DESIGNER GUIDE

Build an agentic worker

Create a specialised worker that understands natural-language requests, follows clear business instructions and uses only the models, tools, knowledge and safety controls you approve.

Solution designer20–30 minutes

Scope: individual Agentic Worker project

Give the worker one clear responsibility

An agentic worker performs best when it has a specific goal, explicit boundaries and a controlled set of capabilities. Use deterministic flows to execute business processes that require fixed steps, approvals or guaranteed outcomes.

What is an agentic worker?

An agentic worker uses an AI model to interpret information and decide how to respond within the instructions and capabilities you provide.

  • An identity and worker type
  • Business-specific instructions
  • A model and credential
  • Extension tools and reusable flows
  • Guardrails
  • Short-term or long-term memory
  • Knowledge bases
  • Execution limits
Capabilities are granted, not assumedAn agentic worker does not automatically have access to every model, tool, flow or data source in the workspace. The designer selects which capabilities it may use.

Agentic worker versus deterministic flow

When to use an agentic worker and when to use a deterministic flow
Use an agentic worker whenUse a deterministic flow when
The input is open natural languageThe process must follow explicit steps
The intent must be interpretedDecisions must follow fixed business rules
The worker must choose between approved capabilitiesInputs, validations and outcomes must be controlled
A flexible response is acceptableThe same inputs must reliably follow the same path
Knowledge retrieval or limited tool selection is neededApprovals, transactions or compliance steps are involved

Many Greentic solutions combine both. An agentic worker understands the request, while a deterministic flow performs the controlled business process.

The example used throughout this guide

ACME, the project names, model names and all test values are fictional demonstration data.

Worker
ACME Support Process Router.
Purpose
Classify an open-text customer-service request and return structured routing data.
Called by
ACME Customer Service Main Menu.
Possible outcome
Route a late-delivery request to ACME Late Delivery Resolution.
Customer enters an open question
              ↓
Customer Service Main Menu flow
              ↓
ACME Support Process Router
              ↓
Structured intent result
              ↓
Deterministic resolution flow
The router interprets; it does not resolveIn this example, the agentic worker identifies the likely customer-service process. The deterministic flow collects data, applies rules and presents the approved resolution. Structured JSON is the design choice used by this example because a downstream flow needs a predictable routing result — it is not required of every worker.

On this page

Before you begin

  • Confirm that the correct workspace is active.
  • Define one specific responsibility for the worker.
  • Decide what the worker must never do.
  • Identify the expected input and output.
  • Confirm that a suitable model credential is available.
  • Identify any tools, flows or knowledge bases the worker requires.
  • Decide whether the worker needs memory.
  • Prepare representative test messages.
  • Use fictional data during design and testing.
Write the expected output before buildingFor a router or classifier, define the fields the downstream flow needs before writing the worker instructions. This makes testing and integration much easier.

1. Create an Agentic Worker project

Start from Designer Home and choose the Agentic Worker project type.

Create a new project and select Agentic Worker as the project type.
  1. 1Open Designer Home.
  2. 2Select New project.
  3. 3Enter a clear project name.
  4. 4Select Agentic Worker.
  5. 5Review the project-type description.
  6. 6Select Create.
  7. 7Wait for Agentic Worker Studio to open.

The New Project dialog also offers other project types, including flows, playbooks and imports. This guide covers only Agentic Worker. SoRLa Studio is shown in the dialog as Coming soon.

Name the worker after its responsibilityGood names describe what the worker does — Support Process Router, Product Recommendation Worker, Claims Triage Worker, Compliance Research Assistant. Avoid vague names such as “AI Bot” or “Helper”.

2. Describe the worker in Agentic Worker Studio

Studio generates a first configuration from a plain-language description of the worker's goal.

Describe the worker’s goal in plain language, then let Studio generate the first configuration.
Goal field
Describe what the worker should do, what it receives and what it should return.
Model selector
Select the model available for generating the initial worker configuration.
Example use cases
The interface provides starting ideas such as customer support, sales follow-up, help centre bot and customer onboarding.
Build my Agentic Worker
Generate the first worker configuration from the supplied description.
Create a worker called [name].

Its single responsibility is to [specific responsibility].

It receives:
- [input 1]
- [input 2]

It must return:
- [output 1]
- [output 2]

It may:
- [approved action]

It must not:
- [prohibited action]

When uncertain, it should:
- [clarification or escalation behaviour]
Example goalCreate an internal customer-support process router. It receives a customer’s open-text request, identifies the most likely support process and returns a structured classification. It must not resolve the issue itself or invent an outcome.
  1. 1Describe one clear worker responsibility.
  2. 2Include the expected inputs.
  3. 3Include the expected output.
  4. 4State important non-goals.
  5. 5Explain what should happen when the request is ambiguous.
  6. 6Select the generation model.
  7. 7Select Build my Agentic Worker.
  8. 8Review every generated setting in Composer.
Generation is a starting pointDo not publish a worker immediately after generation. Review its instructions, selected model, tools, guardrails, memory and limits first.

Understand the configuration tabs

Composer groups the worker's configuration into tabs, each answering one question.

Agentic worker configuration tabs
TabMain question
IdentityWho is this worker and what type is it?
BehaviourWhat should it do and how should it behave?
ModelWhich configured model powers it?
ToolsWhat approved actions can it perform?
GuardrailsWhich safety controls should apply?
MemoryWhat should it remember between messages?
KnowledgeWhich approved knowledge bases may it answer from?
LimitsHow much room does it have to plan, call tools and respond?
AI suggests; the designer decidesComposer may recommend settings and label them Suggested by AI. Review each suggestion against the business requirement. Suggested settings can be changed or removed.

3. Configure identity and worker type

Identity defines who the worker is and how it operates.

Identity defines the worker’s name, description and operating type.
Display name
The human-readable name shown to designers and operators.
Description
A concise explanation of the worker’s role.
Single-turn
Designed for focused interactions and everyday tasks. It can respond and use approved tools without running a long autonomous process.
Agent graph
Designed for multiple specialist agents working together, with one deciding which specialist handles the work.
Deep worker
Designed for longer, multi-step jobs that require planning and checking progress.

The available capabilities of each worker type may evolve. Use the descriptions shown in the current Designer interface as the source of truth.

Recommended for the ACME Support Process RouterDisplay name: ACME Support Process Router. Description: an internal worker that performs customer-service intent classification. Agent type: Single-turn — the router performs one focused classification and returns a result. It does not need a long research or multi-agent process.
Do not choose a more complex worker type without a clear needThe worker type should match the responsibility. A simple classification task should not be turned into a long, autonomous process.

4. Write precise behaviour instructions

Behaviour is where the worker's responsibility, boundaries and output contract are defined.

Behaviour instructions define the worker’s responsibility, boundaries, inputs and expected output.
Tone
An optional description of how the worker should communicate, for example warm, concise or professional. For a machine-facing router, tone may be irrelevant because the worker returns structured data rather than customer-facing prose.
Instructions
The main business-specific instruction document. The platform may add standard behaviour and operational controls around these instructions.
Opening message
A message shown when the worker begins a customer-facing conversation. For an internal process router invoked by a flow, leave this blank.
  1. 1Role — state what the worker is.
  2. 2Single responsibility — state exactly what it must accomplish.
  3. 3Inputs — list the fields it receives.
  4. 4Outputs — define the required response structure.
  5. 5Allowed actions — state what it may do.
  6. 6Prohibited actions — state what it must not do.
  7. 7Ambiguity handling — explain when to ask a clarification question or return an uncertain result.
  8. 8Escalation — state when human support or another controlled process is required.
State non-goals explicitlyFor the ACME router, clearly state that it must not display the customer-service main menu, resolve a delivery problem, promise a refund or compensation, invent an order status, contact a customer or call an unrelated process.
Keep machine-facing output stableWhen a deterministic flow consumes the response, instruct the worker to return only the required fields and use consistent field names.

5. Select the model

Choose from the model credentials that have been made available to the workspace.

Choose a configured credential, provider and model, then tune response behaviour.
Credential
Select a model credential made available to the workspace.
Provider
The AI provider associated with the selected credential.
Model
The exact model identifier used by the worker.
Temperature
Controls how consistently or creatively the model responds. For structured classification, use a relatively precise setting and test whether the same request produces stable output.
Maximum reply length
Limit the size of the worker’s response where a concise result is expected.

The provider, credential and model shown in the screenshot are examples. Do not treat them as required Greentic defaults.

Designers select configured modelsPartnership administrators configure provider credentials and access. Designers select from the models made available to the workspace. See the Admin AI and tools guide for provider configuration. If the required credential is missing, do not enter credentials in the worker instructions — ask the workspace or partnership administrator to configure the provider correctly.

6. Add tools and reusable flows

Tools decide what the worker is actually able to attempt.

Tools allow the worker to use installed extensions or approved flows.
Extension tools
Installed extensions expose approved capabilities to the worker. The interface provides Add extension, search, a category filter, a description of each extension and an Add action.
Flow as tool
An existing flow can be made available as a callable tool where that architecture is appropriate.
  1. 1Open the Tools tab.
  2. 2Decide whether the worker genuinely requires a tool.
  3. 3Select Add extension or Add flow as tool.
  4. 4Search for the required capability.
  5. 5Review its description.
  6. 6Add only the required capability.
  7. 7Update the Behaviour instructions to explain when it may be used.
  8. 8Test successful, failed and ambiguous cases.
Tool access must be intentionalA worker should not receive a tool merely because it is available. Every added tool expands what the worker can attempt.
Prefer the smallest useful tool setA process router that only returns a classification may not need to call external tools. A support assistant that retrieves an order status may require one specific lookup capability. Adding a tool makes it available to the worker; it does not by itself explain when or why the worker should use it. Define that in the Behaviour instructions. More detail is in the Integrations and providers guide.

7. Apply guardrails

Guardrails add safety controls around what the worker receives and returns.

A selected guardrail will not run when its underlying capability is not installed.
  • Guardrails can be suggested by AI.
  • A suggested guardrail can be removed.
  • Add guardrail opens the available guardrail choices.
  • The interface shows whether the underlying protection is installed.
  • A selected guardrail marked Not installed will not run.
Selected does not mean operationalThe screenshot shows a Prompt-injection guard selected for the worker, but also states “Not installed — this protection won’t run”. The required capability must be installed and configured at the tenant or platform level before the worker can rely on it.

The options visible in this release include PII masking, a profanity filter, a secret-leak guard and a topic or scope guard. The list shown in the interface is not permanent or exhaustive.

  1. 1Review the worker’s exposure to untrusted input.
  2. 2Open Guardrails.
  3. 3Review any AI-suggested controls.
  4. 4Add only the controls relevant to the use case.
  5. 5Check the installation status.
  6. 6Contact the partnership or platform administrator when a required capability is not installed.
  7. 7Test the guardrail with safe fictional input.
  8. 8Confirm that legitimate requests still pass.
Guardrails complement good designGuardrails do not replace precise instructions, limited tools, deterministic validation or human approval for sensitive actions. See the Admin Guardrails guide and the Admin AI and tools guide.

8. Configure memory

Memory determines what context the worker carries between messages.

Memory can be configured separately for short-term and long-term use.
Short-term memory
Used when the worker needs context between messages within an active interaction.
Long-term memory
Used when the solution requires information to persist beyond the immediate interaction, according to the selected provider’s configuration.
Provider controls
Each memory type includes an enable or disable toggle, provider selection, Configure and Remove.

Exact retention, storage and retrieval behaviour depends on the selected memory provider and its configuration.

A one-turn router may not need memoryIf each request contains everything required for classification, disable unnecessary memory. Add memory only when the worker needs earlier conversational context.
Do not use memory as a system of recordImportant customer, transaction or compliance data should remain in the appropriate business system. Memory supports worker context; it does not replace controlled records.

9. Set execution limits

Limits control how much room the worker has to plan, call tools and respond.

Execution limits control how much room the worker has to plan, call tools and respond.
Light
Best suited to simple lookups, focused classification and short replies with limited back-and-forth.
Standard
The default choice for typical conversations that may require a small number of tool calls.
Heavy
Intended for longer multi-step research or investigation that requires more extensive work.

Use the current interface descriptions as guidance. Test the worker rather than assuming a higher limit will automatically improve it. Composer may recommend a limit and include a reason; designers can remove the suggestion and select another level. The selected limit should match the worker’s actual responsibility.

Choose the smallest level that completes the task reliablyFor the ACME Support Process Router, select Light. The worker performs single-pass intent classification and entity extraction. It does not need multi-step research or autonomous investigation.

Attach trusted knowledge when required

The Knowledge tab controls which prepared knowledge bases the worker can answer from.

  • Policies
  • Product information
  • Procedures
  • Support content
  • Internal documentation
Do not paste large policy documents into the instructionsUse a knowledge base for approved business context. Full detail is in the Knowledge guide.

10. Test the worker

Test directly in Composer and check the response against the expected contract.

Test the worker directly and inspect whether its response matches the expected contract.
  • The user enters an open customer request.
  • The worker detects a likely late-delivery intent.
  • The response includes structured fields.
  • The result identifies the deterministic process intended to handle the request.
  • The test panel includes Reset chat for starting a clean test.

The exact fields in the screenshot are specific to this demo and may include status, detected intent, confidence, extracted values, locale, a clarification question, possible intents, the called process and escalation indicators. Greentic does not automatically create or validate this exact schema for every worker.

  1. 1Open the Composer test panel.
  2. 2Reset the chat before testing an independent scenario.
  3. 3Enter a representative request.
  4. 4Confirm that the worker identifies the correct intent.
  5. 5Confirm that required entities are extracted.
  6. 6Confirm that uncertain requests produce the expected clarification behaviour.
  7. 7Confirm that prohibited actions are not attempted.
  8. 8Confirm that the output matches the downstream flow’s expected structure.
  9. 9Repeat the same request with alternative wording.
  10. 10Test at least one clearly unrelated request.
  11. 11Test a failure or missing-information case.
  12. 12Correct the instructions or configuration and test again.
Test matrix for an agentic worker
Test typeWhat to confirm
Clear requestThe correct intent or capability is selected
Alternative wordingDifferent customer phrasing produces the same intended route
Missing informationThe worker asks for clarification or returns an incomplete status
Ambiguous requestThe worker does not invent certainty
Unsupported requestThe worker returns the approved fallback or escalation result
Adversarial requestInstalled guardrails and instructions prevent unsafe behaviour
Repeated testThe response remains sufficiently stable for downstream processing
Test the contract, not only the meaningA response can be semantically correct but still break the downstream flow if a field is missing, renamed or returned in the wrong format.

11. Review before publishing

Work through this checklist before handing the worker to a release process.

  • The worker has one clear responsibility.
  • The display name and description are meaningful.
  • The worker type matches the task.
  • Behaviour instructions define inputs, outputs and non-goals.
  • The opening message is appropriate for how the worker is invoked.
  • The required model credential is selected.
  • Temperature and response length match the use case.
  • Only required tools or flows are attached.
  • Required guardrails are installed, not merely selected.
  • Memory is enabled only when needed.
  • The execution limit matches the complexity of the task.
  • Representative tests produce the expected result.
  • Ambiguous and unsupported requests follow the approved fallback.
  • Machine-facing output matches the downstream contract.
  • No real customer data was used during testing.

Troubleshooting at a glance

Common agentic worker problems, likely causes and actions
ProblemLikely causeAction
Build my Agentic Worker is unavailableThe goal is empty or no generation model is availableEnter a clear goal and confirm that a model is selectable
The worker returns generic customer-facing textIts role and output contract are not specific enoughStrengthen the Behaviour instructions and define the exact output
The worker attempts to resolve the issue itselfIts non-goals or boundaries are missingState that resolution belongs to the deterministic flow
The worker selects the wrong processIntent descriptions overlap or too few test examples were consideredRefine the routing definitions and test alternative wording
The output cannot be used by a flowFields are missing, inconsistent or surrounded by extra proseDefine a stable structured-output contract and test it explicitly
A model is missingThe required credential is not available to the workspaceAsk the administrator to configure or expose the provider
A tool is not availableThe extension or flow has not been installed, published or exposedReview the workspace tools and administrative configuration
A selected guardrail will not runThe underlying capability is marked Not installedAsk the administrator to install and configure the capability
The worker uses context it should not retainMemory is enabled unnecessarilyDisable or reconfigure the relevant memory provider
The worker performs too much workThe instructions are too broad or the execution limit is excessiveNarrow the responsibility and select a lighter limit
Independent tests influence each otherThe previous test conversation remains activeUse Reset chat before each independent scenario
The same request produces inconsistent routingInstructions, model settings or output constraints are too looseClarify the decision rules, lower variability and repeat the test
Back to Designer Guides