Retool announces early access to centrally managed workplace agents

Retool announced early access to a centralized agent harness in a post dated Oct. 6, 2026, giving employees agents they can use through Slack, Teams and Google Chat. The company said it was beginning to extend access to its next hundred customers over the following weeks, with company-wide controls over the tools, data and models those agents can use.

The key boundary is between an agent requesting an action and a business system carrying it out. Retool says tool requests pass through a shared gateway, where policies can inspect their arguments—not merely check whether the agent has permission to use that tool. Those checks operate outside the model, rather than relying on it to follow instructions in a prompt.

That approach also comes with deliberate restrictions. The company says the harness provides no access to employee laptops, browser automation or desktop control. Agents instead work in a centrally hosted sandbox and reach business systems through governed tools.

Retool describes a setup in which each employee can have one or more agents, with their own virtualized filesystems, memory and accumulated context. Administrators can choose which models different users may access and route work according to quality and cost. The harness can also be deployed in a company’s own virtual private cloud, according to the announcement.

For oversight, agents receive their own virtual service accounts and appear separately from users in audit logs. Retool says it records actions, inputs and outputs by person, model and job, allowing administrators to connect token spending to particular work and distinguish an employee’s direct actions from an agent’s delegated ones.

At the time of the announcement, Retool said it had used the system internally for four months and made it a default for new hires. Interested companies were directed to a waitlist.