The Integration Blueprint

How agentic modules connect to the systems you already run.

The number-one question before any AI deployment: how does this touch Guidewire, Duck Creek, Epic, or AMS360? This is the architecture answer — a layered blueprint that lets lab modules do real work without ever destabilizing the system of record.

The five-layer stack — with live module placement

Every module in the lab repository is placed on this map automatically. As new modules are added, they appear at the layer where they do their work — click any module to open its full page.

01

Systems of Record

Untouched. Always.

Guidewire, Duck Creek, Applied Epic, AMS360, Salesforce. These remain the single source of truth. Nothing in the lab ever asks them to change how they work.

PolicyBillingClaimsCRM
02

The Anti-Corruption Layer

The translator in the middle.

A canonical data model sits between the lab and the core. Legacy formats — AL3, IVANS downloads, ACORD forms, SFTP drops — are normalized into clean, modern schemas before any module sees them. Writes go back in each system's native dialect.

Canonical schemaACORD / AL3 mappingValidation on arrivalReplay & rollback

Lab modules at this layer — live from the repository

03

The Event Fabric

Real-time where it matters.

Webhooks and event streams (Guidewire Integration Gateway, mailbox triggers, claim milestones) wake modules the moment something happens. Where no events exist, scheduled polling and nightly batch fill the gap — honestly labeled, never faked.

WebhooksEvent brokersScheduled pollingNightly batch

Lab modules at this layer — live from the repository

04

Agentic Modules

The lab, doing its work.

Each lab module reads from the canonical layer, reasons in an isolated zero-retention environment, and returns a recommendation, draft, or score — never an unapproved action on the system of record.

Zero-retention inferenceConfidence scoringHuman review queues
05

The Human Gate

People lead. Always.

Every write-back lands as an activity, note, draft, or task assigned to a named human. Underwriters approve triage. Producers approve drafts. Nothing binds, sends, or closes on its own.

Approval queuesField-level audit trailEscalation rules

Lab modules at this layer — live from the repository

Five connection patterns

Every module-to-core connection in the lab uses one of these five patterns — chosen per system pair, never forced.

Native REST API

Modern cloud cores expose well-documented APIs — Guidewire Cloud APIs, Duck Creek Anywhere, Epic API, Vertafore Orange Partner. This is the default path: reads and writes in real time, authenticated with OAuth 2.0 against your existing identity provider.

Used with: Guidewire, Duck Creek, Applied Epic, AMS360, Salesforce

Event Stream / Webhook

Where the core can publish events — a new submission, a claim milestone, a late payment — modules subscribe instead of polling. Latency drops from hours to seconds, and the core never feels the load.

Used with: Guidewire Integration Gateway, M365 / Google, claim events

Embedded Sidecar

Some modules live inside the tools people already have open: a churn score on the Salesforce account page, a draft in the producer's Outlook folder, a brief on the opportunity record. No new tab to remember.

Used with: Salesforce FSC, Microsoft 365, notification layers

ACORD / IVANS Bridge

The industry's existing plumbing still moves enormous volume. The bridge parses AL3 downloads, ACORD forms, and commission statements into the canonical model — so legacy feeds become machine-readable without changing the sender.

Used with: IVANS download, ACORD 125/126/130, commission statements

Batch & File Drop

For systems with no API surface, scheduled SFTP exchange and warehouse extracts (like Guidewire Cloud Data Access) provide a reliable, auditable path. Slower, but honest — and often the only sanctioned route.

Used with: Legacy portals, Guidewire Data Platform, loss-run retrieval

See it applied

Every tool page in the lab carries its own compatibility matrix — which systems it connects to, which pattern it uses, and how long a working connection takes.

Browse the lab →

Core systems, drilled down

Every system is described the same way — the API layer it exposes, how identity works, what events it can publish, and which canonical entities flow in and out. Modules never talk to a system directly; they talk to the canonical model, and the adapter does the translation. That's what keeps the lab loosely coupled: swap the system, keep the module. Click a system to open its profile.

The bridge to agents

Turning core APIs into MCP microservices

Every system above already has an API. That is not the hard part. The hard part is that those APIs were built for deterministic software, not for agents. An MCP microservice is the thin, governed layer in between — a small container that wraps the existing API and exposes a handful of business-shaped tools instead of hundreds of raw endpoints. Nothing changes in the core system. The API you already have becomes agent-ready.

Raw REST API, handed straight to an agent

  • ×Hundreds of endpoints and 100+ field payloads flood the context window
  • ×The agent guesses parameter shapes and hallucinates identifiers
  • ×Bearer tokens travel into the model runtime — an audit problem
  • ×Exploratory calls trip production rate limits within minutes
  • ×Nothing stops a POST that binds, cancels, or closes

The same API behind an MCP microservice

  • →Six to ten high-intent tools, each with a strict typed schema
  • →Payloads distilled to the dozen fields the decision actually needs
  • →Credentials stay in the microservice; the agent never sees a token
  • →Caching, throttling, and retries absorbed before the core feels them
  • →Writes are structurally limited to activities, notes, tasks and drafts

Tools

High-intent actions, not endpoints

Instead of exposing the full REST surface, the microservice publishes a short list of business-shaped calls — look up a commercial account, summarise five years of losses, stage a renewal activity. Each one has a typed schema the agent cannot drift from.

Resources

Read-only context the agent can pull

Documents, dec pages, loss runs, and claim timelines are exposed as addressable URIs. The agent pulls only what it needs, when it needs it, instead of being pre-loaded with the whole record.

Prompts & guardrails

Governed workflows, not free improvisation

Reviewed workflow templates ship with the server — submission triage, renewal drafting, pre-bind compliance. Every write tool is implemented as a task assigned to a named human, so the human gate is enforced in code, not policy.

Adapter recipes — one per core system

Same container, different adapter. Each one wraps the API that already exists, speaks the canonical model on the inside, and keeps credentials out of the agent runtime entirely. Click a system to see the tools it exposes.

Every lab module works the same way. Each one consumes these adapter tools and publishes its own MCP interface, so it can be called by your assistant, your orchestrator, or another module. Open any module page to see the exact tools it consumes and provides.

MCP sandbox · mock data

Run a tool call and inspect the response

Step 1 · The request — what the agent sends

Press Run and look at the request tab. It has exactly four meaningful parts:

  • jsonrpc: "2.0" · id: 1 — Every call is a JSON-RPC 2.0 message. The id lets the agent pair each response with the request that caused it.
  • method: "tools/call" — The agent is asking the MCP server to run one named tool — not to browse raw endpoints.
  • params.name — The single high-intent tool being invoked, e.g. epic_search_client. One verb instead of hundreds of REST routes.
  • params.arguments — Only the few inputs the tool actually needs — the dropdowns above populate exactly these.
Step 2 · The response — what comes back

Flip to the response tab. The answer lives in three places:

  • result.content[0].json — The tool's answer, already normalized to the canonical model — a clean object, not the raw system payload.
  • result.isError: false — Whether the tool ran successfully. In production this is what an agent checks before reasoning over the content.
  • _meta.server — Which MCP adapter served the call (epic-mcp, policycenter-mcp, claimcenter-mcp).
  • _meta.latency_ms · mock_data — How long the call took, and proof that everything here is fictional mock data.
Step 3 · Reading an Applied Epic call

Epic's raw API returns deep, 100+-field account objects. Watch what the MCP layer does with that noise: Switch the Guidewire tab above to see its version.

  • matches[] (epic_search_client) — Just client_id, name, FEIN, producer and policy count — the exact fields an agent needs to chain its next call, with no Epic account-object clutter.
  • fields_returned: 7 vs fields_in_raw_payload: 143 — This is the whole point of the bridge: 7 fields instead of 143. Small payloads mean small context windows and far less hallucination risk.
  • policy_records_modified: 0 (epic_stage_activity) — The write tool didn't touch a policy. It created an activity (ACT-xxxxxx) assigned to a named CSR like M. Chen, due in 3 days.
  • audit.gate: "human_approval_required" — Every response carries its own audit trail: which agent acted, and that a human still holds the pen. Nothing changes in Epic until that person approves.
Guided scenarios · Applied Epic

Common agency tasks, mapped to the exact tool calls an agent would make. Run a step and watch the request and response fill in below.

Renewal prep in 30 seconds

A CSR needs the full policy schedule for Harbor Logistics before a renewal meeting.

1. epic_search_client
query: "Harbor Logistics LLC"

Find the account and its client_id from a name — no navigating Epic's account screens.

2. epic_get_policy_schedule
client_id: "CL-10482"

Pull every in-force policy, premium and limit as 7 clean fields instead of a 143-field account object.

Flag a premium increase for follow-up

The Ghostwriter module spotted a 14% renewal increase and needs a human to own the conversation.

1. epic_stage_activity
client_id: "CL-10482" · summary: "Renewal review — premium up 14%"

Stage an activity assigned to the account's CSR, due in 3 days. Nothing in Epic changes until that person approves it.

Side by side · same task, both systems

Run one task and compare the exact request and response formats Applied Epic and Guidewire produce through their MCP adapters.

Find an account by name, FEIN, or policy number.

// Pick a tool, choose arguments, and press Run.

All data is fictional. Write tools only ever stage a task for a named person — notice they never change a policy or advance a job.

Non-negotiable principles

Zero disruption

No rip-and-replace, no core system modification, no downtime. Modules attach to the edges and prove value in days, not quarters.

Read first, write never (at first)

Every engagement starts read-only. Write-back is earned — and even then it lands as a draft, note, or task, never an unapproved transaction.

Your data stays yours

Zero-retention inference. No customer data trains any model. Field-level audit trails on every value that moves in either direction.

Standards over cleverness

ACORD, IVANS, OpenAPI, OAuth 2.0 / mTLS. Boring, proven, and supportable by the team you already have.

How the business model maps to the architecture

The layers aren't just technical — they're commercial. Each one is a different way to engage, priced for the risk you're taking on.

Read-only pilot

Free to start

Every engagement opens with a read-only module — Retention Radar, Producer Copilot, Loss Run Analyzer — connected in days with zero write access. The agency proves value on its own book before spending a dollar, and the core system never feels a thing.

Best fit: Agencies & brokers testing the water

Module subscription

Per module, per month

Once a pilot proves out, modules convert to a flat monthly subscription per active module — priced so a single saved account or avoided E&O event covers the year. No per-seat pricing: the whole team benefits from one deployment.

Best fit: Agencies scaling what works

Foundation layer

Annual platform

Carrier API Bridge and Book Intelligence Warehouse are infrastructure, sold as an annual foundation layer. Once the canonical model and warehouse exist, every other module plugs in at marginal cost — this is where carriers and large brokerages start.

Best fit: Carriers, MGAs & enterprise brokers

Partner co-build

Revenue share

Technology partners build their own modules on the canonical layer and list them in the lab. BionicAgent provides the integration fabric and distribution audience; the partner keeps the IP. New modules appear on this map automatically.

Best fit: Technology partners & insurtechs

Executive download

Take this page with you.

The BionicAgent Blueprint condenses this architecture — the layers, adapters, MCP bridge, governance, and the six-week rollout — into a 12-page document you can share with your leadership team.

Flagship12 pages

The BionicAgent Blueprint

The people-first operating model: architecture, adapters, MCP, governance, and a six-week rollout.

Free download

The Guidewire PolicyCenter Playbook

Connecting Agentic Workflows to Guidewire PolicyCenter — the zero-disruption implementation guide. Five integration patterns, eight security guardrails, three production-tested workflows, and a six-week rollout plan.

Download the playbook

Have a core system challenge of your own?

Describe your distribution challenge and the Matchmaker will recommend the lab modules that fit — with the integration pattern for your stack.