📄️ Solution Architecture
Users reach CAIPE through Slack, Webex, the UI, or CLI. Keycloak authenticates every path, CAIPE Agent(s) run the request, and AgentGateway routes MCP tool calls after OpenFGA authorization.
📄️ AgentGateway
AgentGateway is the single Policy Enforcement Point (PEP) for all MCP tool
📄️ Scheduler
The scheduler runs Dynamic Agent chats on recurring cron schedules or as delayed
📄️ Enterprise Identity Federation
Overview
📄️ Slack Bot Authorization
This document provides a visual reference for the end-to-end authorization flow when a user interacts with CAIPE through Slack. It covers the trust chain from Okta enterprise SSO through Slack, Keycloak token exchange, Dynamic Agents execution, and user scope validation at every boundary.
📄️ Slack I/O Guardrails
Every user prompt entering CAIPE through Slack and every LLM response leaving CAIPE back to Slack passes through a guardrail layer. Input guardrails protect the LLM and downstream systems from malicious, sensitive, or out-of-policy content. Output guardrails prevent the LLM from leaking secrets, PII, hallucinated actions, or harmful content back into Slack channels.
📄️ Scheduler
The scheduler runs Dynamic Agent chats on recurring cron schedules or as delayed
📄️ Streaming Architecture
Table of Contents