langchain-agentgate

Gate any LangChain tool behind human approval in Slack or Microsoft Teams — one wrapper, no rewrite.

pip install langchain-agentgate

Usage

from agentgate import AgentGate
from langchain_agentgate import ApprovalRequiredTool

gate = AgentGate(api_key="ag_your_key", base_url="https://your-agentgate-instance")

gated_send_email = ApprovalRequiredTool(
    wrapped_tool=send_email_tool,   # any existing BaseTool
    gate=gate,
    risk_tier="high",
    timeout_minutes=15,
)

Use gated_send_email anywhere send_email_tool would have gone — same name, same input schema, same output type. The only difference: before it actually runs, it posts a request to Slack/Teams and blocks until a human clicks Approve or Reject.

result = await agent_executor.ainvoke({"input": "email the Q4 proposal to john@acme.com"})

If rejected, the tool call returns the rejection reason as its output instead of raising — so the agent sees "the email was rejected because X" and can react to it, rather than crashing.

Why wrap instead of rewrite

Most human-in-the-loop patterns require restructuring how you build the tool. This doesn't — it wraps a BaseTool you already have. Your tool's logic, its args schema, and its name are all unchanged; approval is a layer around it, not a rewrite of it.

Requires

An AgentGate server — self-hosted or hosted — connected to Slack and/or Teams. See the AgentGate onboarding guide.

License

MIT