This release is a pre-release and may not be stable for production use.
Python authoring package and CLI launcher for Managed Deep Agents.
[!IMPORTANT] Public beta. Managed Deep Agents is in public beta. The PyPI package API and managed runtime contract may change. See the docs for getting started and updates.
managed-deepagents is the PyPI package for authoring Managed Deep Agents in
Python. It includes:
define_deep_agent, the Python authoring contract for managed agents.define_schedule, the Python contract for managed cron schedules.mda, the CLI used to build and deploy your agent to LangSmith.managed_deepagents.runtime, the runtime helper used by generated managed entry modules.
Install
uv tool install managed-deepagents
[!NOTE] Private beta: dev releases only. We currently publish only PEP 440 pre-release (dev) versions and no stable version yet. uv skips pre-releases by default unless they are allowed explicitly:
uv tool install --prerelease allow managed-deepagents
This package requires Python 3.9 or newer. Each platform wheel bundles the
prebuilt mda binary for its OS and CPU architecture and exposes it through the
mda console script. This PyPI-installed CLI scaffolds and compiles Python
projects only and vendors the Python runtime bundled with this wheel.
To start a new project, run mda init and follow the guided setup:
mda init
After scaffolding, choose a coding agent to continue building or choose View raw prompt to copy the setup instructions. The CLI supports Deep Agents Code, Claude Code, Codex, Cursor, Droid, Gemini CLI, opencode, and Pi. If Deep Agents Code is not installed, selecting it offers the official install command; on native Windows, use WSL. Coding agents open in the new project directory.
mda init can shape the project up front — --instructions "..." (or
--instructions-file <path>) writes the system prompt, --model <spec> picks
the model, --memory agent opts into deployment-shared durable memory, and
--no-sandbox leaves out the sandbox. Every new project includes an
identity.py that explicitly selects auth.langsmith_api_key() authentication.
Managed Deep Agent evals are Harbor tasks under evals/tasks/. Optionally create
a minimal source task under evals/scaffold/ with mda evals init <name>, then
package the managed agent and scaffolded tasks with mda evals compile.
mda init my-agent --gateway runs the agent on
LangSmith Gateway — a model
LangSmith hosts, billed to your workspace's Gateway Credits, authenticated with
a LangSmith API key instead of a model provider key of your own. It is mutually
exclusive with --model, which names a provider you hold the key for.
Define an Agent
Create an agent.py that defines an agent:
from managed_deepagents import define_deep_agent
# The system prompt comes from instructions.md next to this file.
agent = define_deep_agent(
name="research-assistant",
model="openai:gpt-5.5",
tools=[query_db],
)
define_deep_agent requires a static name (LangGraph assistant id and default LangSmith deployment name) and otherwise accepts the create_deep_agent keyword surface minus the managed keys: backend, store, checkpointer, memory, skills, and system_prompt. Those are provided by the managed runtime when your agent is deployed. Write the system prompt in instructions.md next to agent.py; the CLI embeds it at deploy time.
To authenticate SDK and API requests with a LangSmith workspace key while retaining MDA's thread and store authorization, declare it explicitly:
identity = define_identity(auth=auth.langsmith_api_key())
Clients send the key as x-api-key. LangSmith Cloud supplies the verification
endpoint and tenant configuration; do not add those platform-owned values to
the project .env.
On deploy, Context Hub stores harness files (instructions.md, skills/**). A
root memory.py declaring define_memory(scope="agent") additionally mounts one
deployment-shared memory tree at /memories/agent/.
/memories/agent/AGENTS.md is injected every turn; other files are read on
demand. Deploy never overwrites existing memories. Memory is independent of
identity, and a project without memory.py mounts no durable memory.
Project Shape
my-agent/
agent.py # named `agent` variable
identity.py # managed authentication (included by `mda init`)
instructions.md # managed system prompt
pyproject.toml
.env # local deploy secrets, never committed
schedules/ # optional managed cron schedules
tools/ # optional custom tools
middleware/ # optional middleware
skills/ # optional skills synced to Context Hub
sandbox/ # LangSmith sandbox (`mda init` includes this; delete to opt out)
connectors/mcp.py # optional MCP server declaration
The CLI copies your project files into the managed build and generates the entry module that connects your definition to the hosted runtime.
The agent entry must live at the project root as agent.py.
Define a Schedule
Create one file per schedule under schedules/ and define a named schedule:
# schedules/daily_digest.py
from managed_deepagents import define_schedule
schedule = define_schedule(
cron="0 8 * * 1-5",
timezone="America/Los_Angeles",
prompt="Write the daily digest.",
)
mda deploy reconciles schedules as LangSmith cron jobs after the deployment is
live. Declarations must be statically serializable literals or top-level
constants; prompt schedules become user-message input, and stateless runs clean
up their temporary thread after completion.
Sandbox
mda init scaffolds sandbox/__init__.py with a LangSmith sandbox. MDA only
enables the sandbox when that declaration is present — delete sandbox/ to opt
out:
from managed_deepagents import define_sandbox
sandbox = define_sandbox(
scope="thread",
idle_ttl_seconds=600,
)
If sandbox/setup.sh exists, MDA embeds it and runs it once when the sandbox is
first provisioned. MDA owns sandbox naming, image/snapshot selection, reuse, and
lifecycle.
MCP Connectors
Add connectors/mcp.py to attach MCP servers. The file must define a
module-level connector. By default, MDA exposes every tool loaded from each
declared server. Supply your own auth via static headers when the server
requires credentials:
from managed_deepagents import connectors
connector = connectors.mcp(
mcp_servers={
"langchainDocs": {
"transport": "http",
"url": "https://docs.langchain.com/mcp",
"include_tools": ["search", "fetch"],
},
},
)
Use include_tools or exclude_tools inside a server config to select a
subset. Tool names are raw MCP tool names before the managed {server}__ prefix
is applied, so "include_tools": ["search"] on server langchainDocs exposes
langchainDocs__search when prefixing is enabled.
CLI
Create a new project:
mda init my-agent
Build locally:
mda build ./my-agent
Run on the local LangGraph dev server:
mda dev ./my-agent
mda dev requires uv on PATH, but it resolves the local LangGraph dev
server automatically; you do not need to install a global langgraph command.
Deploy to LangSmith:
mda deploy ./my-agent
The generated build is written to <root>/.mda/build by default.
Common deploy options:
mda deploy ./my-agent --name my-agent-dev --deployment-type dev
mda deploy ./my-agent --workspace-id "$LANGSMITH_WORKSPACE_ID"
mda deploy ./my-agent --no-wait
Read the deployed agent's server logs:
mda logs ./my-agent
mda logs ./my-agent --lines 200 --level error
mda logs ./my-agent > agent.log
In a terminal mda logs streams new output until you press Ctrl-C. When the
output is piped or redirected it prints the most recent lines (1000 by default)
and exits.
Tear it down again:
mda delete ./my-agent
mda delete (alias mda destroy) removes the LangSmith deployment, the tracing
project created alongside it, the deployment's Context Hub repo (plus any legacy
per-user or org child memory repos left from older runtimes), and the managed
sandboxes the deployment created. It asks for confirmation first; pass --yes
to skip the prompt in scripts. Agent memory and thread history are not
recoverable afterwards.
Sandboxes are matched by name: the runtime names each one
{deployment}--{digest}, which also lets a restarted deployment re-adopt its
existing sandbox instead of stranding it. The digest covers the sandbox scope
plus how it was provisioned, so editing setup.sh or switching snapshots gives
the next run a fresh sandbox instead of one built from the previous recipe.
Sandboxes created before this behavior existed are unnamed and are left to
LangSmith's idle-stop and retention window.
Before deploying, make sure your model provider key such as OPENAI_API_KEY
or ANTHROPIC_API_KEY is available in the project .env or LangSmith
workspace secrets; a value exported in your shell is not deployed. For
LangSmith itself, set LANGSMITH_API_KEY in .env or your shell, or run
interactively and press Enter at the prompt to sign in with your browser (the
CLI creates a key and writes it to .env). Use LANGSMITH_WORKSPACE_ID or
--workspace-id when your credentials require a workspace selection.
1 maintainer
Metadata
1 maintainer
Release files for managed-deepagents 0.5.3.dev113
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Built distributions (wheels)
| File | Reset | |||
|---|---|---|---|---|
| managed_deepagents-0.5.3.dev113-py3-none-win_arm64.whl | Python 3 | none | Windows ARM64 | Details |
| managed_deepagents-0.5.3.dev113-py3-none-win_amd64.whl | Python 3 | none | Windows x86-64 | Details |
| managed_deepagents-0.5.3.dev113-py3-none-manylinux2014_x86_64.whl | Python 3 | none | Linux glibc 2.17+ x86-64 | Details |
| managed_deepagents-0.5.3.dev113-py3-none-manylinux2014_aarch64.whl | Python 3 | none | Linux glibc 2.17+ ARM64 | Details |
| managed_deepagents-0.5.3.dev113-py3-none-macosx_11_0_arm64.whl | Python 3 | none | macOS 11.0+ ARM64 | Details |
| managed_deepagents-0.5.3.dev113-py3-none-macosx_10_12_x86_64.whl | Python 3 | none | macOS 10.12+ x86-64 | Details |
Total release size: 11.6 MB
Release files / managed_deepagents-0.5.3.dev113-py3-none-win_arm64.whl
| Download URL | managed_deepagents-0.5.3.dev113-py3-none-win_arm64.whl |
|---|---|
| Size | 1.8 MB |
| Tags | Python 3 Windows ARM64 |
|
SHA-256 checksum How to use checksums |
6b209ce9997f064d43497741da42209b9003994166b032b52cb5d836339a4789
|
|
BLAKE2b-256 checksum How to use checksums |
0b937eda630bb9fc3386e79533c2868b8fdd2558af9fdd7228359e89a8047f8b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 18, 2026.
Transparency logRelease files / managed_deepagents-0.5.3.dev113-py3-none-win_amd64.whl
| Download URL | managed_deepagents-0.5.3.dev113-py3-none-win_amd64.whl |
|---|---|
| Size | 1.9 MB |
| Tags | Python 3 Windows x86-64 |
|
SHA-256 checksum How to use checksums |
7dacc405adefb2079e9c83f4d453714dc622ed12da20e55fe403a1f827416eac
|
|
BLAKE2b-256 checksum How to use checksums |
60d562d26837c988abe5fc85ffc7fa45938ad61cb10a3a1416409c26a6b1978f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 18, 2026.
Transparency logRelease files / managed_deepagents-0.5.3.dev113-py3-none-manylinux2014_x86_64.whl
| Download URL | managed_deepagents-0.5.3.dev113-py3-none-manylinux2014_x86_64.whl |
|---|---|
| Size | 2.1 MB |
| Tags | Linux glibc 2.17+ x86-64 Python 3 |
|
SHA-256 checksum How to use checksums |
08db9ee4b6b932c9668f6cffc31ed9d4aae50e62abf602d1b45c7e5f77b589f8
|
|
BLAKE2b-256 checksum How to use checksums |
9aab455c85a3edc845dc90b584ed1f5e615dfd5d94212ecf6db2bfc05bfc87df
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 18, 2026.
Transparency logRelease files / managed_deepagents-0.5.3.dev113-py3-none-manylinux2014_aarch64.whl
| Download URL | managed_deepagents-0.5.3.dev113-py3-none-manylinux2014_aarch64.whl |
|---|---|
| Size | 2.0 MB |
| Tags | Linux glibc 2.17+ ARM64 Python 3 |
|
SHA-256 checksum How to use checksums |
f7f2c73733deab6be69666de497693bc6106c264044409dbd3f84a80e7093efb
|
|
BLAKE2b-256 checksum How to use checksums |
ddb0554116916005bfa956f3a8f006f06ca9a87b8f95bb72d0355cf3fc6b8c33
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 18, 2026.
Transparency logRelease files / managed_deepagents-0.5.3.dev113-py3-none-macosx_11_0_arm64.whl
| Download URL | managed_deepagents-0.5.3.dev113-py3-none-macosx_11_0_arm64.whl |
|---|---|
| Size | 1.8 MB |
| Tags | Python 3 macOS 11.0+ ARM64 |
|
SHA-256 checksum How to use checksums |
50247024f15ac0c07ed8661e9147aad8ea8dacd1545e4a72dee78f5a3d2635d2
|
|
BLAKE2b-256 checksum How to use checksums |
4739c045ccb46f03c1c1d3d6b8fcc23a1d0f01c611b36a9bc6453bab08e1eff1
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 18, 2026.
Transparency logRelease files / managed_deepagents-0.5.3.dev113-py3-none-macosx_10_12_x86_64.whl
| Download URL | managed_deepagents-0.5.3.dev113-py3-none-macosx_10_12_x86_64.whl |
|---|---|
| Size | 1.9 MB |
| Tags | Python 3 macOS 10.12+ x86-64 |
|
SHA-256 checksum How to use checksums |
c18ec4cd8facf1a4313ec749453ac81dc2c59024146253ee16063078eec58217
|
|
BLAKE2b-256 checksum How to use checksums |
2fadc8800f693b40fcfaa16917b6eb4599ba890a4b953b4d483e6ee0101ecbe9
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 18, 2026.
Transparency logSecurity for managed-deepagents 0.5.3.dev113
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 6 files in this release have been uploaded with provenance metadata.
Attestation for managed_deepagents-0.5.3.dev113-py3-none-win_arm64.whl
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 18, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
