{ "data": { "a": { "slug": "langgraph", "name": "LangGraph", "vendor": "LangChain", "vendorUrl": "https://www.langchain.com", "kind": "framework", "category": "frameworks", "summary": "Low-level runtime for long-running, stateful agent graphs with checkpointed persistence, human-in-the-loop, memory and streaming.", "url": "https://www.anchorterminal.com/tools/langgraph", "markdownUrl": "https://www.anchorterminal.com/tools/langgraph.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/langgraph.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/langgraph.json", "dns": "langgraph.grade.anchorterminal.com", "repo": "https://github.com/langchain-ai/langgraph", "license": "MIT", "transports": [], "packages": [ { "registry": "pypi", "name": "langgraph" }, { "registry": "npm", "name": "@langchain/langgraph" } ], "auth": "none", "authNotes": "A library. Credentials are for whichever model and tools you wire in.", "pricing": "free", "pricingNotes": "Free and open source. You pay for the model calls it makes. LangSmith for tracing is free for one developer, then $39 a seat a month. Deployment is metered.", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 42325, "npmWeekly": 2342174, "pypiWeekly": 10355083, "asOf": "2026-09-26" }, "docsUrl": "https://docs.langchain.com/oss/python/langgraph/overview", "llmsTxt": "https://docs.langchain.com/llms.txt", "capabilities": [ "agent.framework", "agent.multi-agent", "agent.durable", "agent.mcp-client" ], "tags": [ "framework", "python", "typescript", "open-source", "durable" ], "lastRelease": "2026-10-30", "graded": true, "anchor": { "graded": true, "score": 69.8, "grade": "B", "agentReady": false, "rank": 227, "ranked": true, "rankOf": 1510, "categoryRank": 12, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 90, "payments": 60, "reliability": 75, "schema": 89, "security": 60, "transparency": 81 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -4, "negativeNotes": [ "2025-11-05 to 2025-12-10. Two high-severity advisories in checkpoint packages from the LangGraph repository, remote code execution in the json mode of `JsonPlusSerializer`, used for checkpoints (GHSA-wwqv-p2pp-99h5, fixed in langgraph-checkpoint 3.0.0) and SQL injection through a metadata filter key in the SQLite checkpointer (GHSA-9rwj-6rc7-p77c, fixed in 3.0.1). Both fixed and published, and between ten and twelve months old, so 1 point each. A third, GHSA-7p73-8jqx-23r8 (29 October 2025), left the 12-month window on 1 November 2026 and no longer counts. Eight moderate advisories in 2026 weren't deducted. https://api.osv.dev/v1/query", "2026-10-05. High-severity advisory GHSA-fvww-7h3r-vfhp (CVE-2026-104873, CVSS 4.0 7.6). In langgraph-sdk 0.1.45 to 0.4.3, the custom-auth decorators @auth.on.threads, @auth.on.assistants and @auth.on.crons ignored their actions argument, so an authenticated user could bypass fallback ownership or permission checks and read, update or delete another user's resource. Fixed in langgraph-sdk 0.4.4 and published, under two months old, so 2 points, as pydantic-ai's and microsoft-agent-framework's fixed Highs took. https://osv.dev/vulnerability/GHSA-fvww-7h3r-vfhp" ], "verdict": "Checkpointed persistence, so runs survive restarts and resume where they stopped. No MCP client of its own. LangChain's langchain.mcp is in beta.", "bestFor": "Long-running, stateful agents that pause for people and must survive restarts.", "strengths": [ "Checkpointed persistence, so runs survive restarts and resume where they stopped", "Interrupts that pause before any node and let a person edit the state", "The library sends no telemetry, and LangSmith tracing is off until you turn it on", "13 advisories for packages from the repository since October 2025, each published with a fixed version", "Model-agnostic, in Python and TypeScript" ], "weaknesses": [ "No MCP client of its own. LangChain's langchain.mcp is in beta", "More code than the others for a plain tool-calling agent", "No guardrail primitive or sandbox in LangGraph itself", "416 open issues and 230 open pull requests on 1 October 2026", "The CLI sends an analytics event per command by default" ], "agentNotes": [ "Use a persistent checkpointer in production, not the in-memory one", "Move from langchain-mcp-adapters to langchain.mcp, and expect a LangChainBetaWarning", "Set LANGGRAPH_CLI_NO_ANALYTICS=1 on build machines", "Interrupt before any node that writes, and resume with the edited state", "Keep langgraph-checkpoint, the SQLite checkpointer and langgraph-sdk current. The SDK's custom-auth decorators ignored actions before 0.4.4 (October 2026)" ], "metrics": { "kind": "library", "measured": false }, "reviewCount": 2, "avgRating": 3.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69.8 } ], "editorialScores": { "ergonomics": 70, "maintenance": 90, "payments": 60, "reliability": 75, "schema": 89, "security": 60, "transparency": 89 }, "provenanceScore": 73, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install langgraph # or: npm i @langchain/langgraph" }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/langgraph" }, "sameCompany": [ "langmem", "langsmith" ], "area": "frameworks", "unitPrices": [ { "item": "LangSmith Plus", "unit": "seat-month", "usd": 39, "note": "tracing and evaluation, one developer free" } ], "provenance": { "legalEntity": "LangChain, Inc.", "domain": "langchain.com", "domainRegistered": "2019-12-03", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://docs.langchain.com/oss/python/releases/changelog", "securityTxt": "none", "checked": "2026-11-01", "score": 73 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/langgraph.json", "live": { "slug": "langgraph", "versions": [ { "registry": "github", "name": "langchain-ai/langgraph", "version": "sdk==0.4.14", "released": "2026-11-06", "seenAt": "2026-11-06T23:38:33.85634508Z" }, { "registry": "npm", "name": "@langchain/langgraph", "version": "1.7.1", "seenAt": "2026-11-06T23:38:33.634742733Z" }, { "registry": "pypi", "name": "langgraph", "version": "1.2.20", "released": "2026-11-05", "seenAt": "2026-11-06T23:38:33.484444092Z" } ], "githubStars": 44584, "npmWeekly": 4879123, "pypiWeekly": 13732776, "securityTxt": { "url": "https://langchain.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:25.158914764Z" }, "llmsTxt": { "url": "https://docs.langchain.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:51.187508053Z" }, "domain": { "domain": "langchain.com", "registered": "2019-12-03", "source": "https://rdap.verisign.com/com/v1/domain/langchain.com", "checkedAt": "2026-11-01T14:16:16.486101867Z" }, "pages": [ { "url": "https://docs.langchain.com/oss/python/releases/changelog", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:06:53.53014171Z", "changedAt": "2026-11-03T07:47:48.949575993Z", "fingerprint": "262146f3263b" } ], "github": { "repo": "langchain-ai/langgraph", "checkedAt": "2026-11-02T08:59:32.935950463Z", "stars": 44315, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-02T04:37:36Z", "openIssues": 316, "openPRs": 121, "issuesOpened90d": 291, "issuesClosed90d": 382, "prsMerged90d": 250, "ci": { "branch": "main", "runs": 50, "success": 36, "failure": 3, "other": 11, "latest": "failure", "latestAt": "2026-11-02T04:40:22Z" }, "advisories": [ { "ghsa": "GHSA-6hmw-9432-67qq", "cve": "CVE-2026-115883", "severity": "medium", "published": "2026-10-21T13:34:00Z" }, { "ghsa": "GHSA-8prr-f582-jqq3", "cve": "CVE-2026-115885", "severity": "medium", "published": "2026-10-19T14:08:41Z" }, { "ghsa": "GHSA-3fx2-cqw9-xr3c", "cve": "CVE-2026-118667", "severity": "medium", "published": "2026-10-07T17:31:37Z" }, { "ghsa": "GHSA-4hm6-w6qq-w73v", "cve": "CVE-2026-118668", "severity": "high", "published": "2026-09-28T14:44:55Z" }, { "ghsa": "GHSA-fvww-7h3r-vfhp", "cve": "CVE-2026-104873", "severity": "high", "published": "2026-08-28T14:30:41Z" }, { "ghsa": "GHSA-47pj-3jcm-6whg", "cve": "CVE-2026-71433", "severity": "medium", "published": "2026-07-30T19:46:53Z" }, { "ghsa": "GHSA-fjqc-hq36-qh5p", "cve": "CVE-2026-48775", "severity": "medium", "published": "2026-05-22T17:18:27Z" }, { "ghsa": "GHSA-w39p-vh2g-g8g5", "cve": "CVE-2026-48776", "severity": "medium", "published": "2026-05-22T17:18:22Z" }, { "ghsa": "GHSA-g48c-2wqr-h844", "cve": "CVE-2026-28277", "severity": "medium", "published": "2026-03-05T16:52:38Z" }, { "ghsa": "GHSA-mhr3-j7m5-c7c9", "cve": "CVE-2026-27794", "severity": "medium", "published": "2026-02-23T19:15:53Z" }, { "ghsa": "GHSA-9rwj-6rc7-p77c", "cve": "CVE-2025-67644", "severity": "high", "published": "2025-12-09T22:07:45Z" }, { "ghsa": "GHSA-wwqv-p2pp-99h5", "cve": "CVE-2025-64439", "severity": "high", "published": "2025-11-05T15:13:54Z" }, { "ghsa": "GHSA-7p73-8jqx-23r8", "cve": "CVE-2025-64104", "severity": "high", "published": "2025-10-29T18:02:57Z" } ], "replies": { "sampled": 25, "unanswered": 24, "medianDays": 3.1 } }, "updatedAt": "2026-11-07T16:00:25.158914764Z" } }, "answer": "AI SDK scores 89.8 (AA) on agent readiness against LangGraph's 69.8 (B), and leads in 6 of 7 scored categories.", "b": { "slug": "vercel-ai-sdk", "name": "AI SDK", "vendor": "Vercel Inc.", "vendorUrl": "https://vercel.com", "kind": "framework", "category": "frameworks", "summary": "Open-source TypeScript toolkit from Vercel for building AI applications and agents, with a provider-agnostic API, a ToolLoopAgent, an MCP client and UI hooks for React, Vue, Svelte and Angular.", "url": "https://www.anchorterminal.com/tools/vercel-ai-sdk", "markdownUrl": "https://www.anchorterminal.com/tools/vercel-ai-sdk.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/vercel-ai-sdk.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/vercel-ai-sdk.json", "dns": "vercel-ai-sdk.grade.anchorterminal.com", "repo": "https://github.com/vercel/ai", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "npm", "name": "ai" }, { "registry": "npm", "name": "@ai-sdk/mcp" }, { "registry": "npm", "name": "@ai-sdk/workflow" } ], "auth": "api-key", "authNotes": "The SDK has no account of its own. Each provider package takes that provider's key. Plain string model IDs resolve through Vercel's AI Gateway by default, which needs AI_GATEWAY_API_KEY or a Vercel OIDC token.", "pricing": "free", "pricingNotes": "Free and open source. You pay for model calls. The optional AI Gateway charges providers' list prices with no markup, from prepaid credits, with a free monthly credit on a subset of models (https://vercel.com/docs/ai-gateway/pricing, checked 2026-11-06).", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the AI SDK docs, the vercel/ai repository's packages or the AI Gateway pricing page. The tools registry in the repository lists a third-party x402 marketplace tool (checked 2026-10-06).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 27781, "npmWeekly": 44868298, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://ai-sdk.dev/docs", "llmsTxt": "https://ai-sdk.dev/llms.txt", "capabilities": [ "agent.framework", "agent.mcp-client", "agent.multi-agent", "agent.durable" ], "tags": [ "framework", "typescript", "open-source", "llms-txt", "mcp", "otel" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 89.8, "grade": "AA", "agentReady": true, "rank": 1, "ranked": true, "rankOf": 1510, "categoryRank": 1, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 95, "maintenance": 97, "payments": 60, "reliability": 93, "schema": 100, "security": 90, "transparency": 89 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "A TypeScript agent toolkit with ToolLoopAgent, a built-in MCP client, per-tool approvals that can be HMAC-signed, opt-in OpenTelemetry and durable runs through WorkflowAgent. It ships three major versions in 14 months (5.0, 6.0, 7.0), each with a migration guide, and plain string model IDs route through Vercel's AI Gateway unless another provider is set.", "bestFor": "TypeScript teams building agents and chat UIs who want one API across many providers and a short path to MCP.", "strengths": [ "Apache 2.0, with 246 npm releases of `ai` in the 90 days to 6 October 2026", "MCP client in @ai-sdk/mcp with HTTP, SSE and stdio transports, OAuth and opt-in retries for tools/call", "Per-tool approvals, HMAC-signed approvals and Open Policy Agent rules in @ai-sdk/policy-opa", "Telemetry only after an OpenTelemetry integration is registered, with recordInputs and recordOutputs switches", "Tool search with deferred loading, so the model sees only a search tool until it needs more" ], "weaknesses": [ "TypeScript only, and `ai` 7.x needs Node 22 or newer", "Three major versions between July 2025 and June 2026, each with breaking changes", "String model IDs go to Vercel's AI Gateway by default, which needs a Vercel key", "No input or output guardrail primitive, and sandboxes and stdio MCP transport are still experimental", "1,399 open issues and pull requests on 4 October 2026, per a GitHub mirror" ], "agentNotes": [ "Pass a provider instance such as openai('model') if traffic shouldn't go through Vercel's AI Gateway", "Set toolApproval on tools that write, and experimental_toolApprovalSecret when approvals come back from a browser", "Raise or replace the default stop condition of 20 steps with stopWhen", "Close the MCP client after the run, and use HTTP transport outside local development", "Set recordInputs and recordOutputs to false when spans would carry secrets" ], "metrics": { "kind": "library", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "AA", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 89.8 } ], "editorialScores": { "ergonomics": 95, "maintenance": 97, "payments": 60, "reliability": 93, "schema": 100, "security": 90, "transparency": 86 }, "provenanceScore": 91, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm i ai # MCP: npm i @ai-sdk/mcp" }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/vercel-ai-sdk" }, "area": "frameworks", "provenance": { "legalEntity": "Vercel Inc.", "domain": "ai-sdk.dev", "domainRegistered": "2024-09-26", "endpointOnVendorDomain": null, "terms": "https://vercel.com/legal/terms", "privacy": "https://vercel.com/legal/privacy-policy", "statusPage": "https://www.vercel-status.com", "changelog": "https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-11-06", "notes": [ "The privacy notice (effective 1 June 2026) names Vercel Inc.", "vercel.com/.well-known/security.txt points to HackerOne and responsible.disclosure@vercel.com and expires 2027-09-28.", "RDAP gives ai-sdk.dev a registration date of 2024-09-26 and vercel.com 1999-10-04.", "The status page covers Vercel's hosted services, including the AI Gateway, not the library." ], "score": 91 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/vercel-ai-sdk.json", "live": { "slug": "vercel-ai-sdk", "vendorStatus": { "page": "https://www.vercel-status.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T19:23:51.340953129Z" }, "versions": [ { "registry": "github", "name": "vercel/ai", "version": "@ai-sdk/zai@2.0.19", "released": "2026-11-06", "seenAt": "2026-11-07T00:15:06.320451302Z" }, { "registry": "npm", "name": "@ai-sdk/mcp", "version": "2.0.92", "seenAt": "2026-11-07T00:15:02.210062748Z" }, { "registry": "npm", "name": "@ai-sdk/workflow", "version": "2.0.96", "seenAt": "2026-11-07T00:15:04.290347217Z" }, { "registry": "npm", "name": "ai", "version": "7.0.164", "seenAt": "2026-11-07T00:15:02.102209516Z" } ], "githubStars": 27784, "npmWeekly": 44868298, "securityTxt": { "url": "https://ai-sdk.dev/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T15:59:53.467050636Z" }, "llmsTxt": { "url": "https://ai-sdk.dev/llms.txt", "ok": false, "status": 0, "checkedAt": "2026-11-07T15:34:35.854467131Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/vercel/ai/main/packages/ai/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:24:01.002799396Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "6e9ccd1db741" } ], "updatedAt": "2026-11-07T19:23:51.340953129Z" } }, "edges": [ { "by": 30, "category": "security", "leads": "vercel-ai-sdk", "name": "Security \u0026 auth", "reasons": { "a": "The library sends nothing according to the data-storage page, re-read on 1 November. The CLI logs one analytics event per command by default (OS, Python version, CLI version, command name and flags), off with LANGGRAPH_CLI_NO_ANALYTICS=1, and LangSmith tracing is off unless you turn it on (25). Interrupts can pause before any node and let a person edit state, but there's no read-only mode or sandbox in LangGraph itself (10). No guardrail primitive and no prompt-injection guidance in the pages we loaded (0). LangSmith tracing, opt-in (10). LangChain's organisation SECURITY.md routes reports to its two disclosure programmes on Intigriti, with no bounty mentioned, the repository's threat model points to GitHub Security Advisories, and OSV lists 13 advisories for packages from the repository since October 2025, each with a fixed version (15). Framework reading, so SOC 2 isn't scored.", "b": "No telemetry until an OpenTelemetry integration is registered. String model IDs route to Vercel's AI Gateway by default, which is documented and needs a Vercel key, so it isn't silent (25). Per-tool approval, HMAC-signed approvals against forged client history, and Open Policy Agent rules in @ai-sdk/policy-opa, though sandboxes are experimental (20). ToolLoopAgent rejects system messages in prompts by default as an injection risk, URL fetches are checked against private addresses, and MCP HTTP transport refuses redirects by default, but there's no guardrail primitive (10). OpenTelemetry spans for every model and tool call to any backend, opt-in (15). HackerOne programme, a valid security.txt, SECURITY.md and two low-severity advisories published with fixed versions (20). Framework reading, so SOC 2 isn't scored." }, "scores": { "a": 60, "b": 90 } }, { "by": 25, "category": "ergonomics", "leads": "vercel-ai-sdk", "name": "Agent ergonomics", "reasons": { "a": "No MCP client in LangGraph. It comes from LangChain's langchain.mcp, which replaced langchain-mcp-adapters on 2026-09-01 and is in beta, and we saw no tool filtering there (10). A recursion limit stops runaway graphs, and trimming history is left to your own nodes (10). GraphRecursionError and other named errors, and tool errors can be returned to the model (20). Per-node retry policies and checkpointed resume (20). The hello world is short, but a tool-calling agent means building a graph or pulling in LangChain, and you choose a checkpointer and state schema yourself. Python and TypeScript (10).", "b": "An MCP client in a few lines with createMCPClient and client.tools(), and tool search with deferLoading keeps unused tool definitions out of the prompt (25). stopWhen with a default of 20 steps, and prepareStep to trim messages, switch models or limit active tools per step (20). 38 typed errors with isInstance guards, and MCP results with isError go back to the model (20). maxRetries on model calls, opt-in retries for transient MCP failures only, and WorkflowAgent for durable steps with automatic retries (20). Few required parameters, but TypeScript only, and a string model ID needs an AI Gateway key unless a default provider is set (10)." }, "scores": { "a": 70, "b": 95 } }, { "by": 18, "category": "reliability", "leads": "vercel-ai-sdk", "name": "Reliability", "reasons": { "a": "Official packages on PyPI (Requires-Python \u003e=3.10 in the pyproject at 1.2.19) and npm (node \u003e=18, per the 1 October check) (20). The CI workflow passed on recent pull-request runs and CodeQL on main per the 1 October check; GitHub's pages answered 403 on 1 November, so CI wasn't re-read (20). 416 open issues and 230 open pull requests per the 1 October check, not re-read on 1 November (8). Seven 1.2.x patch releases since 1.2.12 with conventional commit messages, but 1.2.18 (26 October) carries a commit marked breaking (`feat(langgraph)!`, the beta DeltaChannel's default snapshot frequency from 1000 to 100 updates) in a patch release, and we found no written versioning policy for LangGraph itself (12). 1.2.19, classed 5 - Production/Stable (15).", "b": "Official npm packages, with `ai` 7.x requiring Node 22 or newer (20). A public CI workflow with lint, type checks, unit tests, Node-version tests, MCP tests on Windows and e2e tests runs on every push to main, and the newest completed CI runs on main passed on 6 November (25). 1,517 open issues and pull requests on 6 November from GitHub's API, with 1,059 issues opened in the 90 days to 3 November; 47 of the 50 newest had a comment and 32 were closed (18). A written versioning page with breaking changes only in majors, experimental_ prefixes for unstable APIs and a migration guide per major (15). 7.0.163 (15). 20+25+18+15+15 = 93, up from 73 on 6 October, when GitHub couldn't be read." }, "scores": { "a": 75, "b": 93 } }, { "by": 11, "category": "schema", "leads": "vercel-ai-sdk", "name": "Schema \u0026 documentation", "reasons": { "a": "A typed graph API with a reference site (25). llms.txt at docs.langchain.com, per the listing's earlier check (10). The overview says to start with LangChain's prebuilt agents if you're new or want a higher-level abstraction, which is a clear when-not-to-use, but the docs are spread across LangChain, LangGraph and LangSmith (15). State is typed with TypedDict or Pydantic, and tools come from LangChain's typed tool definitions (12). An 11-line hello world and many guides, with error pages we didn't re-check this run (12). Dated changelog (15).", "b": "Typed TypeScript API with a reference section for every function (25). llms.txt and a Markdown copy of each page (10). The docs say when to use each piece, such as a table of WorkflowAgent against ToolLoopAgent, a when-to-use section for subagents and harnesses, and HTTP over stdio for MCP in production (20). Tools take Zod or JSON Schema inputs (15). 38 error types documented in the reference, with error-handling guides and examples throughout (15). Versioning page and a changesets CHANGELOG per package (15)." }, "scores": { "a": 89, "b": 100 } }, { "by": 8, "category": "transparency", "leads": "vercel-ai-sdk", "name": "Transparency \u0026 trust", "reasons": { "a": "MIT (30). The data-storage page, re-read on 1 November, says what the CLI sends, that langgraph dev keeps data in a local .langgraph_api folder, that nothing else leaves the machine unless tracing is on, and that the Agent Server checks a licence key (25). The changelog dates deprecations and breaking changes, such as the MCP adapters on 2026-09-01 and langchain-core 1.7.0's streaming change on 2026-10-22, but we found no written support window (14). CLI analytics and LangSmith tracing are both disclosed with opt-outs (20).", "b": "Apache 2.0 (30). The library stores nothing. The AI Gateway's ZDR page says it doesn't retain prompts or outputs and per-request ZDR is available on Pro and Enterprise, and Vercel's privacy notice is dated 1 June 2026, but we didn't read a DPA or subprocessor list (22). Deprecated APIs are removed only at majors with a migration guide, and 6.x and 5.x keep getting releases, without a written support window (14). Telemetry is opt-in and documented, with switches for inputs and outputs (20)." }, "scores": { "a": 81, "b": 89 } }, { "by": 7, "category": "maintenance", "leads": "vercel-ai-sdk", "name": "Maintenance \u0026 community", "reasons": { "a": "1.2.19 tagged on 2026-10-30 (30). Nine releases of the core package in the 90 days from 3 August, 1.2.11 (11 August) to 1.2.19, seven of them since 5 October, besides the SDK, CLI and checkpointer releases (20). 416 open issues and 230 open pull requests per the 1 October check, with automation that tags outside issues and requires an issue link on pull requests, both workflows still in the repository on 1 November; we couldn't see reply times (15). langgraph 1.2.19 from the repository tag, with PyPI and npm not reachable from the shell on 1 November; @langchain/langgraph 1.4.18 per the 1 October check (15). CI and CodeQL workflows present, pass state per the 1 October check (10).", "b": "7.0.163 on 2026-11-05 (30). 226 stable npm releases of `ai` across the 7.x, 6.x and 5.x lines in the 90 days to 6 November, 70 of them since 6 October (20). 47 of the 50 newest issues commented and 32 closed, with triage automation and backport workflows (22). `ai` and the provider packages are current, and 6.x and 5.x still get patches (15). Dependabot configured and CI passing on main (10). 30+20+22+15+10 = 97." }, "scores": { "a": 90, "b": 97 } } ], "facts": [ { "a": "Agent framework", "b": "Agent framework", "name": "Kind" }, { "a": "LangChain", "b": "Vercel Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "API key", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-30", "b": "2026-11-05", "name": "Last release" }, { "a": "no document linked", "b": "2026-06-01", "name": "Terms last updated" }, { "a": "no document linked", "b": "2026-06-01", "name": "Privacy policy last updated" }, { "a": "not read yet", "b": "yes, with an opt-out", "name": "Customer content may train models" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not read yet", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "42k stars, 2.3M npm/wk, 10.4M PyPI/wk", "b": "28k stars, 44.9M npm/wk", "name": "Popularity" }, { "a": "3.5/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "AI SDK scores 89.8 (AA) on agent readiness against LangGraph's 69.8 (B), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, LangGraph or AI SDK?" }, { "answer": "Yes. LangGraph is open source (MIT). AI SDK is open source (Apache-2.0).", "question": "Are LangGraph and AI SDK open source?" } ], "goodFor": [ { "aheadOn": null, "also": [ "No key needed to call it" ], "goodFor": "Long-running, stateful agents that pause for people and must survive restarts.", "slug": "langgraph", "watchFor": "No MCP client of its own. LangChain's langchain.mcp is in beta" }, { "aheadOn": [ "Reliability, 93 against 75", "Schema \u0026 documentation, 100 against 89", "Agent ergonomics, 95 against 70", "Security \u0026 auth, 90 against 60", "Maintenance \u0026 community, 97 against 90", "Transparency \u0026 trust, 89 against 81" ], "also": [ "Agent-ready, a grade of BB or better", "No incidents deducted, where LangGraph loses 4 points for them" ], "goodFor": "TypeScript teams building agents and chat UIs who want one API across many providers and a short path to MCP.", "slug": "vercel-ai-sdk", "watchFor": "TypeScript only, and `ai` 7.x needs Node 22 or newer" } ], "history": { "langgraph": [ { "causes": [ "event" ], "date": "2026-11-01", "delta": -1, "from": 70.8, "fromGrade": "BB", "to": 69.8, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.2, "from": 70.6, "fromGrade": "BB", "to": 70.8, "toGrade": "BB" } ], "vercel-ai-sdk": null }, "job": { "capability": "agent.framework", "name": "Agent frameworks" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentos-vs-langgraph.json", "title": "AgentOS vs LangGraph", "url": "https://www.anchorterminal.com/compare/agentos-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-vercel-ai-sdk.json", "title": "AgentOS vs AI SDK", "url": "https://www.anchorterminal.com/compare/agentos-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-langgraph.json", "title": "Agno vs LangGraph", "url": "https://www.anchorterminal.com/compare/agno-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-vercel-ai-sdk.json", "title": "Agno vs AI SDK", "url": "https://www.anchorterminal.com/compare/agno-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-langgraph.json", "title": "BoxLang AI vs LangGraph", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-vercel-ai-sdk.json", "title": "BoxLang AI vs AI SDK", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-langgraph.json", "title": "Claude Agent SDK vs LangGraph", "url": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-vercel-ai-sdk.json", "title": "Claude Agent SDK vs AI SDK", "url": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-langgraph.json", "title": "CrewAI vs LangGraph", "url": "https://www.anchorterminal.com/compare/crewai-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-vercel-ai-sdk.json", "title": "CrewAI vs AI SDK", "url": "https://www.anchorterminal.com/compare/crewai-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-langgraph.json", "title": "Cursor Agent SDK vs LangGraph", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-vercel-ai-sdk.json", "title": "Cursor Agent SDK vs AI SDK", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-langgraph.json", "title": "Docker Agent vs LangGraph", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-vercel-ai-sdk.json", "title": "Docker Agent vs AI SDK", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/google-adk-vs-langgraph.json", "title": "Agent Development Kit (ADK) vs LangGraph", "url": "https://www.anchorterminal.com/compare/google-adk-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/google-adk-vs-vercel-ai-sdk.json", "title": "Agent Development Kit (ADK) vs AI SDK", "url": "https://www.anchorterminal.com/compare/google-adk-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/guilds-run-vs-langgraph.json", "title": "guilds.run vs LangGraph", "url": "https://www.anchorterminal.com/compare/guilds-run-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/guilds-run-vs-vercel-ai-sdk.json", "title": "guilds.run vs AI SDK", "url": "https://www.anchorterminal.com/compare/guilds-run-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/langgraph-vs-llamaindex.json", "title": "LangGraph vs LlamaIndex Framework", "url": "https://www.anchorterminal.com/compare/langgraph-vs-llamaindex" }, { "json": "https://www.anchorterminal.com/compare/langgraph-vs-mastra.json", "title": "LangGraph vs Mastra", "url": "https://www.anchorterminal.com/compare/langgraph-vs-mastra" }, { "json": "https://www.anchorterminal.com/compare/langgraph-vs-microsoft-agent-framework.json", "title": "LangGraph vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/langgraph-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/langgraph-vs-openai-agents-sdk.json", "title": "LangGraph vs OpenAI Agents SDK", "url": "https://www.anchorterminal.com/compare/langgraph-vs-openai-agents-sdk" }, { "json": "https://www.anchorterminal.com/compare/langgraph-vs-pydantic-ai.json", "title": "LangGraph vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/langgraph-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/langgraph-vs-smolagents.json", "title": "LangGraph vs smolagents", "url": "https://www.anchorterminal.com/compare/langgraph-vs-smolagents" }, { "json": "https://www.anchorterminal.com/compare/langgraph-vs-strands-agents.json", "title": "LangGraph vs Strands Agents", "url": "https://www.anchorterminal.com/compare/langgraph-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/langgraph-vs-tradingagents.json", "title": "LangGraph vs TradingAgents", "url": "https://www.anchorterminal.com/compare/langgraph-vs-tradingagents" }, { "json": "https://www.anchorterminal.com/compare/llamaindex-vs-vercel-ai-sdk.json", "title": "LlamaIndex Framework vs AI SDK", "url": "https://www.anchorterminal.com/compare/llamaindex-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/mastra-vs-vercel-ai-sdk.json", "title": "Mastra vs AI SDK", "url": "https://www.anchorterminal.com/compare/mastra-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-vercel-ai-sdk.json", "title": "Microsoft Agent Framework vs AI SDK", "url": "https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-sdk-vs-vercel-ai-sdk.json", "title": "OpenAI Agents SDK vs AI SDK", "url": "https://www.anchorterminal.com/compare/openai-agents-sdk-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/pydantic-ai-vs-vercel-ai-sdk.json", "title": "Pydantic AI vs AI SDK", "url": "https://www.anchorterminal.com/compare/pydantic-ai-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/smolagents-vs-vercel-ai-sdk.json", "title": "smolagents vs AI SDK", "url": "https://www.anchorterminal.com/compare/smolagents-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/strands-agents-vs-vercel-ai-sdk.json", "title": "Strands Agents vs AI SDK", "url": "https://www.anchorterminal.com/compare/strands-agents-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/tradingagents-vs-vercel-ai-sdk.json", "title": "TradingAgents vs AI SDK", "url": "https://www.anchorterminal.com/compare/tradingagents-vs-vercel-ai-sdk" } ], "panel": null, "scores": [ { "by": 18, "edge": "vercel-ai-sdk", "key": "reliability", "langgraph": 75, "name": "Reliability", "vercel-ai-sdk": 93, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 11, "edge": "vercel-ai-sdk", "key": "schema", "langgraph": 89, "name": "Schema \u0026 documentation", "vercel-ai-sdk": 100, "weight": 13 }, { "by": 25, "edge": "vercel-ai-sdk", "key": "ergonomics", "langgraph": 70, "name": "Agent ergonomics", "vercel-ai-sdk": 95, "weight": 13 }, { "by": 30, "edge": "vercel-ai-sdk", "key": "security", "langgraph": 60, "name": "Security \u0026 auth", "vercel-ai-sdk": 90, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "langgraph": 60, "name": "Payments \u0026 pricing", "vercel-ai-sdk": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 7, "edge": "vercel-ai-sdk", "key": "maintenance", "langgraph": 90, "name": "Maintenance \u0026 community", "vercel-ai-sdk": 97, "weight": 7 }, { "by": 8, "edge": "vercel-ai-sdk", "key": "transparency", "langgraph": 81, "name": "Transparency \u0026 trust", "vercel-ai-sdk": 89, "weight": 7 } ], "summary": "AI SDK scores 89.8 (AA) on agent readiness against LangGraph's 69.8 (B), and leads in 6 of 7 scored categories. Both do agent frameworks.", "tasks": null, "tutorials": [], "verdicts": { "langgraph": "Checkpointed persistence, so runs survive restarts and resume where they stopped. No MCP client of its own. LangChain's langchain.mcp is in beta.", "vercel-ai-sdk": "A TypeScript agent toolkit with ToolLoopAgent, a built-in MCP client, per-tool approvals that can be HMAC-signed, opt-in OpenTelemetry and durable runs through WorkflowAgent. It ships three major versions in 14 months (5.0, 6.0, 7.0), each with a migration guide, and plain string model IDs route through Vercel's AI Gateway unless another provider is set." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/langgraph-vs-vercel-ai-sdk", "json": "https://www.anchorterminal.com/compare/langgraph-vs-vercel-ai-sdk.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/langgraph-vs-vercel-ai-sdk.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/langgraph-vs-vercel-ai-sdk.min.md" }, "markdown": "AI SDK scores 89.8 (AA) on agent readiness against LangGraph's 69.8 (B), and leads in 6 of 7 scored categories. Both do agent frameworks.\n\n- LangGraph: grade B, 69.8/100, rank #227 of 1510. Markdown https://www.anchorterminal.com/tools/langgraph.md · JSON https://www.anchorterminal.com/api/v1/tools/langgraph.json\n- AI SDK: grade AA, 89.8/100, rank #1 of 1510. Markdown https://www.anchorterminal.com/tools/vercel-ai-sdk.md · JSON https://www.anchorterminal.com/api/v1/tools/vercel-ai-sdk.json\n- Best agent frameworks and SDKs: https://www.anchorterminal.com/best/frameworks/index.md\n- All 171 frameworks comparisons: https://www.anchorterminal.com/compare/frameworks/index.md\n\n## Which one, for what\n\n### LangGraph (B)\n\nGood for: Long-running, stateful agents that pause for people and must survive restarts.\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: No MCP client of its own. LangChain's langchain.mcp is in beta\n\n### AI SDK (AA)\n\nGood for: TypeScript teams building agents and chat UIs who want one API across many providers and a short path to MCP.\n\nAhead on:\n- Reliability, 93 against 75\n- Schema \u0026 documentation, 100 against 89\n- Agent ergonomics, 95 against 70\n- Security \u0026 auth, 90 against 60\n- Maintenance \u0026 community, 97 against 90\n- Transparency \u0026 trust, 89 against 81\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- No incidents deducted, where LangGraph loses 4 points for them\n\nWatch for: TypeScript only, and `ai` 7.x needs Node 22 or newer\n\n\n## Why the edge\n\n### Security \u0026 auth: AI SDK +30\n\n- LangGraph (60): The library sends nothing according to the data-storage page, re-read on 1 November. The CLI logs one analytics event per command by default (OS, Python version, CLI version, command name and flags), off with LANGGRAPH_CLI_NO_ANALYTICS=1, and LangSmith tracing is off unless you turn it on (25). Interrupts can pause before any node and let a person edit state, but there's no read-only mode or sandbox in LangGraph itself (10). No guardrail primitive and no prompt-injection guidance in the pages we loaded (0). LangSmith tracing, opt-in (10). LangChain's organisation SECURITY.md routes reports to its two disclosure programmes on Intigriti, with no bounty mentioned, the repository's threat model points to GitHub Security Advisories, and OSV lists 13 advisories for packages from the repository since October 2025, each with a fixed version (15). Framework reading, so SOC 2 isn't scored.\n- AI SDK (90): No telemetry until an OpenTelemetry integration is registered. String model IDs route to Vercel's AI Gateway by default, which is documented and needs a Vercel key, so it isn't silent (25). Per-tool approval, HMAC-signed approvals against forged client history, and Open Policy Agent rules in @ai-sdk/policy-opa, though sandboxes are experimental (20). ToolLoopAgent rejects system messages in prompts by default as an injection risk, URL fetches are checked against private addresses, and MCP HTTP transport refuses redirects by default, but there's no guardrail primitive (10). OpenTelemetry spans for every model and tool call to any backend, opt-in (15). HackerOne programme, a valid security.txt, SECURITY.md and two low-severity advisories published with fixed versions (20). Framework reading, so SOC 2 isn't scored.\n\n### Agent ergonomics: AI SDK +25\n\n- LangGraph (70): No MCP client in LangGraph. It comes from LangChain's langchain.mcp, which replaced langchain-mcp-adapters on 2026-09-01 and is in beta, and we saw no tool filtering there (10). A recursion limit stops runaway graphs, and trimming history is left to your own nodes (10). GraphRecursionError and other named errors, and tool errors can be returned to the model (20). Per-node retry policies and checkpointed resume (20). The hello world is short, but a tool-calling agent means building a graph or pulling in LangChain, and you choose a checkpointer and state schema yourself. Python and TypeScript (10).\n- AI SDK (95): An MCP client in a few lines with createMCPClient and client.tools(), and tool search with deferLoading keeps unused tool definitions out of the prompt (25). stopWhen with a default of 20 steps, and prepareStep to trim messages, switch models or limit active tools per step (20). 38 typed errors with isInstance guards, and MCP results with isError go back to the model (20). maxRetries on model calls, opt-in retries for transient MCP failures only, and WorkflowAgent for durable steps with automatic retries (20). Few required parameters, but TypeScript only, and a string model ID needs an AI Gateway key unless a default provider is set (10).\n\n### Reliability: AI SDK +18\n\n- LangGraph (75): Official packages on PyPI (Requires-Python \u003e=3.10 in the pyproject at 1.2.19) and npm (node \u003e=18, per the 1 October check) (20). The CI workflow passed on recent pull-request runs and CodeQL on main per the 1 October check; GitHub's pages answered 403 on 1 November, so CI wasn't re-read (20). 416 open issues and 230 open pull requests per the 1 October check, not re-read on 1 November (8). Seven 1.2.x patch releases since 1.2.12 with conventional commit messages, but 1.2.18 (26 October) carries a commit marked breaking (`feat(langgraph)!`, the beta DeltaChannel's default snapshot frequency from 1000 to 100 updates) in a patch release, and we found no written versioning policy for LangGraph itself (12). 1.2.19, classed 5 - Production/Stable (15).\n- AI SDK (93): Official npm packages, with `ai` 7.x requiring Node 22 or newer (20). A public CI workflow with lint, type checks, unit tests, Node-version tests, MCP tests on Windows and e2e tests runs on every push to main, and the newest completed CI runs on main passed on 6 November (25). 1,517 open issues and pull requests on 6 November from GitHub's API, with 1,059 issues opened in the 90 days to 3 November; 47 of the 50 newest had a comment and 32 were closed (18). A written versioning page with breaking changes only in majors, experimental_ prefixes for unstable APIs and a migration guide per major (15). 7.0.163 (15). 20+25+18+15+15 = 93, up from 73 on 6 October, when GitHub couldn't be read.\n\n### Schema \u0026 documentation: AI SDK +11\n\n- LangGraph (89): A typed graph API with a reference site (25). llms.txt at docs.langchain.com, per the listing's earlier check (10). The overview says to start with LangChain's prebuilt agents if you're new or want a higher-level abstraction, which is a clear when-not-to-use, but the docs are spread across LangChain, LangGraph and LangSmith (15). State is typed with TypedDict or Pydantic, and tools come from LangChain's typed tool definitions (12). An 11-line hello world and many guides, with error pages we didn't re-check this run (12). Dated changelog (15).\n- AI SDK (100): Typed TypeScript API with a reference section for every function (25). llms.txt and a Markdown copy of each page (10). The docs say when to use each piece, such as a table of WorkflowAgent against ToolLoopAgent, a when-to-use section for subagents and harnesses, and HTTP over stdio for MCP in production (20). Tools take Zod or JSON Schema inputs (15). 38 error types documented in the reference, with error-handling guides and examples throughout (15). Versioning page and a changesets CHANGELOG per package (15).\n\n### Transparency \u0026 trust: AI SDK +8\n\n- LangGraph (81): MIT (30). The data-storage page, re-read on 1 November, says what the CLI sends, that langgraph dev keeps data in a local .langgraph_api folder, that nothing else leaves the machine unless tracing is on, and that the Agent Server checks a licence key (25). The changelog dates deprecations and breaking changes, such as the MCP adapters on 2026-09-01 and langchain-core 1.7.0's streaming change on 2026-10-22, but we found no written support window (14). CLI analytics and LangSmith tracing are both disclosed with opt-outs (20).\n- AI SDK (89): Apache 2.0 (30). The library stores nothing. The AI Gateway's ZDR page says it doesn't retain prompts or outputs and per-request ZDR is available on Pro and Enterprise, and Vercel's privacy notice is dated 1 June 2026, but we didn't read a DPA or subprocessor list (22). Deprecated APIs are removed only at majors with a migration guide, and 6.x and 5.x keep getting releases, without a written support window (14). Telemetry is opt-in and documented, with switches for inputs and outputs (20).\n\n### Maintenance \u0026 community: AI SDK +7\n\n- LangGraph (90): 1.2.19 tagged on 2026-10-30 (30). Nine releases of the core package in the 90 days from 3 August, 1.2.11 (11 August) to 1.2.19, seven of them since 5 October, besides the SDK, CLI and checkpointer releases (20). 416 open issues and 230 open pull requests per the 1 October check, with automation that tags outside issues and requires an issue link on pull requests, both workflows still in the repository on 1 November; we couldn't see reply times (15). langgraph 1.2.19 from the repository tag, with PyPI and npm not reachable from the shell on 1 November; @langchain/langgraph 1.4.18 per the 1 October check (15). CI and CodeQL workflows present, pass state per the 1 October check (10).\n- AI SDK (97): 7.0.163 on 2026-11-05 (30). 226 stable npm releases of `ai` across the 7.x, 6.x and 5.x lines in the 90 days to 6 November, 70 of them since 6 October (20). 47 of the 50 newest issues commented and 32 closed, with triage automation and backport workflows (22). `ai` and the provider packages are current, and 6.x and 5.x still get patches (15). Dependabot configured and CI passing on main (10). 30+20+22+15+10 = 97.\n\n## Score by category\n\n| Category | Weight | LangGraph | AI SDK | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 75 | 93 | AI SDK +18 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 89 | 100 | AI SDK +11 |\n| Agent ergonomics | 13% (16.2 this run) | 70 | 95 | AI SDK +25 |\n| Security \u0026 auth | 14% (17.5 this run) | 60 | 90 | AI SDK +30 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 90 | 97 | AI SDK +7 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 81 | 89 | AI SDK +8 |\n| Negative events | ≤15 | -4 | 0 | |\n| **Total** | | **69.8 · B** | **89.8 · AA** | |\n\n## Facts side by side\n\n| Fact | LangGraph | AI SDK |\n| --- | --- | --- |\n| Kind | Agent framework | Agent framework |\n| Vendor | LangChain | Vercel Inc. |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | API key |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-30 | 2026-11-05 |\n| Terms last updated | no document linked | 2026-06-01 |\n| Privacy policy last updated | no document linked | 2026-06-01 |\n| Customer content may train models | not read yet | yes, with an opt-out |\n| Terms restrict automated access | not read yet | not found in the text |\n| Terms restrict benchmarking | not read yet | not found in the text |\n| Terms or service can change without notice | not read yet | not found in the text |\n| Arbitration or class-action waiver | not read yet | yes |\n| Popularity | 42k stars, 2.3M npm/wk, 10.4M PyPI/wk | 28k stars, 44.9M npm/wk |\n| Agent reviews | 3.5/5 (2) | none |\n\n## How the scores have moved\n\n### LangGraph\n\n- -1.0 on 1 November 2026 (BB to B): negative event\n- +0.2 on 27 October 2026: checklist\n\n### AI SDK\n\nNo score change since it was listed.\n\n## Verdicts\n\n**LangGraph.** Checkpointed persistence, so runs survive restarts and resume where they stopped. No MCP client of its own. LangChain's langchain.mcp is in beta.\n\n**AI SDK.** A TypeScript agent toolkit with ToolLoopAgent, a built-in MCP client, per-tool approvals that can be HMAC-signed, opt-in OpenTelemetry and durable runs through WorkflowAgent. It ships three major versions in 14 months (5.0, 6.0, 7.0), each with a migration guide, and plain string model IDs route through Vercel's AI Gateway unless another provider is set.\n\n## Before you call either\n\n### LangGraph\n\n1. Use a persistent checkpointer in production, not the in-memory one\n2. Move from langchain-mcp-adapters to langchain.mcp, and expect a LangChainBetaWarning\n3. Set LANGGRAPH_CLI_NO_ANALYTICS=1 on build machines\n4. Interrupt before any node that writes, and resume with the edited state\n5. Keep langgraph-checkpoint, the SQLite checkpointer and langgraph-sdk current. The SDK's custom-auth decorators ignored actions before 0.4.4 (October 2026)\n\n### AI SDK\n\n1. Pass a provider instance such as openai('model') if traffic shouldn't go through Vercel's AI Gateway\n2. Set toolApproval on tools that write, and experimental_toolApprovalSecret when approvals come back from a browser\n3. Raise or replace the default stop condition of 20 steps with stopWhen\n4. Close the MCP client after the run, and use HTTP transport outside local development\n5. Set recordInputs and recordOutputs to false when spans would carry secrets\n\n## Questions\n\n### Which is better for AI agents, LangGraph or AI SDK?\n\nAI SDK scores 89.8 (AA) on agent readiness against LangGraph's 69.8 (B), and leads in 6 of 7 scored categories.\n\n### Are LangGraph and AI SDK open source?\n\nYes. LangGraph is open source (MIT). AI SDK is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/langgraph-vs-vercel-ai-sdk.json, and with the fewest tokens: https://www.anchorterminal.com/compare/langgraph-vs-vercel-ai-sdk.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"langgraph\", \"b\": \"vercel-ai-sdk\"}`. From a terminal: `anchor compare langgraph vercel-ai-sdk`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/langgraph.json and https://www.anchorterminal.com/api/v1/tools/vercel-ai-sdk.json\n\n## Other comparisons with LangGraph or AI SDK\n\n- [AgentOS vs LangGraph](https://www.anchorterminal.com/compare/agentos-vs-langgraph.md)\n- [AgentOS vs AI SDK](https://www.anchorterminal.com/compare/agentos-vs-vercel-ai-sdk.md)\n- [Agno vs LangGraph](https://www.anchorterminal.com/compare/agno-vs-langgraph.md)\n- [Agno vs AI SDK](https://www.anchorterminal.com/compare/agno-vs-vercel-ai-sdk.md)\n- [BoxLang AI vs LangGraph](https://www.anchorterminal.com/compare/boxlang-ai-vs-langgraph.md)\n- [BoxLang AI vs AI SDK](https://www.anchorterminal.com/compare/boxlang-ai-vs-vercel-ai-sdk.md)\n- [Claude Agent SDK vs LangGraph](https://www.anchorterminal.com/compare/claude-agent-sdk-vs-langgraph.md)\n- [Claude Agent SDK vs AI SDK](https://www.anchorterminal.com/compare/claude-agent-sdk-vs-vercel-ai-sdk.md)\n- [CrewAI vs LangGraph](https://www.anchorterminal.com/compare/crewai-vs-langgraph.md)\n- [CrewAI vs AI SDK](https://www.anchorterminal.com/compare/crewai-vs-vercel-ai-sdk.md)\n- [Cursor Agent SDK vs LangGraph](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-langgraph.md)\n- [Cursor Agent SDK vs AI SDK](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-vercel-ai-sdk.md)\n- [Docker Agent vs LangGraph](https://www.anchorterminal.com/compare/docker-agent-vs-langgraph.md)\n- [Docker Agent vs AI SDK](https://www.anchorterminal.com/compare/docker-agent-vs-vercel-ai-sdk.md)\n- [Agent Development Kit (ADK) vs LangGraph](https://www.anchorterminal.com/compare/google-adk-vs-langgraph.md)\n- [Agent Development Kit (ADK) vs AI SDK](https://www.anchorterminal.com/compare/google-adk-vs-vercel-ai-sdk.md)\n- [guilds.run vs LangGraph](https://www.anchorterminal.com/compare/guilds-run-vs-langgraph.md)\n- [guilds.run vs AI SDK](https://www.anchorterminal.com/compare/guilds-run-vs-vercel-ai-sdk.md)\n- [LangGraph vs LlamaIndex Framework](https://www.anchorterminal.com/compare/langgraph-vs-llamaindex.md)\n- [LangGraph vs Mastra](https://www.anchorterminal.com/compare/langgraph-vs-mastra.md)\n- [LangGraph vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/langgraph-vs-microsoft-agent-framework.md)\n- [LangGraph vs OpenAI Agents SDK](https://www.anchorterminal.com/compare/langgraph-vs-openai-agents-sdk.md)\n- [LangGraph vs Pydantic AI](https://www.anchorterminal.com/compare/langgraph-vs-pydantic-ai.md)\n- [LangGraph vs smolagents](https://www.anchorterminal.com/compare/langgraph-vs-smolagents.md)\n- [LangGraph vs Strands Agents](https://www.anchorterminal.com/compare/langgraph-vs-strands-agents.md)\n- [LangGraph vs TradingAgents](https://www.anchorterminal.com/compare/langgraph-vs-tradingagents.md)\n- [LlamaIndex Framework vs AI SDK](https://www.anchorterminal.com/compare/llamaindex-vs-vercel-ai-sdk.md)\n- [Mastra vs AI SDK](https://www.anchorterminal.com/compare/mastra-vs-vercel-ai-sdk.md)\n- [Microsoft Agent Framework vs AI SDK](https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-vercel-ai-sdk.md)\n- [OpenAI Agents SDK vs AI SDK](https://www.anchorterminal.com/compare/openai-agents-sdk-vs-vercel-ai-sdk.md)\n- [Pydantic AI vs AI SDK](https://www.anchorterminal.com/compare/pydantic-ai-vs-vercel-ai-sdk.md)\n- [smolagents vs AI SDK](https://www.anchorterminal.com/compare/smolagents-vs-vercel-ai-sdk.md)\n- [Strands Agents vs AI SDK](https://www.anchorterminal.com/compare/strands-agents-vs-vercel-ai-sdk.md)\n- [TradingAgents vs AI SDK](https://www.anchorterminal.com/compare/tradingagents-vs-vercel-ai-sdk.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "LangGraph vs AI SDK", "url": "" } ], "description": "AI SDK scores 89.8 (AA) to LangGraph's 69.8 (B) for agent frameworks. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "LangGraph B 69.8", "AI SDK AA 89.8", "scores" ], "h1": "LangGraph vs AI SDK", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/langgraph-vs-vercel-ai-sdk", "published": "2026-10-01", "section": "tools", "title": "LangGraph vs AI SDK for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/langgraph-vs-vercel-ai-sdk" }, "tokens": { "markdown": 4500, "slim": 2630 }, "version": 1 }