Microsoft and 🤫 hussh
The agentic OS, private and in your hands.
Windows is becoming an agentic operating system, with MCP built in. 🤫 Private Agent One already runs on Microsoft Edge and already speaks MCP. Together with our partner Microsoft, we make the agentic OS one the person controls: private, consent-first and governed, on the hardware they own.
What Microsoft and 🤫 make possible.
You are building Windows into an agentic OS with native MCP, an On-Device Agent Registry and signed servers.
🤫 Agent One speaks MCP and will register as a first-class local Windows agent, running on Copilot+ PC NPUs.
A trusted agent the owner controls, making the agentic OS real for enterprises.
Entra Agent ID and Agent 365 give agents identity, least privilege and auditability.
Agent One will bind its identity to Entra, and it logs a consent receipt (PCHP) for every access.
A governable, auditable agent that maps cleanly to your controls and to the FedRAMP bar.
You reach 450M+ commercial seats and the deepest government cloud, up to IL6.
We bring Puppy One to that channel and deliver on Azure Government with a consent layer built for the person.
A new owned-AI story on Windows, and a consent-first path into the public sector.
Enterprise trust, an agentic OS and a sovereign cloud.
Microsoft turns trust into a business at enterprise scale: Azure, M365, Windows, security, and now Copilot and agents, with the widest government cloud in the industry. Its fiscal year ends June 30.
Up 15% year over year, with about $102B of net income, across Azure, M365 and Windows.
Intelligent Cloud is a segment of about $106B a year. Azure passed $75B of annual revenue in FY2025.
Microsoft's AI business at Q3 FY2026, up 123% year over year. Copilot and agents are the growth engine.
M365 Copilot paid seats, inside a commercial base of about 450M+ seats.
The on-device AI silicon in Copilot+ PCs, reachable through Windows AI Foundry. A home for a private agent.
Azure Government spans FedRAMP High and DoD IL2 to IL5. Azure Government Secret reaches IL6.
This is the ground a private agent stands on, and every piece of it gets stronger with one.
Azure and enterprise trust
Azure grew about 40% in Q3 FY26, on some of the deepest enterprise and government relationships anywhere.
Windows as an agentic OS
Native MCP is coming to Windows 11, with an On-Device Agent Registry and signed, identity-checked MCP servers.
M365 distribution
About 450M+ commercial seats: the base Copilot and agents are sold into, and a channel for an agent the person owns.
Copilot+ PCs
40+ TOPS NPUs, Windows AI Foundry and Phi Silica small models. "Windows AI Everywhere" across NPU, GPU and CPU.
Identity and security
Entra, with Agent ID, and Agent 365: strong identity, least privilege and governance for the agentic era.
Frontier and small models
The OpenAI relationship alongside Microsoft's own MAI models and Phi small models. Frontier and on-device, together.
Where Microsoft is going.
Every one of these priorities has room for a private agent the person owns.
Copilot and agents
The growth engine: 20M paid Copilot seats, engagement on par with Outlook, and multi-model support including Claude.
Azure AI capacity
Guidance to grow AI capacity 80%+ in FY2026 and roughly double the data-center footprint, with demand still ahead of supply.
Its own model stack
MAI models and Phi small models alongside OpenAI, from the frontier to the device.
Security for the agentic era
"Ambient and autonomous security," with Entra Agent ID and Agent 365 to govern agents at scale.
On-device AI
"Windows AI Everywhere": inference across NPU, GPU and CPU on the person's own Windows hardware.
Sovereign and government cloud
Azure Government and sovereign offerings, growing across FedRAMP and DoD Impact Levels.
MAI models, MCP on Windows and Agent 365.
What Microsoft shipped most recently, and where Agent One plugs in.
MAI models (April 2026)
MAI-Voice-1, MAI-Transcribe-1 and MAI-Image-2 in Foundry, with a stated push toward a frontier model and Phi Silica on the device.
Native MCP on Windows
In public preview: an On-Device Agent Registry and signed, identity-checked MCP servers. 🤫 already speaks MCP.
Entra Agent ID and Agent 365
A control plane to discover, govern and quarantine agents, with every agent's identity bound to Entra.
Foundry Agent Service
A generally available agent platform with VM-isolated sandboxes per session, multi-model including Claude, publishable into M365 Copilot and Teams.
Buy together. Build together. Sell together. Take risk together.
Microsoft brings the surfaces, rails, identity and compute. 🤫 brings the agent the person owns. Every move strengthens a real Microsoft priority.
Build: Agent One on Windows and Copilot+ PCs
Copilot+ PCs ship 40+ TOPS NPUs, and Windows AI Foundry targets inference on NPU, GPU and CPU.
🤫 Agent One runs on the device against Copilot+ PC NPUs through Windows AI Foundry. Own your compute.
Microsoft's silicon gets a flagship private agent, and the person's data stays on the machine they own.
Build: native MCP on Windows
Windows is becoming an agentic OS with native MCP, an On-Device Agent Registry and signed servers.
Agent One already speaks MCP, and will register as a first-class local MCP agent on Windows.
Windows gains a trusted agent the owner controls, native to the OS.
Build: Entra identity and governance
Entra Agent ID and Agent 365 give agents identity, least privilege and auditability.
Agent One will bind its identity through Entra Agent ID and be governed in Agent 365: consent-first, auditable, with a receipt (PCHP) for every access.
Enterprises get an agent they can govern, and our consent receipts map to Microsoft's controls and the FedRAMP bar.
Sell: Puppy One with Windows devices
Microsoft reaches about 450M+ commercial seats across enterprise and government.
We bundle 🤫 Puppy One and Agent One with Windows devices and Copilot+ PCs: personal supercomputing on Microsoft hardware.
A new owned-AI story on Windows, sold together into Microsoft's enterprise and government base.
Buy: Azure burst and sovereign compute
Microsoft is adding 80%+ more AI capacity, and Azure Government spans FedRAMP High to IL6.
Azure takes our burst when the edge grid is full, and Azure Government runs regulated workloads.
Azure gains a distributed edge alongside it. We gain elastic, sovereign compute on demand.
Take risk: on-device, small-model agents
Microsoft is pushing Phi Silica, MAI small models and "Windows AI Everywhere."
Together we invest in agents on the device, Phi Silica and MAI alongside Agent One, as the private alternative to cloud-only assistants.
We prove the consent-first, on-device thesis together: capable AI that stays the person's.
Build. Interoperate. Sell. Serve.
Four steps, each one useful on its own.
- 01 · Build
Agent One on Windows
On Copilot+ PC NPUs through Windows AI Foundry, registered as a native MCP agent, with its identity in Entra Agent ID.
- 02 · Interoperate
MCP and Agent 365
Agent One as a first-class, governed local agent: consent-first, least privilege, auditable.
- 03 · Sell
Puppy One with Windows devices
Bundle the on-device agent with Copilot+ PCs and sell together into enterprise and government.
- 04 · Serve
On Azure Government
A private agent the person controls, on Azure Government and Azure Government Secret. 🤫 brings the consent receipts and the on-device layer.
The people building Microsoft.
Satya Nadella
Chairman and CEO
Leads the Copilot and agent bet across Azure, M365 and Windows, turning trust and distribution into the agentic era.
Amy Hood
EVP and CFO
Leads capital allocation and the discipline behind the AI build-out.
Kevin Scott
EVP and CTO
Leads technology strategy, the AI platform and the OpenAI relationship.
Scott Guthrie
EVP, Cloud and AI
Leads Azure, developer tools and security engineering: the platform an agent runs on.
Mustafa Suleyman
CEO, Microsoft AI
Leads consumer Copilot and the MAI models, toward "humanist superintelligence."
Charlie Bell
EVP, Security
Leads Defender, Entra and Purview, extending identity, least privilege and governance to agents with Entra Agent ID and Agent 365.
A sovereign foundation for those who serve.
Windows on the device. Azure Government and Azure Government Secret for compute, up to IL6. Entra for identity and agent governance. On that foundation, 🤫 delivers its products to federal, state, military and veteran customers, to whom Agent One is free for life. Microsoft holds its FedRAMP High and DoD IL authorizations; ours are FedRAMP High in pursuit. 🤫 brings the consent receipts and the ownership that keep it the person's.