AutoGen
Open-source programming framework from Microsoft for building conversational multi-agent applications, now succeeded by Agent Framework.
Delv Safety Grade: B
Score 72/100 · assessed 2026-04-18
AutoGen is Microsoft's open-source multi-agent framework, now in maintenance mode as development shifts to Agent Framework. The maintainer score is excellent given Microsoft's backing and the project's maturity. However, permissions scoring is low because AutoGen is a framework for building autonomous agents that typically require code execution, filesystem access, and network calls to function. The supply chain is solid via PyPI with proper versioning, though users must carefully vet any agents they build or deploy. Transparency is strong with comprehensive documentation and active community. No known security incidents, but the framework's power means developers must implement their own safety guardrails. The successor project (Agent Framework) may offer improved safety patterns.
Green flags
- Backed by Microsoft with strong institutional support
- Mature open-source project with extensive documentation
- Active community and clear migration path to successor framework
- Well-established PyPI distribution with semantic versioning
- No known security incidents or malicious versions
Red flags
- Framework enables arbitrary code execution through agent interactions
- Now in maintenance mode, active development moved to Agent Framework
- Safety guardrails depend entirely on developer implementation
- Multi-agent systems can exhibit emergent behaviours difficult to predict
Permissions requested
Pricing
Platforms
Review
Best for researchers and developers learning multi-agent patterns who don't mind building on a deprecated framework. Skip it if you need production stability or prefer opinionated tooling. Agent Framework is the successor for new projects.
Good at
- Conversational agent patterns catch errors single-pass LLMs miss
- Lower-level primitives allow custom orchestration logic
- Strong documentation and active community despite deprecation
- Free and open-source with no vendor lock-in
- Good middle ground between raw API calls and opinionated frameworks
Watch out
- Officially deprecated in favour of Agent Framework
- Agents can loop endlessly without careful termination logic
- Token costs escalate quickly in multi-turn conversations
- Requires solid prompt engineering skills to define useful roles
- No built-in environmental actions like web browsing or file manipulation
Use cases
- multi-agent research
- task solving
- chat patterns