Running an AI agent workbench for your engineering team?
The first question isn't model choice—it's identity & auditability:
Who triggered what? How do teammates log in safely?
Here is how Holon handles team-scale OIDC SSO with 4 providers 🧵👇
2
1
88
3/ Google Workspace (@GoogleWorkspace)
Prefer managed SaaS SSO? Plug in Google OAuth 2.0 / OIDC credentials directly. Teammates sign in with corporate Google accounts, and Holon automatically enforces domain restrictions.
Guide: holon.run/guides/google-work…
1
25
4/ Why OIDC in an Agent Workbench?
Holon binds every prompt & background run to a verified identity. You get audit-ready logs for team usage, credential isolation, and role safety.
Self-host your agent team today:
github.com/holon-run/holon
23
Instead of one overloaded Swiss Army knife, Holon isolates skills across dedicated, long-lived agents with independent workspaces.
Read the architectural deep dive:
holon.run/blog/why-agents-ne…
Step-by-step role setup guide:
holon.run/guides/organize-ag…
44
Holon shipped 4 releases this week (v0.56.0 -> v0.59.0).
What is new for running long-lived agents in engineering workspaces:
- Key-free web search
- Managed Cloudflare Tunnels
- Self-hosted OIDC SSO
- New role templates & PR reviewer workflow
Highlights below 👇
1
1
103
Search & Remote Access:
- Key-free web search via @KeenableAI: agents search the live web out of the box using Keenable's public endpoint (thanks to @kallasmaa for PR #3911!)
- Managed Cloudflare Tunnels: expose your local Holon daemon securely with zero open ports.
SSO & New Workflows:
- OIDC SSO for Keycloak, self-hosted GitLab, and Google Workspace
- New `chief-of-staff` and `meeting-steward` agent templates
- New guide on running a local Code Reviewer agent that tracks PRs end-to-end:
holon.run/guides/build-code-…
43
3/4 When an issue is resolved, `server-ops` does not let the fix vanish into lost chat history.
It logs the action under `operations/` and distills repeated fixes into `runbooks/`. When a similar alert fires next month, it references verified history instead of guessing.
1
65
4/4 An ops agent should not be an amnesiac assistant re-briefed every morning. It should be a long-lived teammate whose understanding of your infra compounds over time.
Docs & details:
holon.run/templates/server-o…
Run:
holon agent create --template server-ops
57
Most team AI platforms still isolate each person in a private session.
In Holon, shared agents run on a team server and stay transparent to everyone: any teammate can view the agent's messages, inspect active work, and jump in to interact in the same thread. (1/5)
1
1
153
Keep your own coding tools; let shared agents handle handoffs between teammates.
Team sharing & OIDC setup guide:
holon.run/guides/share-with-…
131-day team case study (EN):
holon.run/blog/agents-in-a-s… (4/5)
1
251
保留每个人顺手的个人编码工具，把跨角色的调查、审阅和验收交接交给团队共享 Agent。
团队共享与 OIDC 配置指南：
holon.run/zh-CN/guides/share…
131 天小团队 Agent Native 实践全文（中文版）：
holon.run/zh-CN/blog/agents-… (5/5)
2/3 ASO Steward (mobile app stores):
- Audits metadata across App Store & Google Play
- Enforces character budgets & de-duplication
- Tracks competitor keyword overlaps
- Delivers reviewable Fastlane PRs instead of live edits
Template: github.com/holon-run/holon/t…
1
1
241
3/3 Search Visibility Steward (Web + AI answers):
- Dual tracking: Google SERP + Perplexity / ChatGPT citation presence
- Turns missing citations into verifiable docs briefs
- Keeps changes in git branches with before/after diffs
Template: github.com/holon-run/holon/t…
90