LangGraph
Low-level agent orchestration framework by LangChain for building controllable, stateful single and multi-agent systems.
Delv Safety Grade: A
Score 82/100 · assessed 2026-04-18
LangGraph is a well-maintained agent orchestration framework from LangChain, a recognised player in the LLM tooling space. The project benefits from strong transparency with comprehensive documentation, active development, and proper package distribution via PyPI and npm. As a framework rather than a pre-built agent, its actual permissions depend entirely on how developers configure it, but typical usage involves filesystem access for state persistence, network calls to external LLMs, and environment variable reading for API keys. The framework itself is architecturally sound, but developers must carefully scope agent capabilities since LangGraph enables arbitrary tool execution. Supply chain is solid with standard package management. No known security incidents. The main risk is that it's a powerful framework requiring careful implementation to avoid over-permissioned agents.
Green flags
- Maintained by established LangChain organisation with strong track record
- Fully open source with excellent documentation and active community
- Distributed via standard package managers (PyPI, npm) with proper versioning
- Explicit state management provides better control than opaque agent frameworks
- No known security incidents or malicious versions
Red flags
- Framework enables arbitrary tool execution if misconfigured by developers
- Agents can access any API keys present in environment variables
- State persistence may write sensitive data to filesystem without encryption
- Multi-agent systems increase attack surface through agent-to-agent comms
Permissions requested
Pricing
Platforms
Review
Pay for LangGraph Cloud if you're shipping production agents that need auditability and complex state management. Stick with the open-source version for experimentation, or skip entirely if you want a no-code agent builder.
Good at
- Explicit state graphs make agent logic inspectable and debuggable
- Checkpoint system allows replay and human-in-the-loop intervention
- Multi-agent orchestration with clear handoff semantics
- Open-source core is production-ready without vendor lock-in
- LangChain ecosystem integration for tools and memory
Watch out
- Steep learning curve; assumes graph theory and async Python fluency
- Overkill for simple linear agent tasks
- Debugging cyclic workflows with LLM non-determinism is painful
- Hosted platform pricing not transparent; can scale quickly
- Less abstraction than competitors means more boilerplate code
Use cases
- agent orchestration
- stateful agents
- production deploy