Solution Architecture
Users reach CAIPE through Slack, Webex, the UI, or CLI. Keycloak authenticates every path, CAIPE Agent(s) run the request, and AgentGateway routes MCP tool calls after OpenFGA authorization.
AgentGateway
AgentGateway is the single Policy Enforcement Point (PEP) for all MCP tool
Scheduler
The scheduler runs Dynamic Agent chats on recurring cron schedules or as delayed
Autonomous Agents
Autonomous Agents run Dynamic Agent tasks without a live user request. A task can
Enterprise Identity Federation
Overview
Slack Bot Authorization
This document provides a visual reference for the end-to-end authorization flow when a user interacts with CAIPE through Slack. It covers the trust chain from Okta enterprise SSO through Slack, Keycloak token exchange, Dynamic Agents execution, and user scope validation at every boundary.
Slack I/O Guardrails
Every user prompt entering CAIPE through Slack and every LLM response leaving CAIPE back to Slack passes through a guardrail layer. Input guardrails protect the LLM and downstream systems from malicious, sensitive, or out-of-policy content. Output guardrails prevent the LLM from leaking secrets, PII, hallucinated actions, or harmful content back into Slack channels.
Streaming Architecture
Table of Contents