Docker Agent vs LangGraph

Docker Agent

An agent with an MCP server is eight lines of YAML, and the same file runs in a terminal, headless, or as an HTTP, MCP or A2A server. Usage telemetry is on by default and can carry prompts passed as command arguments, and two high-severity approval bypasses were fixed in August and September 2026.

LangGraph

Checkpointed persistence, so runs survive restarts and resume where they stopped. No MCP client of its own. LangChain's langchain.mcp is in beta.

Docker Agent

1. Set TELEMETRY_ENABLED=false before run or exec with a prompt on the command line. Telemetry is on by default and sends positional arguments
2. For unattended runs pass --safety restricted with an allow-list, or --sandbox. Without a policy, --exec rejects every tool call that needs approval
3. Set max_iterations and a budget block in the config. Both are unlimited by default
4. Run 1.130.0 or later. Earlier versions ran shell commands embedded in local skills, and A2A sessions before 1.126.0 skipped tool approval
5. Review runtime.safety in any config pulled from a registry or URL. An author default of autonomous runs every tool call unprompted

LangGraph

1. Use a persistent checkpointer in production, not the in-memory one
2. Move from langchain-mcp-adapters to langchain.mcp, and expect a LangChainBetaWarning
3. Set LANGGRAPH_CLI_NO_ANALYTICS=1 on build machines
4. Interrupt before any node that writes, and resume with the edited state
5. Keep the checkpoint and SQLite packages current. Each had a high-severity advisory in late 2025