Strata PlatformDocs
↑↓ navigate ↵ open esc close

Org-wide agent templates

Admins can publish reusable agent shells so the rest of the organization can deploy the same agent in one or two clicks — either as-is or with a chance to customize first.

[User] The Templates view

Click Agents > Create agent and choose Create from a template. The full-page Templates view loads with two sections:

  • From your organization — every template your admins have published. Only shown if at least one exists.
  • Built-in templates — the Kronisys-curated set (Daily database summary, Weekly inbox triage, OneDrive new file digest, SQL anomaly watcher).

Each row shows the template name, a short description, an edit-mode note (org templates only), and on the right a one-line schedule + tools summary plus an arrow CTA. Click a row to deploy.

[User] Quick deploy vs. customize before deploy

How a click behaves depends on whether the template is editable (the admin checked Allow customization when creating it) or locked (the admin did not).

  • Editable template — the row's edit-mode note reads: You can adjust the schedule and capabilities before creating it. Clicking the row opens the agent form prefilled with everything from the template — name, description, instructions, model, tone, tools, schedule, runtime, tokens, timezone. Change what you want and click Create agent.
  • Locked template — the edit-mode note reads: Creates the agent at once — no edits. Clicking the row creates the agent directly with the admin's exact configuration. No form, no edits. A toast confirms Agent created with when it runs (<name> is scheduled: Weekdays at 9:00 AM, America/New York.), and the new agent's page opens. An agent created from a locked template stays as the template made it: its Edit and Duplicate are unavailable (Created from a locked organization template, so it can't be edited.), its page says From a locked organization template, and the server refuses any change other than pausing, resuming or starring it (403, This agent was created from a locked organization template, so it can't be edited. You can still pause, star or delete it.). You can still run it, test it and delete it.

Either way, the new agent appears in your Agents list with source_template_id set to the template's ID. This is what lets the admin see, in their per-template usage view, every deployed agent that came from the template — across every user in the org.

[User] The asterisk in admin views

When an admin opens your user record and looks at your agents, agents deployed from a template show a small asterisk next to the name. Hovering reveals whether the source was an org template or a built-in template. This is admin-side only — you won't see asterisks in your own Agents list.

[Admin] Publishing a template

  1. Open Organization > Agents.
  2. Click New template (or, in the empty state, the same button under the empty-state illustration).
  3. Fill in the modal:
    • Name (required, 120 char max). Names are unique per org (case-insensitive). The inline pill checks availability as you type.
    • Short description (500 char max). Shown in the row description on the user's Templates view.
    • Task prompt (required, 8,000 char max).
    • Model — pick the model the deployed agent runs on. The picker offers a curated set of chat models; whichever you choose, the agent is still bound by your organization's Model Catalog and per-user governance, so it can only run on a model the org has enabled and that its owner is allowed to use. A member whose role or own model list leaves that model out can't deploy a locked template: creating the agent is refused with <Model> isn't available to you: … Pick one of: …. With an editable template, they pick another model in the agent form first.
    • Schedule — pick from the six preset schedules or pick No schedule (manual / webhook only) to publish a manual-only template:
      • No schedule (manual / webhook only)
      • Daily at 9:00 AM
      • Weekdays at 9:00 AM
      • Every hour
      • Every 6 hours
      • Mondays at 9:00 AM
    • Response size — Quick, Standard, or Thorough (same presets as the agent form). Expand Advanced — set the exact numbers to type the runtime (30–600s) and max tokens (500–100,000) directly.
    • Capabilities — toggle each tool. Sensitive tools (Send email, Save files) — the ones that act without an approval prompt — are tagged in red so they're obvious. Plain-English labels (e.g. Read your database, Find emails) sit alongside the technical names.
    • Allow customization (toggle) — on by default. When on, users see the agent form prefilled. When off, users get the Deploy instantly behavior with no chance to edit.
  4. Click Create template.

The template is created and instantly visible to every user in the org. The action is recorded in the audit log.

[Admin] Editing or deleting a template

In Organization > Agents, click the row-menu (...) at the end of a template row and choose Edit or Delete…. A template's own page (below) also has an Edit template button. A template whose model your organization has since turned off is tagged Not allowed in the list, and one on a model that has been retired is tagged Retired; edit it to pick a current model.

  • Edit opens the same modal as New template, prefilled. Save changes to update the template's source-of-truth fields. Existing agents already deployed from this template do not retroactively update — they continue with whatever fields they were created with. Edits affect future deploys only.
  • Delete requires you to type the template name to confirm. Agents that were already deployed from a deleted template keep running — their source_template_id still points at a now-deleted row, which means the admin's per-template usage view stops showing them but the agents themselves and their run history persist. Their owners can still pause / resume / delete them through the normal Agents UI.

[Admin] Per-template usage view

Click any row in Organization > Agents (or press Enter on it) to open the per-template detail page; Back to templates returns to the list. It shows:

  • Runs on this template — total runs across every agent deployed from it.
  • Agents deployed — count of source_template_id = <this template> agents in the org.
  • People using it — distinct user count among those agents.
  • Schedule and Model — the template's current configuration.
  • Who's using it — every deployed agent with its owner (display name and email), the agent's name and the date it was deployed, its status, its last run ("2h ago · succeeded", "Yesterday · skipped", "Never run") and its run count. A template deployed by more than 50 agents shows the first 50 and Show all.

The status is one of:

  • Active (green) — enabled and running on its schedule.
  • Paused — its owner paused it, or Strata paused it because its model is no longer allowed for its owner. It runs on schedule again once its owner presses Resume.
  • Blocked by monthly cap (amber) — the scheduler refused its latest run this month (UTC) because it had reached Monthly spend per agent; it is skipped until the month resets or the limit is raised. The tag comes from that refusal, not from its spend so far, so an agent close to the limit still reads Active, and raising the limit clears the tag.
  • Frozen — creating and editing are blocked for it (the org's Freeze agent changes, or its owner's per-member agent lock). It still runs.
  • Expired (red) — past its expiration date, so it no longer runs.
  • Failing (red) — its recent runs failed, so it is retried once an hour until one succeeds.

Each row in the "Who's using it" table has a row-menu with Delete…, letting you remove an agent from another user's account if it needs to come down (e.g. departing employee). It needs the Manage users permission; without it the item is shown disabled and says so. The user is not notified — review the change with them before deleting in destructive cases.

How templates flow through the system

  • An admin creates a template via POST /api/admin/org/agent-templates.
  • A user opens the Templates view, which calls GET /api/agents/org-templates and lists everything for their org.
  • An editable template's click opens the agent form with source_template_id set; a locked template's click calls POST /api/agents directly with the template's exact configuration.
  • The deployed agent's row carries source_template_id, which the admin's usage view aggregates by.

What can go wrong

  • A template with that name already exists in your organization. Pick a different name. — names are unique per org. The inline pill catches this; the server returns 409 if a race wins.
  • Template name must be 120 characters or fewer / Description must be 500 characters or fewer / Prompt must be 8000 characters or fewer — the field exceeded its server-side cap. Trim and retry.
  • An admin published a template with an unknown permission key — the admin route validates permissions with the same sanitizePermissions helper as the personal-agent route, so this is rejected at template-create time. If you see this on an existing template (older data), edit the template, uncheck the offending toggle, and save.
  • A user can't see a published template — the Templates view lists org templates to any signed-in member of the org, so a missing template usually means it wasn't published (or was deleted), not a permission problem. Deploying is what's gated: users whose canCreateAgents permission is off — or who are locked by an admin, or whose organization has turned on Freeze agent changes — still see templates but can't deploy them (they get a 403 on click).
  • A user deployed a template and the agent fails on first run — most often the template requires an extension the user hasn't connected yet (e.g. SQL Server, Outlook, OneDrive). Open the agent's Recent runs to see the actual failure, then connect the missing extension and Run now.
  • The "Who's using it" view is empty after publishing — nobody has deployed yet. Once someone deploys it from their agents page, they appear in the table.
  • "Couldn't load templates" or "Couldn't load template usage" — the read failed; Try again reloads just that part. The page no longer shows an empty list or "This template no longer exists" when the real problem was a failed read.
  • A template you deleted still shows agents in the wild — by design. ON DELETE's don't cascade to scheduled_agents; existing agents are frozen at the configuration they were deployed with. Owners can keep, edit (if not locked elsewhere), pause, or delete them themselves.

Related