Deep Agents
LangChain's batteries-included agent harness: filesystem, subagents, memory, and planning out of the box
About
Deep Agents is LangChain's standalone agent harness library (pip install deepagents) built on LangGraph's durable runtime. Instead of assembling an agent from primitives, you get the whole production stack wired together: an execution environment with tools, a virtual filesystem (in-memory, local disk, LangGraph store, or custom backends) with declarative read/write permission rules, sandboxed shell execution and a QuickJS in-process interpreter, built-in subagents that run in isolated context windows and return a single report, long-term memory via AGENTS.md files, Agent Skills-standard skill loading with progressive disclosure, automatic summarization and context offloading, and human-in-the-loop approval pauses. create_deep_agent(model=..., tools=[...], system_prompt=...) is the entry point; the harness also streams typed events for messages, tools, values, and subagent delegation.
What it can do
- **Execution environment:** tools + virtual filesystem (ls, read_file, write_file, edit_file, delete, glob, grep) with pluggable backends and declarative permission rules
- **Code execution:** sandboxed shell via `execute` tool, plus scoped QuickJS JavaScript `eval` interpreter
- **Subagents:** built-in `task` tool spawns ephemeral agents with isolated context; parallel delegation supported
- **Memory:** persistent AGENTS.md-backed memory, updatable from interaction; pluggable state/store/filesystem backends
- **Skills:** Agent Skills standard (agentskills.io), progressive disclosure — frontmatter at startup, full content on demand
- **Context management:** automatic summarization and offloading of history/large tool results; prompt caching for Anthropic/Bedrock
- **Human-in-the-loop:** pause for approval at critical decision points
- **Streaming:** typed event streams for messages, tools, values, and per-subagent streams
- **Task planning:** opt-in `write_todos` tool via TodoListMiddleware (default-off since v0.7)
Setup
- Requires Python 3.10+
pip install deepagents- Set your model provider credentials (any LangChain-supported chat model)
- Create an agent:
```python
from deepagents import create_deep_agent
agent = create_deep_agent(
model="claude-sonnet-4-5", # any LangChain chat model
tools=[my_tool],
system_prompt="You are a helpful assistant.",
)
result = agent.invoke({"messages": [{"role": "user", "content": "..."}]})
```
- Optional: pass
middleware=[TodoListMiddleware]for task planning,memory=[...]for AGENTS.md files,permissions=[...]to restrict filesystem access
Prerequisites
Python 3.10+. API credentials for your chosen chat model (any LangChain-supported provider). For sandboxed code execution, configure a sandbox backend. No LangSmith account required.
Use cases
Works with
Trust score — 9/10
Scored 9/10 (verified tier, metrics-v1). Evidence: 30,162 GitHub stars (log-scaled vs catalog peers); blended with ~5,660,894 monthly package downloads; last push 0d ago; 100 releases/12mo; 191 open issues. Manual review: RED FLAG: filesystem permission rules explicitly do NOT apply to sandbox backends (execute = real shell). License: MIT.
★ 30,161 GitHub stars
How the trust score is built
Full methodology →- Adoption · stars/downloads, log-scaled vs peers
- 8.8/10
- Maintenance · recency, releases, issue load
- 9.7/10
- Openness · license + docs
- 10.0/10
- Manual review · sanity read + red-flag check
- 9.0/10
- · 30,162 GitHub stars (log-scaled vs catalog peers)
- · blended with ~5,660,894 monthly package downloads
- · last push 0d ago; 100 releases/12mo; 191 open issues
- · manual review: RED FLAG: filesystem permission rules explicitly do NOT apply to sandbox backends (execute = real shell)
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.