{
 "features_resolved": {
  "snapshot_any": false,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": false,
  "persistent_disk": false,
  "whole_disk": false,
  "persist_scope": null,
  "volumes": false,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": false,
  "image_oci": false,
  "vm_isolation": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": false,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": false,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": true,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": false,
  "raw_tcp_inbound": false,
  "egress_allowlist": true,
  "open_internet": null,
  "static_egress_ip": false,
  "private_network": true,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": true,
  "hipaa": true,
  "sso": true,
  "gpu": false,
  "arm64": false,
  "windows": true,
  "macos": false,
  "lang_python": false,
  "lang_node": false,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": null,
  "egress_http_rules": true,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "own_agent_api": true,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": false,
  "guest_firewall": true,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "windows-365-agents",
  "checked": "2026-09-30",
  "company": "Microsoft Corporation",
  "ownership": {
   "value": "subsidiary",
   "parent": "Microsoft Corporation",
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/introduction-windows-365-for-agents",
   "quote": "Windows 365 for Agents is the trusted platform for secure, scalable agentic compute, which enables enterprise-grade automation and integration across the Microsoft ecosystem."
  },
  "stage": {
   "value": "subsidiary",
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/introduction-windows-365-for-agents",
   "quote": "Windows 365 for Agents is the trusted platform for secure, scalable agentic compute, which enables enterprise-grade automation and integration across the Microsoft ecosystem.",
   "confidence": "high",
   "note": "Windows 365 for Agents is a product line within Microsoft's Windows 365 / Copilot Studio / Intune / Entra stack, not an independently funded company. Microsoft itself is a public company (NASDAQ: MSFT); no separate funding round applies."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": "n/a",
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value_usd": 281724000000,
   "kind": "annual revenue",
   "as_of": "FY2025 (ended 2025-06-30)",
   "status": "confirmed",
   "basis": "Whole-company Microsoft Corporation revenue from its FY2025 annual results (10-K); Windows 365 for Agents itself is a small feature line inside Windows 365/Intune/Copilot Studio with no separately disclosed revenue.",
   "source": "https://www.microsoft.com/en-us/investor/earnings/fy-2025-q4/press-release-webcast",
   "quote": "Microsoft Cloud revenue was $168.9 billion... Revenue was $76.4 billion in the fourth quarter"
  },
  "employees": {
   "value": null,
   "source": ""
  },
  "note": "Windows 365 for Agents is a Microsoft first-party product (Cloud PCs for AI computer-use agents, billed per Cloud PC hour, integrated with Copilot Studio / Project Opal / Researcher / Agent 365, Intune and Entra). It is not an independent company: no separate funding, accelerator, or revenue figures exist for it. Figures given are for Microsoft Corporation as a whole (public company, NASDAQ: MSFT)."
 },
 "id": "windows-365-agents",
 "name": "Windows 365 for Agents",
 "url": "https://learn.microsoft.com/en-us/windows-365/agents/pricing-paygo-always-available",
 "category": "windows",
 "isolation": "vm",
 "modes": [
  {
   "key": "on-demand",
   "label": "Pay-as-you-go Cloud PC for Agents (US geography)",
   "flags": [],
   "os": [
    "windows"
   ],
   "gpu_only": false,
   "features": {
    "computer_use": true,
    "desktop": true
   },
   "pricing": "sizes",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": [
    {
     "name": "Cloud PC for Agents (hardware spec not published)",
     "vcpu": null,
     "ram_gib": null,
     "disk_gib": null,
     "hour": 0.4,
     "month_cap": null
    }
   ],
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 3600,
   "granularity_s": 3600,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "\"For US Geography, the Windows 365 for Agents Cloud PCs are billed at $0.40 per hour for consumption. Usage is calculated as the total time spent running agent tasks on provisioned Cloud PCs within each hourly window, rounded up to the next full hour.\" Always-available Cloud PCs are the same Cloud PC and the same $0.40/h usage plus \"$5 per Cloud PC per month ... in addition to any Pay-as-you-go based usage\" (merged here; the $5 add-on is not in the mode maths). Windows licence included. Sessions have no fixed maximum duration while the agent sends an MCP request at least every 30 minutes; after 30 minutes without MCP activity the session is evicted, the Cloud PC resets, and capacity returns to the pool.",
   "regions": [
    "us"
   ]
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": false,
  "snapshot_gib_month": null,
  "paused_ram_billed": false
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": false
 },
 "plans": [
  {
   "name": "Pay-as-you-go (Microsoft tenant)",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Driven through Copilot Studio computer use, Project Opal, Researcher or Agent 365; provisioning policies / agent pools in Intune. Any prerequisite Copilot Studio / Agent 365 licences are not included here."
  }
 ],
 "free": {
  "monthly_credit": 0,
  "one_time_credit": 0
 },
 "features": {
  "linux": true,
  "windows": true,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "gpu_types": [],
  "snapshot": "none",
  "pause_resume": false,
  "fork": false,
  "persistent_disk": false,
  "volumes": null,
  "auto_stop_idle": true,
  "max_session_h": null,
  "custom_image": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": false,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": false,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": false,
  "raw_tcp_inbound": false,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": true,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "regions": [
   "us"
  ],
  "soc2": true,
  "hipaa": true,
  "sso": true,
  "lang_python": false,
  "lang_node": false,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": null,
  "egress_http_rules": true,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "egress_allowlist_level": "domain",
  "guest_firewall": true,
  "isolation": "hyper-v",
  "image_oci": false,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "volume_attach": false,
  "volume_shared": false,
  "own_agent_api": true,
  "ingress_rules": false,
  "secret_proxy": false,
  "max_session_unlimited": true,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "Cloud PC vCPU/RAM/disk not published (sizes vcpu/ram null): the engine cannot size-match; treat as one Cloud PC per agent session at $0.40/h.",
  "Only the US price is published; \"Pricing varies based on the geography where Cloud PCs are provisioned.\"",
  "Rounding is per hourly window: a 10-minute task bills a full hour; tasks straddling a window boundary can bill 2 hours.",
  "Always-available option (formerly a separate regime, merged 2026-09-28): same $0.40/h usage plus a fixed $5 per Cloud PC per month for instant availability (interactive / Agent 365). Add $5 x always-available PCs to the monthly total; not captured by the mode maths.",
  "Microsoft-stack only: agents run through Copilot Studio / Project Opal / Researcher / Agent 365 and Intune; not a generic VM or sandbox API. Prerequisite product licences are not included.",
  "Storage, egress, IPv4: none published / not applicable (null)."
 ],
 "sources": [
  "https://learn.microsoft.com/en-us/windows-365/agents/pricing-paygo-always-available",
  "https://learn.microsoft.com/en-us/windows-365/agents/introduction-windows-365-for-agents"
 ],
 "audit_2026_09_29": {
  "applied": 2,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 2
 },
 "fleet": {
  "default_max_instances": null,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": null,
  "raise_time_days": null,
  "verification": null,
  "tiers": null,
  "notes": "Agent pools are sized by a Cloud PC count; active plus available sessions equals the provisioning policy's always-available Cloud PC count. Public default and maximum counts were not found.",
  "sources": [
   "https://learn.microsoft.com/en-us/windows-365/agents/device-management-cloud-pcs-agents"
  ]
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/agent-session-lifecycle",
   "quote": "Checkpoint state externally. In-session state does not survive an unexpected session loss. If the session is interrupted, the Cloud PC resets on release and any unsaved work inside the session is lost.",
   "note": "Cloud PCs for Agents are stateless: reset to the provisioned image after every session (checkin, policy termination or 30-min idle eviction). Nothing is saved.",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/security-overview",
   "quote": "Cloud PCs are stateless and reset after every agent session, which ensures that no credentials persist and no trust carries across workloads.",
   "note": "No snapshot/checkpoint API in the Session API, MCP tools or Graph pool APIs; docs tell you to save progress to external storage. Pools boot from gallery or uploaded custom images (admin-side image, not a session snapshot).",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/architecture-overview",
   "quote": "Agentic app: A host that contains a model and an orchestrator. The orchestrator calls Computer-Get to claim a Cloud PC and Computer-Do to operate it.",
   "note": "The agent (Copilot Studio, Project Opal, Researcher, Manus, your own) runs outside; the Cloud PC is driven via a per-session MCP endpoint (mouse/keyboard/screenshot, command execution, browser automation). That is a computer-use/exec surface, not an API to drive a harness inside the PC.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/network-security-globalsecureaccess",
   "quote": "GSA monitors and enforces policy across all outbound traffic from the Cloud PC. The internet traffic flows through the internet access profile. This approach allows organizations to apply web content filtering, URL-based controls, and threat protection policies inline",
   "note": "Via Microsoft Entra Global Secure Access (Entra Internet Access, separately licensed): FQDN / URL / web-category allow/block, enforced in Microsoft's Security Service Edge, but traffic capture depends on the GSA client deployed into the Cloud PC via Intune. No native per-pool network allowlist in W365A itself.",
   "checked": "2026-09-29",
   "level": "domain"
  },
  "egress_http_rules": {
   "value": true,
   "source": "https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-web-content-filtering",
   "quote": "HTTP method request filtering: Block or allow specific HTTP methods, such as GET, POST, PUT, PATCH, and DELETE.",
   "note": "Entra Internet Access web content filtering (used by W365A via GSA) also supports URL filtering and an agent-vs-user source traffic type condition. Separate Microsoft product/licence; client-based traffic capture.",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": true,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/windows365foragentssecuritybaseline",
   "quote": "This security Baseline includes Microsoft-recommended settings across several security categories such as Microsoft Defender Antivirus, Microsoft Defender Firewall, Attack Surface Reduction (ASR), credential protection, browser security, and operating system hardening.",
   "note": "Windows 11 Cloud PC (full VM); host firewall is Windows Defender Firewall (not nftables/iptables), configured by admins through Intune policy. Whether the agent user has local admin is not documented.",
   "checked": "2026-09-29",
   "derived": true
  },
  "isolation": {
   "value": "hyper-v",
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/architecture-overview",
   "quote": "Virtual machines (Windows): The end workloads. Each VM runs an on-box CUA client that enables agentic control.",
   "note": "Cloud PCs for Agents are Windows VMs hosted on Azure infrastructure; the page confirms 'virtual machine' isolation but does not name the hypervisor. Azure's Windows Cloud PC / Azure Virtual Desktop stack runs on Hyper-V, so this is derived rather than stated verbatim on the Agents docs themselves.",
   "checked": "2026-09-30"
  },
  "image_oci": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/cloud-pc-agent-pools",
   "quote": "Each pool is defined by required properties, including: Billing plan, Region, Count of Cloud PCs, Image",
   "note": "not offered: outside the product's scope. Pools boot from Windows gallery/custom Windows images configured through Intune provisioning policy, not Docker/OCI images.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/pricing-paygo-always-available",
   "quote": "Cloud PC for Agents (hardware spec not published)",
   "note": "not offered: outside the product's scope. Regular Windows 365 Enterprise only advertises Hyper-V/WSL (nested virtualization) on its top-tier 8 vCPU SKU; W365 for Agents publishes no hardware spec and no docs page mentions nested virtualization for the agent Cloud PC image.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/introduction-windows-365-for-agents",
   "quote": "Windows 365 for Agents provides secure, isolated Cloud PCs that AI agents can use to complete tasks such as web browsing, form filling, and application interaction.",
   "note": "not offered: outside the product's scope. It is an enterprise remote-Windows-PC platform for computer-use agents inside a managed/audited environment, not a stealth/anti-fingerprinting browsing product.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/introduction-windows-365-for-agents",
   "quote": "Windows 365 for Agents provides secure, isolated Cloud PCs that AI agents can use to complete tasks such as web browsing, form filling, and application interaction.",
   "note": "not offered: outside the product's scope. No CAPTCHA-solving capability is documented anywhere in the MCP tool set or architecture.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/network-security-globalsecureaccess",
   "quote": "GSA monitors and enforces policy across all outbound traffic from the Cloud PC. The internet traffic flows through the internet access profile.",
   "note": "Outbound traffic originates from Azure-hosted Cloud PCs and, when configured, is routed through Microsoft's Global Secure Access edge; both are Microsoft datacenter/cloud IP ranges, not residential/mobile IPs.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/cloud-pc-agent-pools",
   "quote": "Persistence: Reset after use",
   "note": "No clone/fork API exists; Cloud PCs are drawn from a pool and reset to the provisioned image after each session.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/cloud-pc-agent-pools",
   "quote": "Persistence: Reset after use",
   "note": "No fork capability at all, so cloning a running machine is not offered.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/agent-session-lifecycle",
   "quote": "Checkpoint state externally. In-session state does not survive an unexpected session loss.",
   "note": "No fork/clone feature exists, and in-session (including memory) state is explicitly not preserved across sessions.",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/agent-session-lifecycle",
   "quote": "Release is handled by Computer-Get: the channels are torn down, the Cloud PC is reset, billing is finalized, and the Cloud PC returns to its pool, ready to serve another request.",
   "note": "Sessions are checked out/in and end with a full reset, not paused for later resumption; there is no pause/resume API in the Session or MCP surfaces.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/mcp-tool-overview",
   "quote": "Checkout may take up to 30 seconds while a device is assigned.",
   "note": "Checkout assigns an available Cloud PC from a shared pool (or provisions a new one on demand within the PAYG window) rather than waking a specific previously-stopped/sleeping machine; this is pool assignment, not wake-on-request of a suspended instance.",
   "checked": "2026-09-30"
  },
  "volume_attach": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/agent-session-lifecycle",
   "quote": "Save progress to external storage at regular intervals, and build your agent to handle a 404 Not Found response by re-acquiring a fresh Cloud PC and resuming from the last checkpoint.",
   "note": "not offered: no extra attachable persistent volume/disk API is documented; the guidance is to save state to external storage outside the Cloud PC entirely.",
   "checked": "2026-09-30"
  },
  "volume_shared": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/agent-session-lifecycle",
   "quote": "Save progress to external storage at regular intervals, and build your agent to handle a 404 Not Found response by re-acquiring a fresh Cloud PC and resuming from the last checkpoint.",
   "note": "not offered: no shared-volume mechanism between running Cloud PCs is documented; each Cloud PC in the pool is an independent, stateless VM.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/cloud-pc-agent-pools",
   "quote": "When you edit a provisioning policy (agents), some properties require you to reprovision the pool to update existing Cloud PCs.",
   "note": "Size/image are pool-level properties; changing them requires reprovisioning rather than a live resize of a running Cloud PC, and no runtime CPU/RAM resize API is documented.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": true,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/mcp-tool-overview",
   "quote": "The AI agent initializes the MCP session against {computerUrl}/mcp and drives the Cloud PC through the Computer-Do tools... The MCP plane covers desktop interaction (mouse, keyboard, screenshot capture), window management, command execution, browser automation and UI accessibility capabilities.",
   "note": "Microsoft's own Computer-Get/Computer-Do MCP session API is a first-party API driving a computer-use agent (click/type/navigate/run) against the Cloud PC; this is exactly the provider's own task/computer-use agent surface, distinct from hosting a third-party coding harness.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/introduction-windows-365-for-agents",
   "quote": "Windows 365 for Agents provides secure, isolated Cloud PCs that AI agents can use to complete tasks such as web browsing, form filling, and application interaction.",
   "note": "not offered: outside the product's scope. Cloud PCs for Agents boot a Windows 11 desktop image for computer-use tasks; no docs page lists a preinstalled Python runtime or first-party Python code-exec SDK.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/introduction-windows-365-for-agents",
   "quote": "Windows 365 for Agents provides secure, isolated Cloud PCs that AI agents can use to complete tasks such as web browsing, form filling, and application interaction.",
   "note": "not offered: outside the product's scope. Same as Python: it is a Windows desktop CUA environment, not a documented Node.js runtime/code-exec offering.",
   "checked": "2026-09-30"
  },
  "ingress_rules": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/security-overview",
   "quote": "Verify explicitly: Every agent session is authenticated through Microsoft Entra with token-based, device-bound credentials. Conditional Access evaluates identity and context, and allows agent access only from compliant devices.",
   "note": "not offered: outside the product's scope. The card already records no public IPv4/inbound HTTPS/raw TCP for this product, so there are no exposed ports to gate; access control is Entra Conditional Access on who may acquire/connect to a session, not port-level ingress rules on the machine.",
   "checked": "2026-09-30"
  },
  "secret_proxy": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/agent-authentication-model",
   "quote": "Each Cloud PC for Agents is Microsoft Entra-joined and Microsoft Intune-enrolled, which gives agents a managed identity and device posture from day one.",
   "note": "Authentication is via Entra identity/tokens for the session and admin surfaces; there is no documented first-party HTTP proxy that injects arbitrary third-party API credentials into outbound calls so a secret never enters the machine.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/agent-session-lifecycle",
   "quote": "A session has no fixed maximum duration. As long as the agent sends at least one MCP request every 30 minutes, the session remains active and the Cloud PC stays reserved for it.",
   "note": "No hard cap on runtime; a session is only ended by explicit release, policy termination, or 30 minutes of MCP inactivity (idle eviction), not by an elapsed-time limit.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/agent-session-lifecycle",
   "quote": "Checkpoint state externally. In-session state does not survive an unexpected session loss. If the session is interrupted, the Cloud PC resets on release and any unsaved work inside the session is lost. Save progress to external storage at regular intervals, and build your agent to handle a 404 Not Found response by re-acquiring a fresh Cloud PC and resuming from the last checkpoint.",
   "note": "Release phase always resets the Cloud PC and returns it to the pool; no disk survives across sessions. Docs explicitly instruct saving state to external storage instead.",
   "checked": "2026-09-30"
  },
  "snapshot": {
   "value": "none",
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/agent-session-lifecycle",
   "quote": "Release A session ends when the agent declares its work complete, when policy terminates it, or when it goes idle too long. Release is handled by Computer-Get: the channels are torn down, the Cloud PC is reset, billing is finalized, and the Cloud PC returns to its pool, ready to serve another request.",
   "note": "No session snapshot/checkpoint API exists in Computer-Create/Get/Do/TakeControl; every release is a reset-to-pool-image, not a saved snapshot. Matches existing feature_evidence for snapshot_auto/snapshot_on_demand.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/architecture-overview",
   "quote": "Computer-Do executes commands on an assigned Cloud PC. It's the plane through which agents drive the operating system. Key elements: MCP server: Exposes the action API (click, type, navigate, run) to orchestrators. Relay and protocol: Transports action requests from the agent to the on-box CUA client running inside the target Cloud PC.",
   "note": "All command execution goes through the brokered MCP/relay 'Computer-Do' plane and the on-box CUA client; the architecture defines no SSH endpoint, and no SSH access is documented anywhere in the agents docs set.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/architecture-overview",
   "quote": "Computer-Get: assignment Computer-Get brokers available Cloud PCs from the pool to the caller that needs one. ... Connect With a Cloud PC reserved, the agent opens a working channel to it through the Computer-Do plane. This channel is the conduit through which the agent issues every subsequent instruction. It's authenticated, bound to the session, and terminates at the in-guest component running inside the Cloud PC.",
   "note": "Only outbound-initiated, brokered MCP/relay/IC3-media channels are documented (agent/human -> platform -> Cloud PC); no documented way to expose an HTTPS listener on the Cloud PC for arbitrary inbound traffic from the internet.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/network-security-globalsecureaccess",
   "quote": "GSA monitors and enforces policy across all outbound traffic from the Cloud PC. The internet traffic flows through the internet access profile.",
   "note": "Networking docs describe only outbound traffic routed through Global Secure Access; no product page publishes or offers a per-Cloud-PC public IPv4 address.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/pricing-paygo-always-available",
   "quote": "For US Geography, the Windows 365 for Agents Cloud PCs are billed at $0.40 per hour for consumption.",
   "note": "Pricing page lists a single, hardware-spec-unpublished Cloud PC size with no GPU line item or GPU SKU; no GPU/graphics option is mentioned anywhere across the agents docs (architecture, pricing, session lifecycle, security).",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/architecture-overview",
   "quote": "Virtual machines (Windows): The end workloads. Each VM runs an on-box CUA client that enables agentic control.",
   "note": "Product is Windows (and, for one partner solution, Linux) Cloud PCs on Azure; macOS is plainly outside what the product is.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/pricing-paygo-always-available",
   "quote": "\"Cloud PC for Agents (hardware spec not published)\"",
   "note": "No ARM64 image/SKU is published anywhere in the agents docs; Cloud PC hardware spec is undisclosed and Windows 365 generally ships x64 Cloud PCs, so ARM64 is not offered.",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/architecture-overview",
   "quote": "Scalable, Hosted on behalf of: The infrastructure fabric that provisions compute cost-efficiently at scale.",
   "note": "Compute is provisioned and hosted by Microsoft's own infrastructure fabric 'on behalf of' the customer; there is no documented way to run the Cloud PC agent platform on customer-owned infrastructure.",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/architecture-overview",
   "quote": "Scalable, Hosted on behalf of: The infrastructure fabric that provisions compute cost-efficiently at scale.",
   "note": "Same 'hosted on behalf of' model: compute runs in Microsoft-managed capacity billed per Cloud PC hour, not in the customer's own Azure subscription/cloud account (no BYOC option documented).",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/introduction-windows-365-for-agents",
   "quote": "Windows 365 for Agents is the trusted platform for secure, scalable agentic compute, which enables enterprise-grade automation and integration across the Microsoft ecosystem.",
   "note": "Commercial Microsoft-licensed platform (Copilot Studio/Intune/Entra-integrated, billed per Cloud PC hour); no source code is published and open_source is plainly outside what this product is.",
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/introduction-windows-365-for-agents",
   "quote": "Windows 365 for Agents provides secure, isolated Cloud PCs that AI agents can use to complete tasks such as web browsing, form filling, and application interaction.",
   "note": "not offered: outside the product's scope. Cloud PCs for Agents are locked-down, security-baseline-hardened, stateless Windows 11 desktops sized for computer-use tasks (web browsing, form filling, app interaction); no page in the architecture, MCP tool, session-lifecycle, or security-baseline docs mentions Docker, Windows containers, or any container runtime running inside the Cloud PC.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/network-security-globalsecureaccess",
   "quote": "GSA monitors and enforces policy across all outbound traffic from the Cloud PC. The internet traffic flows through the internet access profile. This approach allows organizations to apply web content filtering, URL-based controls, and threat protection policies inline, helping to reduce exposure to malicious destinations and enforce acceptable use policies.",
   "note": "not offered / not documented: Cloud PCs are drawn from a shared, ephemeral pool and outbound internet traffic is routed through Microsoft's Global Secure Access edge (when configured); no page (networking, architecture, session lifecycle, pricing) publishes or offers a fixed/dedicated outbound IP per Cloud PC or per agent session.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/windows-365/agents/mcp-tool-overview",
   "quote": "Provisioning Cloud PC agent pools. Configure policies and images. Register trusted partner callers. Scale pool counts. Attach metering through MAC billing. (No usage query endpoint documented in APIs or Cloud PC session management surfaces.)",
   "note": "cost: no; Windows 365 for Agents pricing page documents $0.40/hour pay-as-you-go billing but no SDK method, CLI, or REST endpoint to query usage per Cloud PC, pool, or session. Session API enables checkout (Computer-Get) and checkin (delete) but not usage retrieval. Microsoft Graph cloudPC resource has no usage or cost properties. MAC metering is mentioned under administration but not exposed as a queryable endpoint to partners.",
   "confidence": "high",
   "checked": "2026-01-16"
  }
 },
 "locations": [
  {
   "country": "US",
   "state": null,
   "city": null,
   "provider_region": "us",
   "self_serve": true,
   "choosable": true
  }
 ],
 "locations_source": "https://learn.microsoft.com/en-us/windows-365/agents/pricing-paygo-always-available",
 "locations_quote": "For US Geography, the Windows 365 for Agents Cloud PCs are billed at $0.40 per hour for consumption. Usage is calculated as the total time spent running agent tasks on provisioned Cloud PCs within each hourly window, rounded up to the next full hour. Pricing varies based on the geography where Cloud",
 "locations_checked": "2026-10-01"
}