Skip to content
← Tools / Skills
ToolLangChain/10 trustVerified
Deep Agents logo

Deep Agents

LangChain's batteries-included agent harness: filesystem, subagents, memory, and planning out of the box

Visit official site →

About

Deep Agents is LangChain's standalone agent harness library (pip install deepagents) built on LangGraph's durable runtime. Instead of assembling an agent from primitives, you get the whole production stack wired together: an execution environment with tools, a virtual filesystem (in-memory, local disk, LangGraph store, or custom backends) with declarative read/write permission rules, sandboxed shell execution and a QuickJS in-process interpreter, built-in subagents that run in isolated context windows and return a single report, long-term memory via AGENTS.md files, Agent Skills-standard skill loading with progressive disclosure, automatic summarization and context offloading, and human-in-the-loop approval pauses. create_deep_agent(model=..., tools=[...], system_prompt=...) is the entry point; the harness also streams typed events for messages, tools, values, and subagent delegation.

What it can do

  • **Execution environment:** tools + virtual filesystem (ls, read_file, write_file, edit_file, delete, glob, grep) with pluggable backends and declarative permission rules
  • **Code execution:** sandboxed shell via `execute` tool, plus scoped QuickJS JavaScript `eval` interpreter
  • **Subagents:** built-in `task` tool spawns ephemeral agents with isolated context; parallel delegation supported
  • **Memory:** persistent AGENTS.md-backed memory, updatable from interaction; pluggable state/store/filesystem backends
  • **Skills:** Agent Skills standard (agentskills.io), progressive disclosure — frontmatter at startup, full content on demand
  • **Context management:** automatic summarization and offloading of history/large tool results; prompt caching for Anthropic/Bedrock
  • **Human-in-the-loop:** pause for approval at critical decision points
  • **Streaming:** typed event streams for messages, tools, values, and per-subagent streams
  • **Task planning:** opt-in `write_todos` tool via TodoListMiddleware (default-off since v0.7)

Setup

  1. Requires Python 3.10+
  2. pip install deepagents
  3. Set your model provider credentials (any LangChain-supported chat model)
  4. Create an agent:

```python

from deepagents import create_deep_agent

agent = create_deep_agent(

model="claude-sonnet-4-5", # any LangChain chat model

tools=[my_tool],

system_prompt="You are a helpful assistant.",

)

result = agent.invoke({"messages": [{"role": "user", "content": "..."}]})

```

  1. Optional: pass middleware=[TodoListMiddleware] for task planning, memory=[...] for AGENTS.md files, permissions=[...] to restrict filesystem access

Prerequisites

Python 3.10+. API credentials for your chosen chat model (any LangChain-supported provider). For sandboxed code execution, configure a sandbox backend. No LangSmith account required.

Use cases

agent-developmentcoding-agentsdeep-researchlong-running-tasksmulti-agent-systemsmcp

Works with

ClaudeHermescustom agentsLangGraph agents

Trust score — 9/10

/10 trustVerified

Scored 9/10 (verified tier, metrics-v1). Evidence: 30,162 GitHub stars (log-scaled vs catalog peers); blended with ~5,660,894 monthly package downloads; last push 0d ago; 100 releases/12mo; 191 open issues. Manual review: RED FLAG: filesystem permission rules explicitly do NOT apply to sandbox backends (execute = real shell). License: MIT.

★ 30,161 GitHub stars

How the trust score is built

Full methodology →
Adoption · stars/downloads, log-scaled vs peers
8.8/10
Maintenance · recency, releases, issue load
9.7/10
Openness · license + docs
10.0/10
Manual review · sanity read + red-flag check
9.0/10
  • · 30,162 GitHub stars (log-scaled vs catalog peers)
  • · blended with ~5,660,894 monthly package downloads
  • · last push 0d ago; 100 releases/12mo; 191 open issues
  • · manual review: RED FLAG: filesystem permission rules explicitly do NOT apply to sandbox backends (execute = real shell)

Sources

Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.