IT leaders who spent the last two years building AI agent workflows into their enterprise stacks may be about to discover those workflows come with a new line item attached.
ServiceNow, SAP and Workday – three platforms that between them underpin the operations of a significant share of the Global 2000 – have each moved to assert control over how external AI agents interact with their systems.
For IT decision-makers, the practical consequences range from unexpected consumption charges to integrations that no longer work as intended.
The Access Problem
The issue starts with how AI agents actually function inside enterprise platforms. Unlike a human user who logs in, completes a task and logs out, an AI agent can execute thousands of API calls in a single session – querying data, triggering workflows, updating records – without ever appearing on a headcount report or a seat count.
That gap between how AI agents behave and how enterprise software is licensed is now being closed, unilaterally, by the vendors themselves.
ServiceNow moved first. At its Knowledge 2026 conference in Las Vegas, the company introduced Action Fabric – a mandatory intermediary layer through which any external AI agent must now pass to access data and workflows inside its platform.
According to The Information, COO Amit Zavery confirmed the company will charge for that access on a consumption basis, billing customers per operation an agent completes rather than per user on a contract.
For IT teams that have built ServiceNow integrations using third-party AI tools, that means existing workflows now carry a cost that wasn't there when they were designed.
Anthropic's Claude is the first external AI to be formally supported through the layer, suggesting ServiceNow has a clear view of which agents it expects to be running inside its environment.
What SAP's Policy Change Actually Means
SAP's approach creates a different kind of problem. An API policy update issued in April bars third-party AI agents from autonomously executing sequences of calls within its systems unless they do so through SAP-approved architectures, according to The Register.
