1. Project/Product Overview
| Dimension | Information |
|---|---|
| Project Name | AgentScope |
| Developer | Alibaba (Alibaba Cloud Data Intelligence Team) |
| Open Source License | Apache-2.0 |
| Main Language | Python |
| GitHub Stars | 27,364(2026-06-02 query) |
| Forks | 3,103 |
| Commits | 373(v2.0 mainline) |
| Created on | 2024-01-12 |
| Last Updated | 2026-07-01 (Daily Active) |
| Latest Version | v2.0.3(2026-06-29) of 41 Release |
| official website | https://docs.agentscope.io |
| Source code repository | https://github.com/agentscope-ai/agentscope (note: GitHub org has been renamed from alibaba to agentscope-ai) |
| Academic Papers | 2 |
| Community | Discord (International), DingTalk Group (Domestic) |
2. What does it mostly do?
AgentScope 2.0 is positioned as " a secure, efficient, flexible, and complete full-stack Agent framework ", covering the entire lifecycle from development to deployment:
Framework Architecture
- AgentScope 2.0 full stack architecture: from Agent SDK to multi-tenant services, Web UI, distributed deployment, a complete set of production-level solutions. *
| Layer | Capability | Description |
|---|---|---|
| Agent Core | ReAct Agent | Autonomous inference tool execution, built-in Human-in-the-Loop supervision |
| Tools System | Toolkit MCP Skills | Code Tools (Bash/Grep/Glob/Read/Write/Edit), MCP Protocols, Skills Components |
| Security System | Level 3 Protection | Tool Review → Human-in-the-Loop Permission → Sandbox Isolation (Local/Docker/E2B/K8s) |
| Context Management | Context Memory | Context compression, long short-term memory, Mem0/ReMe integration, vector library |
| Middleware System | Middleware | Can be combined with hooks to non-intrusively modify Agent runtime behavior |
| Event System | Event Bus | Unified Event Bus, Streaming Event Output, Front-End Integration |
| Agent Service | Agent Service | FastAPI multi-tenant, multi-session backend Web UI with one-click deployment |
| Distributed Deployment | Distributed | Multi-node distributed RAG and Agent Team collaboration across nodes |
3. Applicable Scenario
| Scenario | Description | Typical Customer |
|---|---|---|
| Enterprise internal AI development platform | Unified Agent development framework, standardized tools, and permission management | AI/digital departments of medium and large enterprises |
| Multi-Agent Collaboration System | Agent Team:Leader Creates Worker, Automatically Coordinates Tasks | Research and Development Efficiency, Automated Operation and Maintenance Team |
| Coding Assistant/Code Agent | Built-in code tool set (Bash/Grep/Glob/Read/Write/Edit), naturally suitable for code scenarios | Development tool manufacturers and IDE plug-in teams |
| Localization/Compliance Agent Platform | Deep integration of Alibaba Endorsement DashScope to meet the requirements of trust creation/localization | Government, state-owned enterprises, finance, and healthcare |
| Multi-tenant SaaS Agent Service | The out-of-the-box multi-tenant multi-session architecture is suitable for external Agent API | Agent PaaS/SaaS start-up company |
| Security-sensitive scenarios | Three-level security protection sandbox isolation, suitable for scenarios requiring strict permission control | Finance, security, and compliance industries |
| RAG Knowledge Base Agent | Distributed multi-tenant RAG service to support large-scale document retrieval | Enterprises with a large number of documents requiring intelligent query |
4. Not quite the scene
| Scenario | Reason | Alternative Suggestions |
|---|---|---|
| Simple Single Question and Answer | AgentScope is a complete Agent framework, simple Q & A can be used with a lighter solution | LlamaIndex RAG/Direct LLM API |
| pure overseas deployment (no domestic demand) | AgentScope has a tendency to DashScope/alibaba cloud ecology, and overseas ecology is not as good as LlamaIndex/LangChain | LlamaIndex/LangChain |
| Lightweight prototypes for non-code scenarios | The framework is "heavy", and the learning curve requires understanding concepts such as event systems, permissions, and sandboxes | OpenAI SDK / LangChain |
| Pure workflow orchestration (no agent reasoning) | The core of the AgentScope is ReAct Agent, and pure step orchestration is over-designed | Dify / Coze / n8n |
| Scenarios that do not require a security sandbox | AgentScope sandboxes and security systems have learning and configuration costs | CrewAI / Agno |
5. Core Competence List
5.1 Agent Core
| ReAct Agent | Inference-Action Loop, LLM Autonomous Decision Tool Invoke | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Human-in-the-Loop | Built-in manual approval/supervision, which can be suspended before tool execution | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Event stream output | Unified Event Bus, real-time push agent status changes | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Agent Team | Leader Agent creates/manages Worker Agents and automatically assigns tasks. |
5.2 Tool System
| Code Tools | Bash, Grep, Glob, Read, Write, Edit (similar to Coding Agent toolset) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| MCP Protocol | Full MCP(Model Context Protocol) support | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Custom Tools | Python Functions, Skills Components | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Tool choreography | Concurrent/sequential execution, intelligent scheduling based on tool properties | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Tool Review | Fine-grained Permission Control at the Tool Level |
5.3 safety system (three-level protection)
| Level | Description |
|---|---|
| Tier 1: Tool Review | Configure which tools are available and under what conditions |
| Layer 2: HITL Privileges | Critical Operations Pause for Manual Confirmation |
| Layer 3: Sandbox isolation | Local file system/Docker/E2B / K8s multi-granularity isolation (user/agent/session level) |
5.4 Context and Memory
| Context Management | Context compression and unload policies to prevent token overflow | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Agentic Memory | File-based long-term memory middleware | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Mem0 integration | Third-party memory API integration | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| RAG | Distributed, multi-tenant, multi-session RAG service | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Vector DB integration | Support mainstream vector database |
5.5 Middleware System
| Agent Middleware | Non-intrusive hook to modify Agent inference-action loop | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Tool Middleware | Custom logic before and after tool invocation | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Combinable | Multiple middleware in series/parallel |
5.6 Production Services
| Agent Service | FastAPI the backend and start it with a single command | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Multi-Tenant | Tenant isolation, independent session and data | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Multi-session | Single-user multi-session concurrency | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Web UI | Prebuilt frontend (examples/web_ui),Vue/Vite stack | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Distributed | Multi-node Agent Collaboration, RAG Distributed Deployment |
6. Architecture/deployment/integration approach
Deployment Mode
| Mode | Description | Applicable Scenarios |
|---|---|---|
| Local development | 'pip install agentscope', running on local Python | Development, debugging, prototype verification |
| Agent Service | The FastAPI service can be started by using the 'python main.py' command | The production-level API service |
| Web UI | The frontend 'pnpm dev' is started and the backend is connected | A complete multi-tenant Agent platform |
| Distributed | Multi-node deployment, Agent Team collaboration across nodes | Large-scale, high-concurrency scenarios |
| Sandbox | Running tools in Docker, E2B, and K8s | Scenarios with security isolation requirements |
Model Integration
-Ali Department:DashScope (Tongyi Thousand Questions Series, Deep Integration)
-OpenAI:GPT Series
-Anthropic:Claude Series
-DeepSeek:DeepSeek series
-Other: Access any LLM through Unified Model API
How to use #7.
Installation
# Python 3.11+
uv pip install agentscope
# 或 pip install agentscope
The First Agent
from agentscope.agent import Agent
from agentscope.model import DashScopeChatModel
from agentscope.credential import DashScopeCredential
from agentscope.message import UserMsg
import os
agent = Agent(
name="Friday",
system_prompt="你是一个有用的助手。",
model=DashScopeChatModel(
credential=DashScopeCredential(api_key=os.environ["DASHSCOPE_API_KEY"]),
model="qwen3.6-plus",
),
)
async for evt in agent.reply_stream(UserMsg("Tony", "你好!")):
# 处理事件流:REPLY_START、MODEL_CALL_START、TEXT_BLOCK_DELTA 等
pass
Start Agent Service (Multi-Tenant Web UI)
git clone https://github.com/agentscope-ai/agentscope.git
cd agentscope/examples/agent_service
python main.py # 启动后端
cd ../web_ui
pnpm install && pnpm dev # 另一个终端启动前端
Key Screenshot
Agent Team - Leader creates a worker and coordinates execution:
- Agent Team mode: Leader Agent automatically manages Worker pools, assigns and coordinates tasks. *
Task Planning-Agent automatically breaks down complex tasks and tracks progress:
- Task planning: The Agent splits complex tasks into traceable planning steps and updates them while executing them. *
8. What can I say before sales
8.1 a sentence positioning
" AgentScope is a production-level Agent framework produced by Ali-secure, full-stack, domestic controllable. "
8.2 customer pain points → solutions
| Customer pain points | AgentScope solutions |
|---|---|
| "Agent tool execution is not safe, worry about deleting the library and running away" | Level 3 security protection: tool review Human-in-the-Loop sandbox isolation |
| "Need for localization/trust creation solution" | Alibaba open source, Apache-2.0, DashScope deep integration, Chinese documents |
| "Multi-tenant SaaS service does not know how to build" | Agent Service: Start multi-tenant multi-session backend Web UI with one line of command |
| "Multiple Agents need to collaborate but not orchestrate" | Agent Team:Leader automatically creates and manages workers |
| "Agent requires code/file system operations" | Built-in code toolset: Bash, Grep, Glob, Read, Write, Edit |
| "Agent context is too long, token cost is high" | Context compression long-term memory RAG retrieval |
8.3 Differentiated Selling Points
vs LlamaIndex / LangChain (Internationalization Framework):
-Produced by Ali, domestic controllable, Xinchuang friendly
-The security system (three-level protection sandbox) is not available in the competition.
-Multi-tenant multi-session service out of the box (competing products need to be built by themselves)
-DashScope/Tongyi Thousand Questions Deep Integration to Lower the Threshold for Domestic Customers
vs Agno:
-AgentScope security protection is more complete (level 3 vs single layer RBAC)
-AgentScope have web UI and complete front-end and back-end separation architecture
-Agno is more mature in versioning components and component management
-Different technical routes: AgentScope uses event-driven middleware, Agno uses primitive capability to mount
vs Dify / Coze (Low Code Platform):
-AgentScope is a code-level framework, more flexibility
-Dify/Coze is drag-and-drop low code for non-developers
-Different target users can be used in complementary ways
8.4 Customer Value Story Line
- Cut in:"What are you most worried about when you are working on AI Agent application? Security? Multi-tenancy? Or is it the requirement of localization?"
- Resonance :"Although the overseas framework is mature, it has shortcomings in security, compliance, Chinese support and Aliyun ecological integration."
- Demo : Run through the first Agent in 10 minutes → Add sandbox → Start Agent Service → Open Web UI
- Advanced : Single Agent → Code Tool Set → Agent Team → Distributed Deployment
- Rest assured : Ali Open Source, Apache-2.0, Two Academic Papers, 27K Stars, Active Community
9. Frequently Asked Customer Questions
| Question | Answer |
|---|---|
| What is the relationship with other Alibaba AI products (Bailing and Tongyi)? | AgentScope is an open-source agent framework that can be used independently. Deep integration with the DashScope, but different from the positioning of the refining platform-refining is the hosting platform, the AgentScope is the code framework. |
| Do I have to use the Alibaba Cloud model? | No. Supports OpenAI, Anthropic, DeepSeek and other models, and integrates smoothly with DashScope. |
| How to ensure data security? | When deployed on-premises, data does not leave the server. The third level of security protection ensures that the Agent does not operate beyond its authority. |
| What is the principle of sandbox isolation? | The local file system/Docker container/E2B/Kubernetes can be configured to the user/agent/session level. |
| Can v1.0 be upgraded to v2.0? | v2.0 is a complete rewrite (Breaking Change) and is API incompatible. New project directly with v2.0. |
| How about MCP support? | The MCP protocol is fully supported. Agents can directly use the tools provided by the MCP server. |
| Do you have a Chinese document? | Yes. The README is available in Chinese, as is the Contribution Guide. |
| Can I use it with LangChain/LlamaIndex? | Yes. The tool system supports Python functions and Skills, which can be packaged as tools. |
10. PoC Recommendations
Recommended PoC Direction: Enterprise Code Assistant Agent Platform
| Phase | Content | Time | Output |
|---|---|---|---|
| 1. Build the environment | Pip install agentscope, configure the model API | 0.5 days | Run the environment |
| 2. Single-agent development | Build a code assistant agent and connect to Bash, Grep, Read, and Write tools | 1 day | Available code agents |
| 3. Security configuration | Configure the sandbox (Docker), set tool permissions and HITL | 1 day | Secure and controllable Agents |
| 4. Agent Service | Start the multi-tenant Agent service and deploy the Web UI for | 1 day | Multi-user Agent platform |
| 5. Agent Team | Realize Leader-Worker mode, automatic task allocation | 1 day | Multi-Agent collaboration system |
| 6. Evaluation report | Test security protection, multi-tenant isolation, and performance | 0.5 days | PoC evaluation report |
Validation Metrics:
-Sandbox isolation validity (Agent cannot access beyond authority)
-Multi-tenant data isolation (tenant A cannot see tenant B's data)
-Human-in-the-Loop Approval Process Availability
-Agent Team task assignment accuracy
-Service stability under concurrent sessions
11. Risks and Considerations
| Risk | Level | Description | Mitigation |
|---|---|---|---|
| v2.0 is relatively young | Medium | v2.0 was released in 2026-05, API and documentation are still being perfected | Focus on Release Notes, lock version |
| GitHub org Migration | Low | org Migration from alibaba to agentscope-ai | Use the new org link |
| Alibaba System Dependency | Low | Deep DashScope integration, not mandatory | Select model provider on demand |
| Overseas community size | Low | Overseas visibility is lower than LlamaIndex/LangChain | Domestic community active with paper endorsement |
| Chinese is preferred | Low | The documents are mainly in Chinese, and the English materials are relatively few | does not affect domestic customers |
| Code Tool Risks | Medium | Bash/Write/Edit has powerful functions, and improper configuration may cause security risks. | Be sure to configure sandbox permission control. |
12. My Pre-Sales Judgment
- Recommendation: strongly recommended * (especially suitable for domestic enterprise customers with localization/safety requirements)
Reason:
- Domestic Benchmark : Alibaba, 27K Stars, two academic papers-is the most technical background in the domestic Agent framework
- Safety First : Three-level security protection sandbox isolation, the most complete security system in the competition-for financial, government and other customers is the killer
- Production Ready :v2.0 is fully committed to multi-tenant, distributed, Web UI and other production-level features.
- Full Stack Coverage : The SDK back-end front-end is distributed, and a set of frameworks can handle the full link.
- Eco-friendly:DashScope deep integration, MCP support, flexible tool system expansion
Recommended Customer Persona:
-Domestic enterprises, with demand for localization/trust creation
-Security-sensitive industries (finance, government, healthcare, energy)
-Need a multi-tenant Agent platform (SaaS entrepreneur)
-Use Aliyun Ecology (DashScope, Tongyi Thousand Questions)
-The team has Python foundation and takes the code-level development route.
Not recommended situations:
-Pure overseas deployment (LlamaIndex/LangChain recommended)
-Simple scenes do not require a security sandbox (complexity is not worth it)
-Low-code platform required for non-technical staff (Dify/Coze recommended)
-v1.0 old users and unable to invest in migration costs
13. REFERENCE
-GitHub repository: https://github.com/agentscope-ai/agentscope
-Official Document: https://docs.agentscope.io
-README (Chinese):https://github.com/agentscope-ai/agentscope/blob/main/README_zh.md
-Roadmap:https://github.com/orgs/agentscope-ai/projects/2/views/1
-Academic Papers v1.0:https://arxiv.org/abs/2508.16279
-Academic paper original: https://arxiv.org/abs/2402.14034
-Discord Community: https://discord.gg/eYMpfnkG8h
-PyPI:https://pypi.org/project/agentscope/
- Analysis Date: 2026-06-02 | Data Aging: GitHub Information Pull in Real Time, Product Functions Based on Official Document v2.0.3 *