Capability Matrix

Use this page to choose a runtime, sandbox, integration, and validation path. Hosted services require credentials and permissions in the account where the agent will run.

Core runtime

Capability	Runtime behavior	Deployment requirement
Finite agents in `.fabricharness/jobs/`	`defineAgent({ run })`, typed input/output, `POST /jobs/:name`.	Configure authentication and request limits on public servers.
Persistent agents	Durable `202` submissions, FIFO execution, offset streams, abort, and WebSocket.	Select a durable session, submission, and stream store.
Durable state and attachments	In-memory, file, SQLite, Postgres, and UC Volumes implementations.	Configure backup, retention, deletion, and recovery objectives.
`@fabric-harness/client`	Send, wait, status, history, observe, abort, and job invocation.	Supply the server token or application authentication headers.
Node runtime	Shared HTTP server for development and Node-derived build targets.	Configure auth, rate limits, durable stores, backup, and monitoring.
Enterprise principal/RBAC/deletion	Tenant-bound principals, scoped permissions, actor propagation, and cascade deletion.	Map the application identity provider to explicit Fabric permissions.
MCP server exposure	Authenticated Streamable HTTP for jobs, persistent agents, and custom tools.	Restrict exposed tools and authenticate every remote client.
Cron scheduler	Timezone-aware schedules, overlap prevention, payload resolver, graceful shutdown.	Run one scheduler leader or provide deployment-level leader election.
Operator console	Session and tenant inspection, approval count, abort, and deletion at `/admin`.	Grant only `admin:read`, `session:abort`, and `session:delete` as needed.
`fh build`	Schema-v2 manifests and shared-server artifacts for jobs and persistent agents.	Verify the artifact attestation and environment configuration before deploy.
Temporal runtime	Durable prompt, skill, child task, shell, checkpoint, tool/custom approval, cancellation, activity retry, attachment, and usage/cost paths.	Run the credentialed conformance suite against the deployment namespace and validate worker restart.
Policies, approvals, audit, cost budgets	Definition controls combine with invocation controls as enforcement floors.	Route mutating operations through explicit policy and approval rules.
Tools, skills, roles, tasks, MCP	Built-in tools, Markdown skills, role overlays, nested tasks, and remote MCP clients.	Validate remote MCP authentication and tool allowlists.
Evals and telemetry	Built-in scorers, OpenTelemetry, Langfuse, cost, and session metrics.	Configure the chosen telemetry sink and its retention policy.

Sandboxes and targets

Backend or target	Runtime behavior	Deployment requirement
Virtual sandbox	Fast in-memory filesystem and shell subset.	Use when process isolation is unnecessary.
Local sandbox	Host filesystem and process execution.	Restrict to trusted code and scoped working directories.
Docker sandbox	Per-session container filesystem and commands.	Verify the selected image, resource limits, network policy, and cleanup.
Cloudflare	Durable finite runs and persistent submissions with FIFO leases, restart reconciliation, offset streams, attachments, abort, and deletion using Workers AI, Durable Objects, R2, Sandbox, and Shell Workspace.	Configure bindings and run the workerd plus account smoke commands from the deployment guide.
Azure Container Instances	ACR build and managed-identity deployment automation.	Configure subscription, identity, registry, network, and resource-group access.
Daytona / E2B / Modal	Remote sandbox adapters for provider-managed execution.	Pin the provider SDK and verify lifecycle, timeout, file, and cleanup behavior.
Kubernetes / AKS	Pod-backed sandbox execution.	Configure cluster identity, namespace policy, quotas, networking, and pod cleanup.
Azure / Foundry	AKS sandbox, Azure targets, managed-identity model provider, and Foundry Agent Service helpers.	Validate tenant identity, role assignments, networking, and regional service availability.

Databricks capability metadata distinguishes contract targets from live-certified clouds. contractClouds names the clouds targeted by the typed API contract. clouds contains only clouds present in linked, retained certification evidence. A capability can therefore target AWS, Azure, and GCP while showing only Azure as live-certified; never interpret contract portability as cross-cloud operational evidence.

Capability	Runtime behavior	Deployment requirement
Databricks inference provider	Unity AI Gateway at `/ai-gateway/mlflow/v1` for `system.ai.*`; explicit custom endpoints retain `/serving-endpoints`. Both use rotating bearer credentials.	Grant access to the selected model service or custom endpoint.
PAT, OAuth M2M, Apps identity, and OBO	Service and user identity helpers with token refresh.	Configure the required scopes and enable Databricks user authorization when using OBO.
SQL and Unity Catalog tools	Governed discovery and statement execution; Unity Catalog remains authoritative.	Grant catalog/schema/object access and require approval for arbitrary SQL.
Unity Catalog Agent Services	Explicit-Beta create/get/list/update/grant/revoke/delete client for externally hosted agents; no runtime invocation is claimed.	Enable the account preview, create an HTTP connection, and grant parent-schema plus connection privileges.
AI Search, embeddings, AI Functions, and Genie	Retrieval, embedding, warehouse inference, and conversational analytics tools.	Grant endpoint, index, warehouse, and Genie Agent access.
Lakeflow and Feature Serving	Read and execute tools with effect metadata for policy routing.	Grant job, pipeline, and endpoint permissions to the runtime principal.
Consumption and cost reconciliation	System Tables reads for delayed actual-cost reconciliation.	Grant System Tables access and retain estimated budgets for real-time enforcement.
Databricks Apps build/deploy	Shared-server artifact with separate jobs and persistent agents.	Configure App resources, environment variables, identity, and health probes.
Model Serving build/deploy	MLflow `ResponsesAgent` proxy to an externally hosted Fabric agent.	Deploy the TypeScript runtime separately and secure the proxy-to-runtime connection.
Lakebase persistence	OAuth database credential exchange plus session, submission, and stream stores.	Configure endpoint coordinates, database grants, migrations, backup, and restart recovery.
Databricks SQL sandbox	`exec()` uses SQL Statement Execution; filesystem operations remain in memory.	Select a warehouse and Unity Catalog scope appropriate for the agent.
Certification evidence	Secret-redacted JSON evidence for configured workspace capabilities.	Run `fh databricks certify` with the services required by the deployment.

Channels and databases

Capability	Runtime behavior	Deployment requirement
Slack, GitHub, Discord, Teams, Telegram, Twilio, WhatsApp	Authentication, event normalization, identity propagation, deduplication, and governed replies.	Configure provider credentials, webhook verification, retry handling, and application installation.
Postgres, MySQL, SQLite, MongoDB, Redis data tools	Fixed SQL operations, host-built filters, namespaced keys, limits, effects, and redacted failures.	Use least-privilege database credentials and apply tenant scoping to every operation.

Databricks deployment validation

Run the Databricks certification workflow in the target workspace before rollout. Include identity, restart recovery, Unity Catalog denial cases, tool approvals, retry behavior, and cost attribution in the deployment record.