{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": false,
  "persist_scope": true,
  "volumes": false,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": false,
  "image_oci": true,
  "vm_isolation": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": true,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": true,
  "browser_control": true,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": true,
  "static_egress_ip": true,
  "private_network": true,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": true,
  "hipaa": null,
  "sso": true,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": false,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "own_agent_api": true,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": false,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "azure-foundry-agents",
  "checked": "2026-09-30",
  "company": "Microsoft Corporation (Azure AI Foundry / Foundry Agent Service)",
  "ownership": {
   "value": "subsidiary",
   "parent": "Microsoft Corporation",
   "source": "https://azure.microsoft.com/en-us/pricing/details/foundry-agent-service/",
   "quote": "Foundry Agent Service is part of Microsoft Azure AI Foundry."
  },
  "stage": {
   "value": "public",
   "source": "https://www.microsoft.com/en-us/investor/earnings/fy-2025-q4/press-release-webcast",
   "quote": "Revenue was $281.7 billion and increased 15%",
   "confidence": "high",
   "note": "Foundry Agent Service is a product line of Microsoft Corporation (NASDAQ: MSFT), a public company; not independently funded."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": null,
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value_usd": 281700000000,
   "kind": "annual revenue",
   "as_of": "FY2025 (ended June 30, 2025)",
   "status": "confirmed",
   "basis": "Whole-company Microsoft Corporation revenue (Azure/Foundry Agent Service revenue is not broken out separately); figure is for Microsoft as a whole, not the Foundry Agent Service product alone.",
   "source": "https://www.microsoft.com/en-us/investor/earnings/fy-2025-q4/press-release-webcast",
   "quote": "Revenue was $281.7 billion and increased 15%"
  },
  "employees": {
   "value": null,
   "source": ""
  },
  "note": "Foundry Agent Service (hosted agents) is a feature within Microsoft Azure AI Foundry, itself part of Microsoft Corporation, a public company (NASDAQ: MSFT). There is no independent funding history, accelerator participation, or standalone revenue disclosure for this specific product; revenue shown is Microsoft's total company revenue for context only."
 },
 "id": "azure-foundry-agents",
 "name": "Microsoft Foundry hosted agents (East US)",
 "url": "https://azure.microsoft.com/en-us/pricing/details/foundry-agent-service/",
 "category": "hyperscaler",
 "isolation": "vm",
 "modes": [
  {
   "key": "hosted-eastus",
   "label": "East US hosted agent compute",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": [
    "us"
   ],
   "gpu_only": false,
   "features": {},
   "pricing": "sizes",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": 2,
   "max_ram_gib": 4,
   "sizes": [
    {
     "name": "half",
     "vcpu": 0.5,
     "ram_gib": 1,
     "disk_gib": 10,
     "hour": 0.0615,
     "month_cap": null
    },
    {
     "name": "standard",
     "vcpu": 1,
     "ram_gib": 2,
     "disk_gib": 20,
     "hour": 0.123,
     "month_cap": null
    },
    {
     "name": "large",
     "vcpu": 2,
     "ram_gib": 4,
     "disk_gib": 20,
     "hour": 0.246,
     "month_cap": null
    }
   ],
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": {},
   "note": "Rates = Retail API 'Hosted vCPU Usage' $0.0994/h + 'Hosted Memory Usage' $0.0118/GiB-h (eastus, eastus2, westus, westus3, northcentralus, southcentralus, australiaeast identical). Billing on allocated cpu+memory of every ACTIVE session; compute stays active until the idle timeout (2-60 min, default 15) after the last request, so each burst bills >= the idle timeout. $HOME persisted free of any published storage meter; sessions deleted after 30 days inactivity. Disk 10 GiB (0.5 vCPU) / 20 GiB (>=1 vCPU), ~20% reserved. No 4/8 size.",
   "cpu_class": "shared"
  },
  {
   "key": "hosted-eu",
   "label": "EU hosted agent compute (Sweden Central, France Central, UK South)",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": [
    "eu"
   ],
   "gpu_only": false,
   "features": {},
   "pricing": "sizes",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": 2,
   "max_ram_gib": 4,
   "sizes": [
    {
     "name": "half",
     "vcpu": 0.5,
     "ram_gib": 1,
     "disk_gib": 10,
     "hour": 0.06765,
     "month_cap": null
    },
    {
     "name": "standard",
     "vcpu": 1,
     "ram_gib": 2,
     "disk_gib": 20,
     "hour": 0.1353,
     "month_cap": null
    },
    {
     "name": "large",
     "vcpu": 2,
     "ram_gib": 4,
     "disk_gib": 20,
     "hour": 0.2706,
     "month_cap": null
    }
   ],
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": {},
   "note": "Retail API swedencentral: $0.10934/vCPU-h + $0.01298/GiB-h (+10% vs US). West/North Europe rows not in the API for this meter; eastasia and brazilsouth +20% ($0.11928 + $0.01416). Same idle-tail rule as hosted-eastus: compute bills until the idle timeout (default 15 min).",
   "cpu_class": "shared"
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": null
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null,
  "internet": {
   "default": "full"
  }
 },
 "plans": [
  {
   "name": "Pay as you go",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Model inference, tools and other services billed separately."
  }
 ],
 "free": {
  "monthly_credit": 0,
  "one_time_credit": 200
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "pause_resume": true,
  "fork": false,
  "persistent_disk": true,
  "volumes": null,
  "auto_stop_idle": true,
  "custom_image": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": true,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": true,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": true,
  "private_network": true,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": true,
  "hipaa": null,
  "sso": true,
  "gpu_types": [],
  "snapshot": "fs",
  "max_session_h": null,
  "regions": [
   "us",
   "other",
   "eu",
   "asia"
  ],
  "lang_python": true,
  "lang_node": false,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "snapshot_auto": false,
  "own_agent_api": true,
  "harness_api": false,
  "egress_allowlist_level": "both",
  "ingress_rules": true,
  "isolation": "hyper-v",
  "image_oci": true,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "snapshot_on_demand": false,
  "volume_attach": false,
  "volume_shared": false,
  "guest_firewall": false,
  "secret_proxy": false,
  "max_session_unlimited": true,
  "open_internet": true,
  "usage_api": false,
  "persist_scope": "folder",
  "persist_path": "$HOME and /files",
  "snapshot_scope": "folder",
  "browser_control": true
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "Exact billed idle-tail treatment and billing increment/minimum",
  "Storage and egress rates",
  "Deployment mapping for Code Interpreter global versus regional EP tariff",
  "Region quotas and access eligibility",
  "Code Interpreter per-session fee is documented in regimes, deliberately not flattened into an hourly size with unknown CPU/RAM.",
  "Storage, logs, network, model and external tool usage excluded.",
  "4 vCPU/8 GiB workload is infeasible as one hosted session.",
  "Use of allocated active-session duration is conservative; chargeable idle-tail semantics require invoice validation.",
  "Hosted agents also support C# (.NET) (\"Hosted agents support Python and C#.\", https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents, checked 2026-10-14); the schema has no C# language field, so it is not shown as a feature.",
  "Browser Automation runs in a separate Playwright Workspace resource with its own Playwright Workspaces pricing (\"This tool uses a Playwright workspace resource to run browser sessions.\", https://learn.microsoft.com/en-us/azure/foundry/agents/how-to/tools/browser-automation); not included in the hosted-agent rates."
 ],
 "sources": [
  "https://azure.microsoft.com/en-us/pricing/details/foundry-agent-service/",
  "https://prices.azure.com/api/retail/prices?$filter=productName%20eq%20%27Foundry%20Agents%27%20and%20armRegionName%20eq%20%27eastus%27",
  "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
  "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/limits-quotas-regions",
  "https://learn.microsoft.com/en-us/azure/foundry/agents/faq",
  "https://learn.microsoft.com/en-us/azure/foundry/agents/how-to/tools/code-interpreter",
  "https://learn.microsoft.com/en-us/azure/foundry/agents/how-to/tools/browser-automation",
  "https://learn.microsoft.com/en-us/azure/foundry/agents/how-to/tools/computer-use"
 ],
 "fleet": {
  "default_max_instances": 1000,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": "ticket",
  "raise_time_days": null,
  "verification": "Increase request specifies subscription, region and requested concurrent sessions. Azure signup uses phone and non-prepaid card for identity verification.",
  "tiers": "2,000 concurrent sessions in Canada Central, East US 2, Japan East, North Central US, South Africa North, Southeast Asia, Sweden Central; 1,000 in other supported regions.",
  "notes": "Field uses East US card region (1,000), per subscription/region across projects. Provisioning/running sessions consume quota; idle/stopped sessions do not. Model/tool quotas are separate.",
  "sources": [
   "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/limits-quotas-regions",
   "https://azure.microsoft.com/free/"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 5,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 8
 },
 "extras": [
  {
   "item": "File Search storage",
   "price": "$0.11/GB of vector storage per day, 1 GB free"
  },
  {
   "item": "Skills Execution Container",
   "price": "$0.033/hour eastus (EU $0.0363, westeurope/northeurope $0.0396); Retail Prices API, effective 2026-04-01"
  }
 ],
 "feature_evidence": {
  "snapshot_auto": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "If no request arrives within that window, the platform deprovisions the compute and persists the session state.",
   "note": "Only $HOME and /files are persisted on idle deprovision (2-60 min idle timeout, default 15) and restored onto new compute on resume: 'State persistence: $HOME and /files content are persisted across turns and across idle periods.' No memory/process state and no whole-filesystem snapshot are documented, so this is a persisted home directory (persistent_disk-like), not a machine snapshot. Borderline; could be read as a filesystem-only auto snapshot of $HOME.",
   "checked": "2026-09-29"
  },
  "own_agent_api": {
   "value": true,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Conversational chatbot or assistant | Responses | The platform manages conversation history, streaming events, and session lifecycle—use any OpenAI-compatible SDK as the client.",
   "note": "The platform-hosted Responses/Invocations/WebSocket/A2A endpoints drive the agent running inside the per-session sandbox: prompt, stream events, follow-ups via conversation ID, background mode, session list/terminate, and a session logstream (SSE). The harness is your own code. First-party samples wrap Claude Agent SDK (claude-agent-sdk, invocations), GitHub Copilot SDK (invocations/activity/voicelive) and Microsoft Agent Framework 'harness' samples. There is no turnkey 'run Claude Code' API: the harness adapter is sample code you deploy.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Conversational chatbot or assistant | Responses | The platform manages conversation history, streaming events, and session lifecycle—use any OpenAI-compatible SDK as the client.",
   "note": "The platform-hosted Responses/Invocations/WebSocket/A2A endpoints drive the agent running inside the per-session sandbox: prompt, stream events, follow-ups via conversation ID, background mode, session list/terminate, and a session logstream (SSE). The harness is your own code. First-party samples wrap Claude Agent SDK (claude-agent-sdk, invocations), GitHub Copilot SDK (invocations/activity/voicelive) and Microsoft Agent Framework 'harness' samples. There is no turnkey 'run Claude Code' API: the harness adapter is sample code you deploy.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/how-to/virtual-networks",
   "quote": "Agent subnet egress firewall allow list: If you integrate an Azure Firewall with your private network secured standard agent, add to the allow list the Fully Qualified Domain Names (FQDNs) listed under Managed Identity in the Integrate with Azure Firewall article or add the Service Tag AzureActiveDirectory. If you apply Network Security Groups (NSGs) to the delegated agent subnet or related subnets, configure matching outbound allow rules",
   "note": "Only with VNet injection (delegated Microsoft.App/environments subnet), which for hosted agents must be set when the Foundry account is created. Egress control is the customer's own Azure Firewall (FQDN rules) and NSGs (IP/port/service tag) on that subnet, enforced outside the sandbox. It applies per agent subnet, not per session. The hosted-agents page says hosted agents 'can use a customer-provided Azure Virtual Network for outbound traffic'.",
   "checked": "2026-09-29",
   "level": "both"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/how-to/virtual-networks",
   "quote": "All accounts and their corresponding projects are protected by default with the Public network access Disabled flag, requiring explicit configuration to allow access through private endpoints. These rules apply to all protocols, including REST and WebSocket.",
   "note": "The sandbox exposes no raw ports, only the platform agent endpoint, which requires Microsoft Entra ID auth. You can make the Foundry account private-endpoint-only. In the azd path the doc notes 'The deployed agent endpoint URL stays publicly addressable. Each user's sessions are isolated by their identity.'",
   "checked": "2026-09-29"
  },
  "isolation": {
   "value": "hyper-v",
   "source": "https://learn.microsoft.com/en-us/azure/well-architected/service-guides/azure-container-apps",
   "quote": "Dynamic sessions use Hyper-V isolation to provide strong kernel-level separation between sessions. Each session is automatically destroyed after use, which prevents data leakage between executions.",
   "note": "Foundry Agent Service hosted-agent networking/compute runs on Azure Container Apps ('Agent Service networking uses Azure Container Apps', per the FAQ). The hosted-agents doc says hosted agents run in 'per-session VM-isolated sandboxes' without naming the hypervisor; ACA's own per-session sandbox compute (dynamic sessions) is documented as Hyper-V isolated, so this is derived rather than stated verbatim for Foundry.",
   "checked": "2026-09-30"
  },
  "image_oci": {
   "value": true,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "You package your agent as a container image and push it to Azure Container Registry. When you deploy, Agent Service pulls the image, assigns a dedicated Microsoft Entra ID (agent identity), and exposes a dedicated endpoint for the agent.",
   "note": null,
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/container-apps/containers",
   "quote": "Privileged containers: Azure Container Apps doesn't allow privileged containers mode with host-level access.",
   "note": "Hosted agents run on Azure Container Apps compute, which explicitly disallows privileged containers, a prerequisite for running Docker/containers inside the sandbox.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/container-apps/containers",
   "quote": "Privileged containers: Azure Container Apps doesn't allow privileged containers mode with host-level access.",
   "note": "No /dev/kvm or privileged/host-level device access is documented; nested virtualization requires privileged mode, which is disallowed.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Hosted agents call models from the Foundry model catalog to perform reasoning while your custom code handles orchestration.",
   "note": "not offered: outside the product's scope",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": true,
   "corrected_from": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/how-to/tools/browser-automation",
   "quote": "The Browser Automation Tool (BAT) is generally available in Microsoft Foundry. It enables scalable, reliable browser-based automation within Foundry agents. It's available as an MCP tool powered by Playwright Workspaces as its headless browser infrastructure layer.",
   "note": "First-party managed headless browser, but it runs remotely in a separate Playwright Workspace resource, not inside the hosted-agent sandbox (\"Because the browser runs remotely in Playwright Workspaces, the agent doesn't need a locally installed browser or Playwright runtime\"). Usable from hosted agents only with \"a Playwright Workspace in a region that also supports hosted agents\"; Browser Automation regions: australiaeast, eastasia, eastus, japaneast, switzerlandnorth, westeurope, westus3. Billed separately by Playwright Workspaces (not modelled). Corrected from false (\"outside the product's scope\").",
   "checked": "2026-10-14"
  },
  "computer_use": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/how-to/tools/computer-use",
   "quote": "A virtual machine or sandboxed environment for safe testing. Don't run on machines with access to sensitive data.",
   "note": "A computer use tool exists (preview, computer-use-preview model, access by registration: \"Microsoft grants access based on eligibility criteria\"), but it only proposes actions from screenshots; your application code carries out each action on a machine you supply. Foundry provides no desktop/VM for it to act on, so false for a provided computer-use environment.",
   "checked": "2026-10-14"
  },
  "anti_bot": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Hosted agents call models from the Foundry model catalog to perform reasoning while your custom code handles orchestration.",
   "note": "not offered: outside the product's scope",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Hosted agents call models from the Foundry model catalog to perform reasoning while your custom code handles orchestration.",
   "note": "not offered: outside the product's scope",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://learn.microsoft.com/en-us/azure/container-apps/networking",
   "quote": "Used as the \"from\" IP for outbound connections that leave the virtual network. These connections aren't routed down a VPN. Outbound IPs might change over time.",
   "note": "Standard Azure datacenter outbound IPs (from the ACA environment/NAT Gateway); no residential/mobile egress is offered.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "You package your agent as a container image and push it to Azure Container Registry. When you deploy, Agent Service pulls the image ... and exposes a dedicated endpoint for the agent.",
   "note": "The only documented interfaces are the container-image deploy path and the Responses/Invocations/WebSocket/A2A HTTP(S) protocol endpoints; no shell/SSH access into the running sandbox is documented.",
   "checked": "2026-09-30"
  },
  "snapshot_on_demand": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "No requests for the configured idle timeout. The platform deprovisions compute and persists session state ($HOME, /files).",
   "note": "Only automatic persistence of $HOME/files on idle deprovision is documented; there is no API/CLI to take an on-demand snapshot/checkpoint.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Each call to create a version produces an immutable agent version. The version is a snapshot of the container image, resource allocation, environment variables, and protocol configuration.",
   "note": "No documented capability to clone a running session/sandbox into a new one; versions are configuration snapshots, not machine clones.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Each call to create a version produces an immutable agent version.",
   "note": "No documented capability to clone a running sandbox without stopping it.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Each call to create a version produces an immutable agent version.",
   "note": "No fork capability at all is documented, so a memory-preserving fork is not offered.",
   "checked": "2026-09-30"
  },
  "volume_attach": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Each session has a total disk budget of up to 20 GiB at 1 vCPU or larger ... The remainder is shared between your container image, $HOME, and any other writable locations in your container.",
   "note": "Storage is a fixed per-session disk budget for the container image plus $HOME/files; no separate attachable persistent volume is documented.",
   "checked": "2026-09-30"
  },
  "volume_shared": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Sessions are isolated from each other, and state is automatically restored when a session resumes after going idle.",
   "note": "Each session has its own isolated $HOME/files; no volume mountable by multiple simultaneously-running sessions is documented.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Each call to create a version produces an immutable agent version. The version is a snapshot of the container image, resource allocation, environment variables, and protocol configuration. To update your agent, create and deploy a new version.",
   "note": "CPU/RAM (resource allocation) is fixed per immutable version; changing it requires creating and deploying a new version, not a live resize of a running sandbox.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "For user delegation with MCP and other tools, connect those tools through a Foundry toolbox.",
   "note": "Foundry's MCP integration is a client-side Toolbox for connecting MCP tools into an agent, and Azure's general-purpose 'Azure MCP Server' (github.com/Azure/azure-mcp) does not document control of Foundry hosted-agent sessions; no first-party MCP server to manage/drive hosted-agent sandboxes was found.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Hosted agents support Python and C#. You can use any agent framework—the protocol libraries are framework-agnostic.",
   "note": "Server-side hosted-agent protocol libraries/framework support is limited to Python and C#/.NET; Node.js is only mentioned client-side ('Any OpenAI-compatible SDK (Python, JS, C#) works out of the box') for calling the agent, not for building the hosted agent runtime itself.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Agent Service provisions compute for the session and routes requests to your container.",
   "note": "Access is only via the dedicated platform-managed agent endpoint (HTTPS/WebSocket); no per-machine public IPv4 address is exposed.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": true,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Agent Service pulls the image, assigns a dedicated Microsoft Entra ID (agent identity), and exposes a dedicated endpoint for the agent.",
   "note": "Endpoint is reached over HTTPS/WSS, e.g. wss://{account}.services.ai.azure.com/.../endpoint/protocols/invocations_ws.",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/how-to/virtual-networks",
   "quote": "Agent subnet egress firewall allow list: ... add to the allow list the Fully Qualified Domain Names (FQDNs) ... or add the Service Tag AzureActiveDirectory. If you apply Network Security Groups (NSGs) ... configure matching outbound allow rules.",
   "note": "Egress control is FQDN-based (Azure Firewall) or IP/port/service-tag based (NSGs); no HTTP method/path-level egress rule granularity is documented.",
   "checked": "2026-09-30"
  },
  "guest_firewall": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/container-apps/containers",
   "quote": "Privileged containers: Azure Container Apps doesn't allow privileged containers mode with host-level access.",
   "note": "Hosted agents run as non-privileged containers on Azure Container Apps compute; no NET_ADMIN/privileged capability for guest-side iptables/nftables is documented.",
   "checked": "2026-09-30"
  },
  "secret_proxy": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Don't put secrets in container images or environment variables. Use managed identities and connections, and store secrets in a managed secret store.",
   "note": "Auth to Azure/downstream services is via managed identity/Key Vault connections, not a first-party HTTP proxy that injects arbitrary API credentials so secrets never enter the machine.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": true,
   "source": "https://learn.microsoft.com/en-us/azure/container-apps/networking",
   "quote": "Azure NAT gateway integration: Use Azure NAT Gateway to simplify outbound internet connectivity in your virtual network in a workload profile environment.",
   "note": "Hosted agents can be deployed into a customer VNet-injected Container Apps environment (per the hosted-agents/virtual-networks docs); that environment type supports attaching an Azure NAT Gateway for a fixed outbound IP, same mechanism recorded for azure-container-apps.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Hosted agent sandboxes support the following CPU and memory combinations",
   "note": "Only CPU/RAM sandbox sizes (0.5/1, 1/2, 2/4 vCPU/GiB) are documented; no GPU sandbox option exists.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://azure.microsoft.com/en-us/pricing/details/foundry-agent-service/",
   "quote": "Hosted vCPU Usage / Hosted Memory Usage (Linux)",
   "note": "Card models hosted-agent sandboxes as Linux-only (os: [\"linux\"]); no Windows sandbox option is documented.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Hosted agents are containerized agentic AI applications that run on Agent Service.",
   "note": "not offered: outside the product's scope",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "The platform handles scaling, session state persistence, observability, and lifecycle management.",
   "note": "Foundry Agent Service is a Microsoft-managed platform on Microsoft-managed infrastructure; there is no self-hosted/on-prem distribution.",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "You choose the framework, control the runtime behavior, and deploy the image to Microsoft-managed infrastructure.",
   "note": "Runs on Microsoft-managed Azure infrastructure inside the customer's Azure subscription/VNet, not a bring-your-own-cloud-account deployment of the managed control plane itself.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://azure.microsoft.com/en-us/pricing/details/foundry-agent-service/",
   "quote": "Foundry Agent Service",
   "note": "Proprietary Microsoft-managed Azure service; the core platform is not released under an OSI license.",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": true,
   "source": "https://azure.microsoft.com/en-us/explore/trusted-cloud/compliance/",
   "quote": "Get independent audit reports verifying that Azure adheres to security controls for ISO 27001, ISO 27018, SOC 1, SOC 2, SOC3, FedRAMP, HITRUST, MTCS, IRAP, and ENS.",
   "note": "Foundry is documented as an Azure service inheriting Azure's compliance program ('Foundry is an Azure service; learn more about applicable Azure compliance offerings.' – data-privacy doc); SOC 2 is part of Azure's general attestations.",
   "checked": "2026-09-30"
  },
  "sso": {
   "value": true,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/faq",
   "quote": "Foundry Account Owner: Create accounts and projects. Foundry User: Create and edit agents.",
   "note": "Access to Foundry accounts/projects and the agent endpoints is via Microsoft Entra ID, which supports SAML/OIDC SSO federation for organizational identity providers.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Compute follows the session, not the individual request. The platform provisions a sandbox when a session starts and releases it when the configured idle timeout elapses after the most recent request.",
   "note": "No documented maximum session/session-length cap; a session's compute stays active indefinitely as long as requests keep arriving before the idle timeout (2-60 min) elapses, and is only deleted after 30 days of total inactivity.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/container-apps/containers",
   "quote": "Azure Container Apps supports: Any Linux-based x86-64 (linux/amd64) container image ... Operating system: Linux-based (linux/amd64) container images are required.",
   "note": "Hosted agents deploy a container image to Foundry Agent Service, which runs on Azure Container Apps compute; ACA only accepts linux/amd64 (x86-64) images, so no ARM64 option exists.",
   "checked": "2026-09-30"
  },
  "cpu_class": {
   "value": {
    "hosted-eastus": "shared",
    "hosted-eu": "shared"
   },
   "source": "https://learn.microsoft.com/en-us/azure/container-apps/plans",
   "quote": "Consumption: Serverless environment with support for scale-to-zero and paying only for resources that your apps use. ... Dedicated: ... Compute isolation: Dedicated workload profiles provide access to dedicated hardware with a single tenant guarantee.",
   "note": "Foundry hosted agents bill per allocated vCPU-hour/GiB-hour on Azure Container Apps compute (per the FAQ: 'Agent Service networking uses Azure Container Apps') with small fractional sizes (0.5/1/2 vCPU) and no workload-profile/Dedicated-plan selection documented for hosted agents; ACA's Dedicated plan (with its 'single tenant guarantee' on dedicated hardware) is a separate, differently priced offering not referenced anywhere in the hosted-agents docs, implying hosted-agent sessions run on the default multi-tenant Consumption-style compute, i.e. shared/oversubscribed vCPUs rather than dedicated cores. No explicit 'shared vCPU' statement was found for hosted agents specifically, so this is derived rather than a direct quote about hosted agents.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Managed hosting runtime billing is based on consumption of CPU and memory resources during active sessions. For current rates, see the Foundry pricing page. To right-size, run a representative workload and inspect resource usage in the linked Application Insights resource.",
   "note": "granularity: none; cost: no; Foundry Hosted Agents billing is based on CPU/memory consumption during active sessions. While Azure Cost Management Query API exists and can query Azure resources by tag/dimension, Foundry Hosted Agent sessions are ephemeral (created/destroyed dynamically) and not persistent queryable resources. The only documented usage inspection is via Application Insights metrics (CPU, memory, request rate) in the portal's Performance view, which is monitoring data not billing/cost data. No first-party Foundry API endpoint exists to programmatically query billable usage by sandbox/session/agent/project. The FAQ references 'To understand usage and monitoring options, see Metrics and Monitor the service' but both link to Application Insights dashboards, not usage/billing APIs.",
   "confidence": "medium",
   "checked": "2026-10-01"
  },
  "persist_scope": {
   "value": "folder",
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "If no request arrives within that window, the platform deprovisions the compute and persists the session state.",
   "note": "Only $HOME and /files survives a stop; the rest of the filesystem (packages installed elsewhere) resets.",
   "checked": "2026-10-01"
  },
  "browser_control": {
   "value": true,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/how-to/tools/browser-automation",
   "quote": "In Microsoft Foundry, Browser Automation integrates through toolboxes and uses the Playwright Workspaces remote Model Context Protocol (MCP) server for managed browser execution.",
   "note": "The agent drives the managed browser through Playwright Workspaces remote MCP tools attached via a Foundry toolbox; Live View and browser session data for observing sessions. Private website browsing is public preview.",
   "checked": "2026-10-14"
  },
  "lang_python": {
   "value": true,
   "source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
   "quote": "Hosted agents support Python and C#. You can use any agent framework—the protocol libraries are framework-agnostic.",
   "note": "C# (.NET) is also supported for the hosted agent runtime; the schema has no C# field, see caveats.",
   "checked": "2026-10-14"
  }
 },
 "locations": [
  {
   "country": "AU",
   "state": "NSW",
   "city": "Sydney",
   "provider_region": "australiaeast",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "BR",
   "state": "SP",
   "city": "São Paulo",
   "provider_region": "brazilsouth",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CA",
   "state": "ON",
   "city": "Toronto",
   "provider_region": "canadacentral",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CA",
   "state": "QC",
   "city": "Quebec City",
   "provider_region": "canadaeast",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "US",
   "state": "IA",
   "city": "Des Moines",
   "provider_region": "centralus",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "US",
   "state": "VA",
   "city": "Ashburn",
   "provider_region": "eastus",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "US",
   "state": "VA",
   "city": "Leesburg",
   "provider_region": "eastus2",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "FR",
   "state": null,
   "city": "Paris",
   "provider_region": "francecentral",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "DE",
   "state": null,
   "city": "Frankfurt",
   "provider_region": "germanywestcentral",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "IT",
   "state": null,
   "city": "Milan",
   "provider_region": "italynorth",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "JP",
   "state": null,
   "city": "Tokyo",
   "provider_region": "japaneast",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "JP",
   "state": null,
   "city": "Osaka",
   "provider_region": "japanwest",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "KR",
   "state": null,
   "city": "Seoul",
   "provider_region": "koreacentral",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "US",
   "state": "IL",
   "city": "Chicago",
   "provider_region": "northcentralus",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "NO",
   "state": null,
   "city": "Oslo",
   "provider_region": "norwayeast",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "PL",
   "state": null,
   "city": "Warsaw",
   "provider_region": "polandcentral",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "ZA",
   "state": null,
   "city": "Johannesburg",
   "provider_region": "southafricanorth",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "US",
   "state": "TX",
   "city": "San Antonio",
   "provider_region": "southcentralus",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "IN",
   "state": null,
   "city": "Chennai",
   "provider_region": "southindia",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "SG",
   "state": null,
   "city": "Singapore",
   "provider_region": "southeastasia",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "ES",
   "state": null,
   "city": "Madrid",
   "provider_region": "spaincentral",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "SE",
   "state": null,
   "city": "Västerås",
   "provider_region": "swedencentral",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CH",
   "state": null,
   "city": "Zurich",
   "provider_region": "switzerlandnorth",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CH",
   "state": null,
   "city": "Geneva",
   "provider_region": "switzerlandwest",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "AE",
   "state": null,
   "city": "Dubai",
   "provider_region": "uaenorth",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "GB",
   "state": null,
   "city": "London",
   "provider_region": "uksouth",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "GB",
   "state": null,
   "city": "Cardiff",
   "provider_region": "ukwest",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "US",
   "state": "WY",
   "city": "Cheyenne",
   "provider_region": "westcentralus",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "NL",
   "state": null,
   "city": "Amsterdam",
   "provider_region": "westeurope",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "US",
   "state": "CA",
   "city": "San Francisco",
   "provider_region": "westus",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "US",
   "state": "AZ",
   "city": "Phoenix",
   "provider_region": "westus3",
   "self_serve": true,
   "choosable": true
  }
 ],
 "locations_source": "https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/hosted-agents",
 "locations_quote": "Hosted agents are currently available in the following regions: Australia East, Brazil South, Canada Central, Canada East, Central US, East US, East US 2, France Central, Germany West Central, Italy North, Japan East, Japan West, Korea Central, North Central US, Norway East, Poland Central, South Africa North, South Central US, South India, Southeast Asia, Spain Central, Sweden Central, Switzerland North, Switzerland West, UAE North, UK South, UK West, West Central US, West Europe, West US, West US 3",
 "locations_checked": "2026-10-14",
 "locations_note": "31 regions from the hosted-agents page (2026-10-14). East Asia (Hong Kong), on the earlier card, is not in the hosted-agent list and was dropped. westus3 corrected from Los Angeles to Phoenix, AZ. Cities follow the azure-container-apps card; quota tiers per region are in fleet."
}