Running agentic Tools on behalf of Users in watsonx

2026-02-25 · Source: Niklas Heidloff · Field: Technology & Digital — Artificial Intelligence & Machine Learning, Software Development & Engineering, Cloud Computing & IT Infrastructure · Depth: Intermediate, medium

Summary

IBM's watsonx Orchestrate platform enables autonomous agents to execute complex workflows by integrating tools via OAuth, allowing users to offload repetitive tasks. The platform supports secure credential management and offers pre-built agents and tools for enterprise systems, alongside mechanisms for integrating custom systems. A practical example demonstrates an agent booking a flight from Boston to Berlin, where the agent uses OAuth to access a "preferences" tool for user-specific settings (e.g., service class) and a "flight booking" tool. The setup involves running watsonx Orchestrate Developer Edition locally with an OAuth server and a preferences service, showcasing the complete OAuth flow for tool authentication and authorization.

Key takeaway

For AI Engineers building agentic applications, understanding how to securely integrate external tools via OAuth is critical. You should leverage platforms like watsonx Orchestrate to manage connections and credentials, ensuring agents can access user-specific data and services while maintaining security and user consent. Consider implementing tool proxies in Python to bridge your agents with external REST APIs.

Key insights

Agents can securely run tools on behalf of users via OAuth for automated, personalized workflows.

Principles

• Secure credential management is crucial for agentic applications.
• OAuth enables agents to access external systems with user consent.

Method

Integrate tools into watsonx Orchestrate by defining connections, registering OAuth applications, and importing Python-based tool proxies that handle OAuth access tokens for external service calls.

In practice

• Use `orchestrate connections add` for OAuth registration.
• Implement Python tools as proxies to external REST services.
• Access tokens from `connections.oauth2_auth_code` in tool code.

Topics

• watsonx Orchestrate
• Agentic Applications
• OAuth
• Tool Integration
• Enterprise Automation

Code references

• nheidloff/watsonx-orchestrate-oauth-tools
• nheidloff/watsonx-orchestrate-oauth-tools

Best for: AI Engineer, Software Engineer, MLOps Engineer

Related on AIssential

• Accessing Orchestrate Environments via Agentic Skill — Agentic tools gain significant power by directly accessing and interacting with live execution environments.
• Day 15: Tool Usage in AI Agents (For DevOps & Cloud Engineers) — Tools transform AI agents from chatbots into active assistants by enabling real-world system interaction.
• IBM and ElevenLabs: Enterprise AI Finds its Voice — The IBM-ElevenLabs partnership enables secure, scalable, voice-first agentic AI for enterprises, transforming human-computer interaction.
• Leveraging gpt-oss-120b in watsonx Orchestrate — Strong LLMs like gpt-oss-120b enable autonomous orchestrator agents in multi-agent systems.
• Building Enterprise AI Agents with Oracle Integration Cloud — Oracle Integration Cloud enables governed enterprise AI agents by reusing existing integrations as trusted, callable tools.
• The Coding Agent Multiverse of Madness — A unified gateway and internal harness can manage coding agent sprawl, enhancing security and developer freedom.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by Niklas Heidloff.