Apollo GraphQL, the graph-based API orchestration leader, today introduced Apollo GraphOS Agent Services, giving AI agents secure, governed and auditable access to an enterprise's systems and APIs. Built on GraphOS, Apollo's platform for connecting and orchestrating enterprise APIs, Agent Services extends that infrastructure to AI agents, so companies can control what each agent can access and do. GraphOS today orchestrates more than 2 trillion operations monthly after more than a decade of production use. Apollo also expanded the GraphOS MCP Server into a full suite of agent-ready tools for building and managing the graph. Both were unveiled this week at Apollo Summit, the world's largest GraphQL event, in San Francisco. Apollo GraphQL introduces GraphOS Agent Services giving AI agents governed access to enterprise APIs and systems.
Why Now: Your APIs Weren't Built for Agents
Companies adopting AI agents face a common challenge: agents need to call the same APIs that already run the business, but those APIs weren't built with agents in mind. The rules about what's safe to return usually live in a developer's judgment, not in the API itself, and agents don't have access to that judgement. Those rules need to be made explicit and hold every time, regardless of what the AI model decides.
Most enterprise systems don't have one domain model built for this purpose today. A single request for a customer's name or email often returns far more than what was asked for – sensitive fields like personal information, billing details, or internal notes an agent shouldn't be able to access. Each extra field adds token cost.
Gartner projects that, "through 2028, at least 80% of unauthorized AI agent transactions will be caused by internal violations of enterprise policies concerning information oversharing, unacceptable use or misguided AI behavior rather than from malicious attacks."
Introducing GraphOS Agent Services
GraphOS Agent Services sits between AI agents and an enterprise's systems. It translates each agent request into the right API calls, brokers the credentials for each one, and enforces controls on what a human or agent is allowed to see or do, field by field, with no LLM in the judgement loop. It does this through a new set of capabilities: search, so agents can find the right data and tools; identity, to manage credentials for an agent acting autonomously or on behalf of a human; policy, so companies can control exactly what each agent can see and do, down to an individual field; and audit, so there is a precise log of everything that happened for observability, insights, and compliance.
"Enterprises need to adapt their APIs for AI agents," said Matt DeBergalis, CEO & co-founder, Apollo GraphQL. "They need to do it scalably, securely, and sustainably, with a common architecture that supports customer-facing AI, always-on business agents, and traditional software. GraphOS Agent Services adds the context they need, and provides a complete domain model for AI."
Intuit is live in production with GraphOS and piloting Agent Services in preview, running an intelligent business on top of real-time data: "Our marketing team used to wait weeks to learn which campaigns were working and weeks more to turn around a change, even when the fix was obvious. Every day of delay cost us real money," said Chris Miller, Head of AI Marketing Futures at Intuit. "Now our agents can analyze spend against results and propose a change in real time, because GraphOS Agent Services gives them access to only what they need and keeps an audit trail of everything."
About Apollo GraphQL
Apollo GraphQL helps developers build better software faster with a declarative, graph-based approach to API orchestration. With over 1 billion downloads of its open-source software, Apollo has become the standard for working with GraphQL.
