KX
KXO nativeKXO API Token Console
Create owned Agentic OS API tokens with quota context.
Core
Agentic OS landscape
A practical ecosystem map for Agentic OS operators
The CNCF landscape works because it turns a messy ecosystem into a searchable operating map. This Agentic OS landscape does the same for teams issuing API tokens to coding agents, research agents, browser agents, and internal automations.
9
ecosystem categories
36
mapped surfaces
4
operational layers
Showing 36 surfaces
Landscape board
Each section shows the surfaces a production Agentic OS API token has to coordinate. KXO sits in the access and control plane so agent code can keep one stable credential while operators adjust routing, quota, and ownership.
Reference views
Use these diagrams when explaining how Agentic OS API token access connects the ecosystem.
Identity and Token Access
layer: Core access plane
Where operators issue, scope, rotate, revoke, and audit Agentic OS API token access before agents reach production.
BA
CompatibleBetter Auth
Account sessions and operator identity for the SaaS layer.
Core
SA
WatchlistService Accounts
Dedicated non-human identities for production agents.
Control
KR
KXO nativeKey Rotation Logs
Copy-once token visibility and revocation history.
Control
Model Supply and Routing
layer: Model relay plane
The upstream model providers, fallback groups, and relay policies that sit behind a stable Agentic OS API token.
CL
CompatibleClaude Route
High-reasoning model access through managed routing.
Core
OA
CompatibleOpenAI Compatible
OpenAI-style API access for agent runtimes and SDKs.
Core
FG
KXO nativeFallback Groups
Backup model groups when a primary route is unavailable.
Control
UL
KXO nativeUsage Ledger
Token-level usage accounting for spend visibility.
Control
Agent Frameworks
layer: Agent runtime plane
Frameworks that turn model access into planning, tool use, delegation, memory, and multi-step agent workflows.
LG
CompatibleLangGraph
Graph-based agent state machines and tool loops.
Runtime
LI
CompatibleLlamaIndex
Data-aware retrieval, indexes, and agent workflows.
Runtime
AG
CompatibleAutoGen
Multi-agent orchestration and delegated workflows.
Runtime
CA
WatchlistCrewAI
Role-based agent crews for repeatable tasks.
Runtime
Developer Agents
layer: Work execution plane
Coding, review, and terminal agents that need reliable model access, cost boundaries, and auditable work sessions.
OC
CompatibleOpenAI Codex
Coding agent workflows that need stable model calls.
Delivery
CC
CompatibleClaude Code
Terminal-based development flows with governed access.
Delivery
CU
WatchlistCursor Agents
IDE agent sessions with budget and routing needs.
Delivery
CI
CompatibleCI Review Agents
Automated checks and review loops in delivery pipelines.
Delivery
Tool Protocols and Connectors
layer: Tool interface plane
The protocols and connectors that let agents reach files, browsers, SaaS apps, search, code, and internal systems.
MP
CompatibleMCP Servers
Tool and context servers attached to agent runtimes.
Runtime
BR
CompatibleBrowser Tools
Computer use, browsing, capture, and web automation.
Runtime
SL
WatchlistSlack Connectors
Team workflows and notifications for agent operations.
Delivery
GH
CompatibleGitHub Tools
Repository, pull request, and issue automation surfaces.
Delivery
Memory and Context
layer: Context plane
Vector stores, files, caches, and context registries that keep long-running agents grounded without leaking credentials.
VS
CompatibleVector Stores
Retrieval memory for documents, code, and knowledge.
Runtime
R2
KXO nativeR2 Files
Durable file storage for outputs and attachments.
Delivery
RD
CompatibleRedis Cache
Session state, queues, rate limits, and runtime caches.
Runtime
PR
WatchlistPrompt Registry
Versioned prompts for repeatable agent behavior.
Control
Observability and Cost Operations
layer: Control plane
The dashboards, alerts, cost reviews, and traces teams need before agent work becomes expensive or opaque.
UR
KXO nativeKXO Usage Review
Token-level usage review for operators and teams.
Control
QA
KXO nativeQuota Alerts
Spend guardrails before agents run beyond intent.
Control
DF
CompatibleDataFast
Traffic analytics for public product surfaces.
Control
AE
WatchlistAudit Exports
Readable access trails for incident and finance review.
Control
Automation and App Surfaces
layer: Delivery plane
Where agents show up for users: internal automations, product features, customer support, research, and ops workflows.
N8
Compatiblen8n Workflows
Scheduled and event-driven automation flows.
Delivery
ZP
WatchlistZapier Zaps
No-code business process automation with model calls.
Delivery
CS
CompatibleCustomer Agents
Product-facing agents with quota-aware access.
Delivery
RS
CompatibleResearch Agents
Long-session investigation and synthesis workflows.
Delivery
Deployment Fabric
layer: Infrastructure plane
Cloud and runtime infrastructure for hosting the SaaS surface, relay backend, caches, databases, and agent delivery workflows.
CW
KXO nativeCloudflare Workers
Global SaaS edge runtime for the public console.
Delivery
DC
CompatibleDocker Compose
Service orchestration for relay, Redis, and MySQL.
Delivery
D1
KXO nativeD1 Database
SaaS application data and product configuration.
Core
MY
CompatibleMySQL Relay Store
Persistent relay-side users, keys, quota, and usage.
Core
Agentic OS ecosystem overview
A wide map of model access, token control, runtimes, memory, tools, and delivery surfaces around one governed API token plane.
Runtime topology
A topology view showing how coding agents, research agents, browser agents, and internal automations call models through KXO.
Governance map
A control-plane diagram for ownership, quota, revocation, observability, billing, and audit trails around Agentic OS API tokens.
Ready to turn the map into controlled access?
Create a KXO API token, attach it to the model route your agent needs, and keep quota, ownership, and revocation decisions visible from day one.