- Open source harness: MIT licensed, available for Python and TypeScript
- AGENTS.md: open standard for agent instructions
- Agent Skills: open standard for agent knowledge and actions
- Any model, any sandbox: no provider lock-in
- Open protocols: MCP, A2A, Agent Protocol
- Self-hostable: LangSmith Deployments can be self-hosted so memory stays in your infrastructure
Compare to Claude Managed Agents
| Deep Agents Deploy | Claude Managed Agents | |
|---|---|---|
| Model support | OpenAI, Anthropic, Google, Bedrock, Azure, Fireworks, Baseten, OpenRouter, many more | Anthropic only |
| Harness | Open source (MIT) | Proprietary, closed source |
| Sandbox | LangSmith, Daytona, Modal, Runloop, or custom | Built in |
| MCP support | ✅ | ✅ |
| Skill support | ✅ | ✅ |
| AGENTS.md support | ✅ | ❌ |
| Agent endpoints | MCP, A2A, Agent Protocol | Proprietary |
| Self hosting | ✅ | ❌ |
What you’re deploying
deepagents deploy packages your agent configuration and deploys it as a LangSmith Deployment. You configure your agent with a few parameters:
| Parameter | Description |
|---|---|
model | The LLM to use. Any provider works — see supported models. |
AGENTS.md | The system prompt, loaded at the start of each session. |
skills | Agent Skills for specialized knowledge and actions. Skills are synced into the sandbox so the agent can execute them at runtime. See skills docs. |
user/ | Per-user writable memory. If a AGENTS.md template is present in the user folder, the agents seeds the template per user (if the folder is empty the agents creates an empty AGENTS.md). Writable at runtime. Preloaded into the agent’s context via the memory middleware. |
mcp.json | MCP tools (HTTP/SSE). See MCP docs. |
sandbox | Optional execution environment. Thread-scoped sandboxes are provisioned per thread and will be re-created if the server restarts. Use scope = "assistant" if you need sandbox state that persists across threads. See sandbox providers. |
Install
Install the CLI or run directly withuvx:
Usage
deepagents deploy looks for deepagents.toml in the current directory. Pass --config to use a different path:
deepagents deploy fully rebuils and creates a new revision on every invocation. Use deepagents dev for local iteration.
deepagents init
Scaffold a new agent project:
| File | Purpose |
|---|---|
deepagents.toml | Agent config — name, model, optional sandbox |
AGENTS.md | System prompt loaded at session start |
.env | API key template (GOOGLE_API_KEY, LANGSMITH_API_KEY, etc.) |
mcp.json | MCP server configuration (empty by default) |
skills/ | Directory for Agent Skills, with an example review skill |
AGENTS.md with your agent’s instructions and run deepagents deploy. Optionally add a user/ directory with per-user memory templates — see User Memory.
Project layout
The deploy command uses a convention-based project layout. Place the following files alongside yourdeepagents.toml and they are automatically discovered:
| File/directory | Purpose | Required |
|---|---|---|
AGENTS.md | Memory for the agent. Provides persistent context (project conventions, instructions, preferences) that is always loaded at startup. Read-only at runtime. | Yes |
skills/ | Directory of skill definitions. Each subdirectory should contain a SKILL.md file. Read-only at runtime. | No |
user/ | Per-user writable memory. If a AGENTS.md template is present in the user folder, the agents seeds the template per user (if the folder is empty the agents creates an empty AGENTS.md). Writable at runtime. Preloaded into the agent’s context via the memory middleware. | No |
mcp.json | MCP server configuration. Only http and sse transports are supported in deployed contexts. | No |
.env | Environment variables (API keys, secrets). Placed alongside deepagents.toml at the project root. | No |
Configuration file
deepagents.toml configures the agent’s identity and sandbox environment. Only the [agent] section is required. The [sandbox] section is optional and defaults to no sandbox.
[agent]
(Required)
Core agent identity. For more on model selection and provider configuration, see supported models.
Name for the deployed agent. Used as the assistant identifier in LangSmith.
Model identifier in
provider:model format. See supported models.deepagents.toml
The
name field is the only required value in the entire configuration file. Everything else has defaults.deepagents.toml:
- Skills: the bundler recursively scans
skills/, skipping hidden dotfiles, and bundles the rest. - User memory: if
user/exists, a singleAGENTS.mdis bundled as per-user memory (fromuser/AGENTS.mdif present, otherwise empty). At runtime, each user gets their own copy (seeded on first access, never overwritten). The agent can read from and write to this file. - MCP servers: if
mcp.jsonexists, it is included in the deployment andlangchain-mcp-adaptersis added as a dependency. Only HTTP/SSE transports are supported (stdio is rejected at bundle time). - Model dependencies: the
provider:prefix in themodelfield determines the requiredlangchain-*package (e.g.,google_genai->langchain-google-genai). - Sandbox dependencies: the
[sandbox].providervalue maps to its partner package (e.g.,daytona->langchain-daytona).
[sandbox]
Configure the isolated execution environment where the agent runs code. Sandboxes provide a container with a filesystem and shell access, so untrusted code cannot affect the host. For supported providers and advanced sandbox configuration, see sandboxes.
When omitted or set to provider = "none", the sandbox is disabled. Sandboxes are for if you need code execution or skill script execution.
Sandbox provider. Determines where the container runs. Supported values:
"none", "daytona", "modal", "runloop", "langsmith" (private beta). See sandbox integrations for provider details.Provider-specific template name for the sandbox environment.
Base Docker image for the sandbox container.
Sandbox lifecycle scope.
"thread" creates one sandbox per conversation. "assistant" shares a single sandbox across all conversations for the same assistant."thread"(default): Each conversation gets its own sandbox. Different threads get different sandboxes, but the same thread reuses its sandbox across turns. Use this when each conversation should start with a clean environment."assistant": All conversations share one sandbox. Files, installed packages, and other state persist across conversations. Use this when the agent maintains a long-lived workspace like a cloned repo.
.env
Place a .env file alongside deepagents.toml with your API keys:
Sandbox providers
Set[sandbox].provider in deepagents.toml and add the required env vars to .env. For available providers, see sandbox integrations. For lifecycle patterns and SDK usage, see sandboxes.
Deployment endpoints
The deployed server exposes:- MCP: call your agent as a tool from other agents
- A2A: multi-agent orchestration via A2A protocol
- Agent Protocol: standard API for building UIs
- Human-in-the-loop: approval gates for sensitive actions
- Memory: short-term and long-term memory access
Examples
A content writing agent with per-user preferences that the agent can update:deepagents.toml
deepagents.toml
User Memory
User memory gives each user their own writableAGENTS.md that persists across conversations. To enable it, create a user/ directory at your project root:
user/ directory exists (even if empty), every user gets their own AGENTS.md at /memories/user/AGENTS.md. If you provide user/AGENTS.md, its contents are used as the initial template; otherwise an empty file is seeded.
At runtime, user memory is scoped per user via custom auth (runtime.server_info.user.identity). The first time a user interacts with the agent, their namespace is seeded with the template. Subsequent interactions reuse the existing file — the agent’s edits persist, and redeployments never overwrite user data.
How it works
- Bundle time — the bundler reads
user/AGENTS.md(or uses an empty string) and includes it in the seed payload. - Runtime (first access) — when the agent sees a
user_idfor the first time, it writes theAGENTS.mdtemplate to the store under that user’s namespace. Existing entries are never overwritten. - Preloaded — the user
AGENTS.mdis passed to the memory middleware, so the agent sees its contents in context at the start of every conversation. - Writable — the agent can update it using the
edit_filetool. The sharedAGENTS.mdfile and skills folder are read-only.
Permissions
| Path | Writable | Scope |
|---|---|---|
/memories/AGENTS.md | No | Shared (assistant-scoped) |
/memories/skills/** | No | Shared (assistant-scoped) |
/memories/user/** | Yes | Per-user (user_id-scoped) |
User identity
Theuser_id is resolved from custom auth via runtime.user.identity. The platform injects the authenticated user’s identity automatically — no need to pass it through configurable. If no authenticated user is present, user memory features are gracefully skipped for that invocation.
Gotchas
- AGENTS.md and skills are read-only at runtime. Edit source files and redeploy to update them. The per-user
AGENTS.mdat/memories/user/AGENTS.mdis the exception — it is writable by the agent. - Full rebuild on deploy:
deepagents deploycreates a new revision on every invocation. Usedeepagents devfor local iteration. - Sandbox lifecycle: Thread-scoped sandboxes are provisioned per thread and will be re-created if the server restarts. Use
scope = "assistant"if you need sandbox state that persists across threads. - MCP: HTTP/SSE only. Stdio transports are rejected at bundle time.
Limitations
- MCP: HTTP/SSE only. Stdio transports are rejected at bundle time.
- No custom Python tools. Use MCP servers to expose custom tool logic.
Connect these docs to Claude, VSCode, and more via MCP for real-time answers.

