As AI agents become a standard feature across enterprise software, SaaS vendors face a new architectural challenge: how should product capabilities be exposed to AI? Should you allow agents to call your APIs directly? Should requests be routed through middleware?