Why AI Agents Shouldn't Orchestrate Your Enterprise Systems

View profile for Sana Remekie

CEO Conscia, Thought Leader in Composable Architecture, Agentic AI and Digital Transformation, Top 10 Influential Women in Tech, Public Speaker

I had an interesting conversation with an enterprise solution architect yesterday. He asked me: "Why wouldn't we just let the AI agents orchestrate our APIs? After all, agents know how to talk to backend systems through MCP." It's a fair question. But it reveals a fundamental misunderstanding about what AI agents can—or should—do. The Dangerous Assumption: Yes, AI agents like ChatGPT can talk to your raw APIs through MCP. But thinking they should orchestrate your enterprise systems isn't just giving away control of your brand experience—it's downright dangerous. Here's what actually happens when you expect AI to orchestrate your stack: Customer: "Add to cart with my corporate discount" ❌ What the Agent will do: - Retrieve your customer's profile information (dangerous) - Decipher discount rules from Salesforce (exposes competitive advantage) - Query inventory levels in SAP (reveals stock positions) - Makes dozens of API calls in unpredictable patterns (performance nightmare) Why "Let AI Figure It Out" Fails: When agents orchestrate your enterprise commerce stack directly: 🛑 Every AI agent gets your complete architecture blueprint 🛑 Your business rules—your competitive advantage—become public knowledge 🛑 Backend APIs get hammered with uncontrolled, inefficient call patterns 🛑 Customer privacy is compromised as agents access raw customer data 🛑 You hand your customer relationships to third-party platforms MCP is very powerful and it makes your business discoverable by AI agents. But agents should discover commerce capabilities—checkout, returns, product discovery—not your underlying technology choices. They shouldn't know you're running SAP for ERP, Salesforce for commerce, Stripe for payments, or any other system details. Why an Orchestration layer is Essential for MCP Servers: The orchestration layer abstracts backend complexity while giving you, the brand, complete control over business logic and data security. With orchestration, you expose clean capability endpoints, not a blueprint of your backend architecture: discoverProducts - not raw database queries processReturn - not internal workflow details submitOrder - not payment provider specifics Your architecture stays private. Your business logic stays protected. Your customer data stays secure. The choice is actually quite simple. Either build an orchestration layer that protects your business while enabling AI commerce, or hand over your entire operation to agents you don't control. Holly Hall Brian Browning Yann Boisclair-Roy Jasmin Guthmann Rafaela Ellensburg Paola Roccuzzo Timi Stoop-Alcala Mihaela Mazzenga Morgan Johanson Kevin Rahe Jon Irwin Skaidra Puodžiūnas Natasha Akter Justin I. Chandan K. Scott Abel Conscia Dirk Jan van der Pol Gaurav Kumar Andy Clarson Suresh Ramalingam Paige Tyrrell Suparna Sharma

  • diagram, schematic

I love when Sana has conversations with architects

Paola Roccuzzo

Experience Design Director - Content Services @ Foolproof

3w

There's an even more fundamental flaw: agents haven't even scratched the surface of user delegation and authorization. It's not just a big technical gap (I can't see this happening unless browsers turn into agents or agents start playing nicely with digital wallets), but also juridical: who's responsible for a transaction? I just can't see anything resembling a technology that can support real use cases yet. However our MCP server conversation was really useful - it just makes sense to bolt one on top of a solution like Conscia. For whenever agents are ready (might see one before I retire?) 😇

Jason Cottrell

MACH • Orium Founder • Commerce & Agents • Composable.com • Award-winning SI

3w

Great perspective Sana Remekie and strong examples. Orchestration and core systems of record will become even more important. Their role will be evolve, but they’ll be integral to an efficient and trustworthy agentic architecture!

James Brown

Closing the AI <-> Human gap

3w

Sana Remekie - Very solid argument! What this risks doing as well is completely evaporating any knowledge we have of our customers and their behaviour. With Agents making randomly timed and sequenced API calls directly to source-of-truth platforms, it would be impossible to understand what's working with our customer experience, and to build a conceptual map about how customer engagement could be improved or deepened. In that case... why be in business at all?

Sana Remekie I hundred percent agree on this. There are lot of vibe based agents developed nowadays that are wired directly to the backend API’s to make it work from concept to output but it lacks the principals of what a true production grade app should be and what’s truly an orchestration and the complexities or the control large businesses need to have.

Jake Horn

Executive IT Leader | Enterprise Architect | Dynamics 365 & AI Solutions | IT Strategy & Digital Innovation

3w

Agents aren't particularly fast. They will also be going up in price long term when the LLM companies stop subsidizing access.

Kevin Rahe

Empathic team leader & problem-solver | Architecting innovative composable solutions

3w

Great points, Sana Remekie , I'd add that while there's a valid concern about giving AI control over core business functions, there's also a clear architectural reason to be cautious. * An AI agent functions as a front end or channel. * A layered architecture protects your critical systems of record. * An orchestration layer is essential for aggregating data and adding custom logic, keeping core systems insulated from the agent.

Suparna Sharma

Marketer | Driving Brand Enhancement, Demand Generation, ABM, and Thought Leadership through Content Strategy, Webinars, and Influencer Outreach

3w

I love the clarity in your thought process Sana Remekie 😊 Plus - am getting introduced to a new world of Agents and orchetration layers! 😍 Letting AI agents orchestrate raw APIs is like giving a new hire full admin rights on Day 1 !! They can figure it out, but at what cost? Customers don’t care about your stack. They care about trust, security, and smooth experiences. That’s why orchestration isn’t a technical extra; it’s a brand safeguard. AI should expose capabilities, not vulnerabilities. Good to learn about the work you all are doing at Conscia 😊😊

I absolutely love all the news around MCP and its future! Thank you for sharing Sana Remekie!

Rafael Esberard

VP of Sales & Partnerships Leader for Digital Transformation & Retail AI Evolution | Composable Commerce & MACH Advisory | New Markets Strategist

3w

Hi Sana, this is an excellent and well-structured breakdown, one that I’ve seen resonate with many architecture teams lately. However, I’d like to offer a slightly different lens, especially around agentic orchestration. I do believe AI agents will soon be capable of orchestrating enterprise workflows, not recklessly, but with intentional design. The core point I might disagree on is how these scenarios are often modeled. It's becoming common to showcase agents acting as either completely ungoverned or entirely naive, ignoring the immense power of structured prompting, agent constraints, and controlled orchestration layers built for agents. An agent doesn’t have to be “let loose” on raw APIs. It can follow well-defined schemas, purpose-built workflows, and structured capabilities exposed specifically for agent consumption. Assuming a generic, unstructured prompt leads the experience is an incomplete framing, and risks overlooking how agentic commerce is truly evolving. So yes, blind orchestration is dangerous. But intentional, policy-governed orchestration? That’s not far off, and will likely be one of the most disruptive (and secure) models we adopt. Appreciate the post!

Like
Reply
See more comments

To view or add a comment, sign in

Explore content categories