Merge, the unified API platform, announced at its New York summit on June 2, 2026, that its Agent Handler will debut on the Microsoft Agent Store, enabling Microsoft 365 Copilot agents to tap into hundreds of third-party business systems with fine-grained governance. The integration relies on the Model Context Protocol (MCP), giving IT administrators control over exactly which data sources each agent can access, and under what conditions.

This move marks a significant step in Microsoft’s vision to turn Copilot into an open, extensible AI platform. Rather than a walled garden, the Microsoft Agent Store is becoming a marketplace where specialized agents can connect to SaaS tools, legacy databases, and on-premises systems—all while adhering to enterprise security and compliance policies. Merge’s Agent Handler promises to make those connections more predictable and manageable.

The challenge of agent data access has dogged enterprise AI deployments. A Copilot agent might need to retrieve inventory levels from NetSuite, pull customer records from Salesforce, and cross-reference with support tickets in Zendesk—all in a single conversation. Without governance, such access creates data leakage risks and audit nightmares. Merge’s solution addresses this by acting as a secure middleware, translating Copilot’s MCP requests into governed API calls that respect role-based permissions and audit trails.

At the core of this architecture is the Model Context Protocol. Originally introduced by Anthropic and later adopted as an open standard, MCP defines a standardized way for AI models to interact with external tools and data sources. Microsoft embraced MCP across its Copilot ecosystem in early 2025, positioning it as the backbone for agent-to-service communication. Merge’s Agent Handler is among the first third-party offerings to fully leverage MCP governance on the Agent Store, allowing admins to set policies at the field level—for example, allowing a sales agent to see contact names but not credit card numbers, even if the underlying API returns both.

The Microsoft Agent Store, launched in late 2025, has rapidly become a hub for extending Copilot’s capabilities. Much like an app store, it allows users and IT admins to browse, install, and manage agents built by Microsoft, partners, and independent developers. These agents can be assigned to specific employees, groups, or roles, and can appear inside Microsoft 365 apps like Teams, Outlook, Word, and Excel—as well as in Windows’ system-wide Copilot panel. Merge’s Agent Handler will appear as a connector agent, one that can be configured to slot into any existing Copilot agent that needs safe access to multiple business systems.

Governance is the headline feature. IT administrators will be able to define policies through a central console—likely Microsoft Purview or Endpoint Manager—that dictate which Merge-connected services a given agent can call, what data fields it can read or write, and whether it requires step-up authentication for sensitive operations. All access is logged, creating a verifiable chain for compliance with regulations like GDPR, HIPAA, and SOX. This level of control has been a sticking point for regulated industries, and Merge’s announcement could open the floodgates for banking, healthcare, and government adoption of Copilot agents.

For everyday users on Windows, the impact will be subtle but powerful. A financial analyst might ask Copilot in Excel to “pulls the latest Q4 revenue figures from Salesforce and compare them to our forecast in NetSuite,” and the agent will handle the rest, governed by pre-set rules. An HR manager could summon a leave balance from Workday into a Teams chat without ever leaving the conversation. The seams between apps begin to disappear, yet security remains intact.

The partnership also underscores the growing importance of unified API platforms in the AI era. Merge already offers a single API for hundreds of integrations across HR, payroll, accounting, CRM, and more. By extending that to the Copilot ecosystem, Merge removes the need for organizations to build and maintain custom connectors for each agent initiative. This could dramatically lower the barrier to entry for deploying intelligent automation at scale.

While Merge is the first to announce an MCP-governed handler on the Agent Store, it likely won’t be the last. Competitors like Workato, Zapier, and MuleSoft are expected to follow with similar offerings. Microsoft itself has hinted at native governance tooling for MCP connections in future Copilot updates, but for now, third-party handlers like Merge’s fill a critical gap.

Windows enthusiasts might wonder how this fits into the broader PC ecosystem. The answer lies in Copilot’s increasingly deep integration with Windows 11 (and the upcoming Windows 12). The system-wide Copilot panel, accessible via Alt+Space, already supports agent extensions. With Merge-powered agents, that panel could become a universal command line for enterprise workers—querying databases, triggering workflows, and generating reports without switching contexts. It’s a glimpse of the ambient computing future Microsoft has been building toward since the Copilot+ PC launch.

Security researchers are likely to scrutinize the implementation closely. MCP itself has faced criticism for potential prompt injection and data exfiltration vectors. Merge’s governance layer could mitigate some of these risks, but the onus remains on administrators to configure policies correctly. Microsoft will need to ensure that agent permissions are clearly communicated to users, perhaps with a card or icon in the Copilot interface indicating what data sources an agent is tapping and why.

Looking ahead, Merge plans to support custom MCP servers, on-premise deployments, and even offline agent capabilities for Windows devices running local SLMs (Small Language Models). The Agent Handler could one day sync governance policies to the edge, allowing agents on Copilot+ PCs to access local data stores like SQLite or encrypted file shares without phoning home to the cloud—a boon for field workers and high-security environments.

The announcement did not specify a release date, only that the Agent Handler would appear on the Microsoft Agent Store “in the coming months.” Pricing is expected to follow Merge’s existing per-connection model, with volume discounts for large enterprises. Developers interested in early access can sign up through Merge’s partner program.

For organizations already invested in Microsoft 365 and Copilot, the Merge integration represents a robust, governed shortcut to unlocking the platform’s full potential. It turns Copilot from a clever chatbot into a truly connected business companion, able to navigate the complex web of applications that power modern work. And by leaning on open standards like MCP, it ensures that innovation isn’t locked to a single vendor’s roadmap.

In the end, the Merge Agent Handler is more than a connector—it’s a blueprint for how enterprise AI can scale safely. As Windows continues to evolve into a platform for AI-driven productivity, such integrations will define whether Copilot remains a novelty or becomes an indispensable part of the daily workflow. The answer, it seems, is increasingly clear.