Rhapsody has launched Guardian, a governance product for controlling how AI agents reach healthcare data and services. The company says Guardian authenticates agents, restricts them to approved operations, applies rate limits and records agent, Model Context Protocol and API activity. A health system could allow an agent to call one service, limit the actions available through it and retain an audit trail of each request. Rhapsody says the product can run independently or alongside its own and third-party integration platforms, and is available now.
The release presents a practical bridge between policy and enforcement. Governance documents can say an agent should use only approved data, but a gateway must translate that rule into credentials, scopes, transaction limits and logs. Healthcare is the announced market, yet the pattern is relevant to banks and insurers using MCP or APIs to expose regulated services. Important details remain for buyers to test: how an agent identity is issued and revoked, whether a delegated user can exceed their own authority, how emergency access is handled, and whether the audit record captures the purpose and outcome of an action rather than merely the call. Product capabilities remain Rhapsody's claims until independently tested.
