tokenomics | The new AI currency & your options explained
Control what you're billed on. Tokens are the currency of AI, and how you design your app determines how many you spend. Compress conversation...