Roster by Advantys

Agents can act. They don't know who. Every agentic workflow eventually hits the same wall: who needs to approve this, get notified, or pick up the work next? Hard-coding an org chart into a prompt is brittle — it breaks the moment someone's on leave, a limit changes, or the org restructures.

Roster fixes that with one primitive: resolve. Ask in plain language — "Who should approve the Helios renewal?" — over MCP, CLI, or REST, and Roster matches the right participant (a business role, not a named person) using labels, typed metadata, and approval limits, then expands to the current live human or agent through your directory and any active delegations. Someone out on leave? Roster returns their delegate automatically, with full provenance, and never rewrites your directory to do it.

It ships as a single Docker container — no separate database, no extra infrastructure — exposing four surfaces from one runtime: an MCP server (the primary agent surface), REST API, CLI, and a web dashboard for admins and project owners. Connects to Microsoft Entra ID, Okta, Google Workspace, Workday, LDAP/Active Directory, or CSV. Bring your own LLM (OpenAI, Anthropic, or Mistral direct, or route through OpenRouter as a gateway) — Roster never marks up token costs. Every resolution is logged as an append-only audit event; every model call is observable by provider, tokens, and cost; PII is redactable field by field.

Built by Advantys, the team behind WorkflowGen's routing and delegation engine — in production for 20+ years across 500+ organizations.

Key capabilities

• Natural-language resolve queries over MCP, CLI, or REST — get back the human or agent who should act, in real time
• Participants model business responsibility (roles, approval limits, regions), not named people — routing survives org change
• Delegations apply as runtime overlays for absences and handovers, with full provenance, without touching upstream directory data
• Six directory connectors — Microsoft Entra ID, Okta, Google Workspace, Workday, LDAP/Active Directory, CSV — with cache-only, cron-scheduled sync
• Three first-class identity types: team members, AI agents, and service accounts
• Append-only audit log and per-run model observability (provider, tokens, cost) with field-level PII redaction
• Draft ? test ? live ? archived project lifecycle, so new routing logic can be tested without polluting production history
• Single Docker container (advantys/roster), self-hosted on every tier, bring-your-own LLM
• Five SSO options: Microsoft Entra ID, Okta, Google, generic OAuth, SAML