Short answer: Building AI agents into ERP systems is now practical with official Microsoft tooling. Microsoft Agent Framework reached a production-ready 1.0 on April 3, 2026 for .NET and Python, and SQL MCP Server became generally available in June 2026, giving agents role-based, controlled access to SQL databases. Combined with SQL Server 2025’s built-in AI features, business-software teams can ship assistants that answer inventory and invoice questions without ever letting a model write free-form SQL.
Why this is trending now
In 2026 the conversation moved from chatbots to agents: programs that use a language model to carry out tasks through defined tools, such as checking stock or drafting a purchase order. Key pieces of Microsoft’s stack landed in recent months:
| Component | Status | Date |
|---|---|---|
| Microsoft Agent Framework | 1.0, production-ready | April 3, 2026 |
| SQL MCP Server (in Data API builder) | Generally available | June 2026 |
| DiskANN vector indexes in Azure SQL | Generally available | September 29, 2026 |
| Blazor AI components | Experimental with .NET 11 | .NET 11 launch, November 2026 |
Microsoft Agent Framework 1.0
Agent Framework unifies Semantic Kernel’s enterprise foundations with AutoGen’s orchestration patterns in one open-source SDK. The .NET package is Microsoft.Agents.AI, and Microsoft commits to full backward compatibility for 1.0 stable features.
Stable capabilities
- Single agents with connectors for Microsoft Foundry, Azure OpenAI, OpenAI, Anthropic Claude, Amazon Bedrock, Google Gemini and Ollama.
- Middleware hooks and pluggable memory and context providers.
- Graph-based workflows with checkpointing.
- Multi-agent orchestration: sequential, concurrent, handoff and group chat.
- Human-in-the-loop approvals with pause and resume, essential for financial operations.
- Declarative agents and workflows in YAML, plus MCP support.
SQL MCP Server: a governed gateway to your data
The Model Context Protocol (MCP) is a standard that lets models call external tools. SQL MCP Server is Microsoft’s free, open-source engine, included in Data API builder from version 1.7, that connects agents to SQL databases through a config file defining which tables, views and stored procedures are exposed and what each role may do.
Why its security design matters
- No NL2SQL by design: the model never writes raw SQL; T-SQL is generated deterministically from an entity abstraction layer.
- Role-based access control per entity and per field.
- DML only: no schema creation or changes.
- Seven defined tools: describe_entities, create_record, read_records, update_record, delete_record, execute_entity and aggregate_records; version 2.0 can expose stored procedures as named custom tools.
- Self-hosted in Azure, on-premises or any cloud.
Where SQL Server 2025 fits
SQL Server 2025 adds a VECTOR type, in-database embedding generation with AI_GENERATE_EMBEDDINGS and REST calls via sp_invoke_external_rest_endpoint. Semantic search over items and documents can therefore run inside the database and be exposed to the agent as a tool. EF Core 11 supports vector and hybrid search, though those features are still experimental there.
ERP scenarios
- Inventory assistant: “What is the stock of item X in the Jeddah warehouse?” maps to read_records on a read-only view.
- Sales summary: “Total sales this week by branch?” via aggregate_records.
- Draft purchase order: the agent proposes quantities from reorder levels and waits for user approval before creating anything.
- Document search: find a contract or invoice from a loose description using vector search.
A five-layer reference architecture
- UI: a chat panel inside a Blazor app or a messaging channel.
- Agent: Microsoft Agent Framework with clear instructions and task limits.
- Tools: SQL MCP Server under a restricted role, with stored procedures for sensitive operations.
- Data: SQL Server with read-only views and vector indexes where useful.
- Oversight: human approval for every write and full logging of requests and results.
What this means for Saudi businesses
The goal is not to replace accountants or storekeepers but to shorten the time to an answer. Settle these points early:
- Data location: choose a model and provider that fit company policy and personal-data protection requirements; local models via Ollama are an option.
- Financial and tax data: anything touching invoices or journal entries needs human approval, since ZATCA-cleared e-invoices carry regulatory weight.
- Arabic: test how well the model handles local dialect questions and Arabic item names before rollout.
- Start small: a read-only agent over inventory or sales data before granting any write access.
How the Riv-ERP team helps
Riv-ERP is a Saudi-made cloud ERP and accounting system built on Oracle Database and Oracle APEX and compliant with ZATCA Phases 1 and 2. Alongside it, our team builds custom solutions with .NET, C#, SQL Server and Blazor, backed by 20+ years of team experience. To explore an AI assistant over your data or an API integration with another platform, request a quote or reach us on WhatsApp at +966552007190.
Sources: Microsoft Agent Framework 1.0 announcement, SQL MCP Server overview, What’s new in SQL Server 2025.
Related Articles
Frequently Asked Questions
What is the difference between a chatbot and an AI agent?
A chatbot only replies with text; an agent uses defined tools to perform real tasks, such as reading stock levels or drafting a document, within permissions set by the developer.
When did Microsoft Agent Framework become production-ready?
Version 1.0 shipped on April 3, 2026 with stable APIs and a backward-compatibility commitment, following a February 2026 release candidate. It is available for .NET and Python.
Does SQL MCP Server turn user questions directly into SQL?
No. Microsoft deliberately avoids NL2SQL because model output is nondeterministic; the server generates T-SQL deterministically from predefined entities and role permissions.
Is SQL MCP Server free?
Yes. It is part of the free, open-source Data API builder and can run in Azure, on-premises or in any cloud.
Do I need SQL Server 2025 to build an agent?
Not for basic data access, but SQL Server 2025 adds in-database vector search and embedding generation, which power semantic search over items and documents.
Can an AI agent be connected to Riv-ERP?
The Riv-ERP team can study your requirements and the feasibility of an API-based integration, then propose a custom solution and quote after you contact us.
