Stage 7 · Foundry¶
The pro-code frontier. When a low-code agent can't reach far enough — custom models, autonomous orchestration, evaluation, and MCP tools at scale — you cross into Microsoft Foundry.
The shift: from "I build agents in a designer" to "I engineer agents as software." Most people never need this stage, and that's by design — Stages 1–5 solve the overwhelming majority of real work. But when an agent has to run pro-code logic, call custom or fine-tuned models, or operate as part of an engineered system, Foundry is where it belongs.
A different kind of stage — for developers
Foundry is a pro-code, developer-owned platform, not a low-code designer. It lives in Azure, not the Microsoft 365 admin center, and it assumes engineering skills (SDKs, CI/CD, Azure resources). Treat this stage as a signpost to the frontier rather than a click-by-click walkthrough — and verify everything against the official Microsoft docs, which move fast.
When you're ready for this stage¶
You've outgrown low-code. A Copilot Studio agent can't express what you need: you require a custom or fine-tuned model, autonomous multi-agent orchestration, rigorous evaluation and monitoring, or MCP tools and integrations at engineering scale. You have developers, an Azure subscription, and a deployment pipeline — and the problem justifies building like software.
Going the wrong way?
Foundry is the easiest place to over-engineer. If you're writing glue code for a single linear task or rebuilding a connector Studio already ships, you've overshot — drop back to Studio.
What you need¶
- An Azure subscription and a Microsoft Foundry project to build in.
- Developer skills — SDKs (Python/.NET/JS), source control, and CI/CD.
- An engineering owner for the Azure resources, identity, and networking behind the agent.
- A clear reason you couldn't solve it in Stage 6 · Copilot Studio. If you could, start there.
Start here — if you only do three things¶
Prove the plumbing with a first SDK agent, re-platform a real agent that hit a ceiling, then put an evaluation gate around it before it ships.
-
Habit 1Day 1
Build your first pro-code agent with the Foundry Agent Service
Create an agent from the SDK, run a turn, and prove your project, identity, and plumbing work.
-
Habit 2Week 1
Graduate a Copilot Studio agent into pro-code Foundry
The usual on-ramp — re-platform a proven low-code agent that hit a real ceiling.
-
Habit 3Month 1
Evaluate and continuously monitor a Foundry agent
Score quality on a dataset before you ship, and watch it in production.
All walkthroughs¶
Unlike earlier stages, these are developer walkthroughs — representative SDK/CLI patterns and the decisions behind them, not click-by-click product tours. Foundry moves fast; each page links the authoritative Microsoft docs to verify against.
Build your first pro-code agent¶
Stand up the agent, re-platform a proven one, and give it real tools.
-
Build your first pro-code agent with the Foundry Agent Service
Create an agent from the SDK, run a turn, and prove your project, identity, and plumbing work.
-
Graduate a Copilot Studio agent into pro-code Foundry
The usual on-ramp — re-platform a proven low-code agent that hit a real ceiling.
-
Give a Foundry agent custom tools and MCP integrations
Turn a talking agent into a doing agent with function tools and standards-based MCP.
Orchestrate, evaluate & govern¶
Move from one agent to a governed system you can trust in production.
-
Orchestrate multiple agents and autonomous runs
Move from one agent to a system of agents that hand off work and run when triggered.
-
Evaluate and continuously monitor a Foundry agent
Score quality on a dataset before you ship, and watch it in production.
-
Secure and govern Foundry agents in production
Tenant-isolated data, least-privilege identity, and the governance plane.
Operate it in production¶
Go past building to operating — swap models safely, keep it affordable, and prove it's hard to break.
-
Fine-tune a domain model and serve it from a Foundry agent
The last lever when prompting and retrieval hit their ceiling — train the behaviour in, then serve it behind an agent.
-
A/B and shadow-deploy a model swap behind a Foundry agent
Adopt a new or tuned model the way you ship risky code — shadow, canary, then promote on the numbers.
-
Token-budgeting and cost optimization for a production agent
Make tokens a metric you watch, then cut spend at scale without quietly cutting quality.
-
Build a red-team / safety eval harness
Try to break your own agent — repeatably — so adversarial regressions fail the build, not reach users.
Build something deployable¶
These walkthroughs pair with copy-and-adapt Foundry solution templates — a representative code scaffold, an evaluation gate, and a deployment checklist. Reach for one only when a Studio agent genuinely can't carry the job.
-
Custom retrieval, an evaluation gate, and code-owned identity for grounded Q&A that outgrew Studio.
-
Multi-Agent Workflow Orchestrator
Automate a multi-step process across specialist agents with deterministic control and a workflow-level eval gate.
-
High-Volume Document Processing Agent
Extract structured data from documents at scale, with schema validation and a precision/recall gate.
-
An external, action-taking support agent with strict guardrails, content safety, and continuous evaluation.
-
"Ask your data warehouse" self-service analytics with a SQL-safety layer and a correctness gate.
-
Browser-Using (Computer-Use) Agent
Automate web apps that have no API — sandboxed, allow-listed, and human-confirmed on irreversible actions.
-
Voice Agent / Contact-Center IVR
A real-time phone agent — speech-to-text, grounded conversation, text-to-speech, clean human handoff.
-
Advisory, private-repo PR review and reviewer routing — comments only, never merges.
-
Multi-Modal Document Classification Agent
Sort a high-volume document stream by vision + text, with confidence-based routing and a precision/recall gate.
Borrow, don't build
Foundry is a deep, fast-moving developer platform — there's no value in re-documenting it here. Lean on Microsoft's own authoritative material, which stays current with the product.
- Microsoft Foundry docs — the canonical front door: build, evaluate, deploy
- Foundry Agent Service — build, deploy, and run agents with tools and orchestration
- Standard agent setup — bring-your-own Azure resources for project-level data isolation
- Role-based access control in Foundry — least-privilege built-in roles and Entra ID auth
- Extend Microsoft 365 Copilot — options compared — where custom-engine (Foundry) agents fit next to declarative ones
- Agent samples (low-code → pro-code) — Microsoft-owned and community starting points
The full curated set for this stage lives in Resources → Stage 7.
Security at this stage
Foundry agents run on Azure with Entra ID authentication and Azure RBAC, and the standard setup keeps agent data in your own single-tenant Azure resources (Storage, Cosmos DB, AI Search, Key Vault). Microsoft Purview classifies them as Enterprise AI apps, and Agent 365 can govern them alongside your low-code agents. See the full picture in Security & Governance.
You've reached the frontier¶
There's no Stage 7. From Chat to Foundry, the ramp has taken you from a daily habit to engineered, governed agents — pick the lowest stage that solves each problem, and only climb when the work demands it. Keep a backlog of agents worth building.
Thanks — glad it helped. Spotted something to improve anyway? Suggest it →
Sorry this didn't land. Tell us what broke → so we can fix that rung of the ramp.
Found an issue or want to suggest an improvement? Open a GitHub issue · Star on GitHub