What we found: Nobody has a list. Agents get added by whoever is evaluating a tool that month, each with its own credentials, its own write access and its own idea of what a field means. At 40 of them, several are writing the same record within the same hour.
What we did: A full inventory first: every agent, what triggers it, what it writes to, whose budget it sits on. Then the question each one has to answer, which is what revenue activity it protects or produces.