← Back to Project List
AgentScope is Alibaba's open source Agent framework (Apache-2.0,27,000 Stars), developed by Alibaba Cloud's data intelligence team and supported by two academic papers. V2.0 is positioned as a "production-ready, full-stack covered Agent platform" and is completely rewritten on the basis of v1.0. Its core features include: event-driven architecture, three-level security protection (tool review Human-in-the-Loop sandbox isolation), multi-tenant multi-session service, distributed deployment, middleware system, and out-of-the-box use of Web UI. Ali has strong ecological affinity (DashScope deep integration) and is the preferred domestic Agent framework recommended by domestic enterprise customers.

1. Project/Product Overview

DimensionInformation
Project NameAgentScope
DeveloperAlibaba (Alibaba Cloud Data Intelligence Team)
Open Source LicenseApache-2.0
Main LanguagePython
GitHub Stars27,364(2026-06-02 query)
Forks3,103
Commits373(v2.0 mainline)
Created on2024-01-12
Last Updated2026-07-01 (Daily Active)
Latest Versionv2.0.3(2026-06-29) of 41 Release
official websitehttps://docs.agentscope.io
Source code repositoryhttps://github.com/agentscope-ai/agentscope (note: GitHub org has been renamed from alibaba to agentscope-ai)
Academic Papers2
CommunityDiscord (International), DingTalk Group (Domestic)

2. What does it mostly do?

AgentScope 2.0 is positioned as " a secure, efficient, flexible, and complete full-stack Agent framework ", covering the entire lifecycle from development to deployment:

Framework Architecture

! AgentScope 2.0 Architecture

  • AgentScope 2.0 full stack architecture: from Agent SDK to multi-tenant services, Web UI, distributed deployment, a complete set of production-level solutions. *
LayerCapabilityDescription
Agent CoreReAct AgentAutonomous inference tool execution, built-in Human-in-the-Loop supervision
Tools SystemToolkit MCP SkillsCode Tools (Bash/Grep/Glob/Read/Write/Edit), MCP Protocols, Skills Components
Security SystemLevel 3 ProtectionTool Review → Human-in-the-Loop Permission → Sandbox Isolation (Local/Docker/E2B/K8s)
Context ManagementContext MemoryContext compression, long short-term memory, Mem0/ReMe integration, vector library
Middleware SystemMiddlewareCan be combined with hooks to non-intrusively modify Agent runtime behavior
Event SystemEvent BusUnified Event Bus, Streaming Event Output, Front-End Integration
Agent ServiceAgent ServiceFastAPI multi-tenant, multi-session backend Web UI with one-click deployment
Distributed DeploymentDistributedMulti-node distributed RAG and Agent Team collaboration across nodes

3. Applicable Scenario

ScenarioDescriptionTypical Customer
Enterprise internal AI development platformUnified Agent development framework, standardized tools, and permission managementAI/digital departments of medium and large enterprises
Multi-Agent Collaboration SystemAgent Team:Leader Creates Worker, Automatically Coordinates TasksResearch and Development Efficiency, Automated Operation and Maintenance Team
Coding Assistant/Code AgentBuilt-in code tool set (Bash/Grep/Glob/Read/Write/Edit), naturally suitable for code scenariosDevelopment tool manufacturers and IDE plug-in teams
Localization/Compliance Agent PlatformDeep integration of Alibaba Endorsement DashScope to meet the requirements of trust creation/localizationGovernment, state-owned enterprises, finance, and healthcare
Multi-tenant SaaS Agent ServiceThe out-of-the-box multi-tenant multi-session architecture is suitable for external Agent APIAgent PaaS/SaaS start-up company
Security-sensitive scenariosThree-level security protection sandbox isolation, suitable for scenarios requiring strict permission controlFinance, security, and compliance industries
RAG Knowledge Base AgentDistributed multi-tenant RAG service to support large-scale document retrievalEnterprises with a large number of documents requiring intelligent query

4. Not quite the scene

ScenarioReasonAlternative Suggestions
Simple Single Question and AnswerAgentScope is a complete Agent framework, simple Q & A can be used with a lighter solutionLlamaIndex RAG/Direct LLM API
pure overseas deployment (no domestic demand)AgentScope has a tendency to DashScope/alibaba cloud ecology, and overseas ecology is not as good as LlamaIndex/LangChainLlamaIndex/LangChain
Lightweight prototypes for non-code scenariosThe framework is "heavy", and the learning curve requires understanding concepts such as event systems, permissions, and sandboxesOpenAI SDK / LangChain
Pure workflow orchestration (no agent reasoning)The core of the AgentScope is ReAct Agent, and pure step orchestration is over-designedDify / Coze / n8n
Scenarios that do not require a security sandboxAgentScope sandboxes and security systems have learning and configuration costsCrewAI / Agno

5. Core Competence List

5.1 Agent Core

ReAct AgentInference-Action Loop, LLM Autonomous Decision Tool Invoke
Human-in-the-LoopBuilt-in manual approval/supervision, which can be suspended before tool execution
Event stream outputUnified Event Bus, real-time push agent status changes
Agent TeamLeader Agent creates/manages Worker Agents and automatically assigns tasks.

5.2 Tool System

Code ToolsBash, Grep, Glob, Read, Write, Edit (similar to Coding Agent toolset)
MCP ProtocolFull MCP(Model Context Protocol) support
Custom ToolsPython Functions, Skills Components
Tool choreographyConcurrent/sequential execution, intelligent scheduling based on tool properties
Tool ReviewFine-grained Permission Control at the Tool Level

5.3 safety system (three-level protection)

LevelDescription
Tier 1: Tool ReviewConfigure which tools are available and under what conditions
Layer 2: HITL PrivilegesCritical Operations Pause for Manual Confirmation
Layer 3: Sandbox isolationLocal file system/Docker/E2B / K8s multi-granularity isolation (user/agent/session level)

5.4 Context and Memory

Context ManagementContext compression and unload policies to prevent token overflow
Agentic MemoryFile-based long-term memory middleware
Mem0 integrationThird-party memory API integration
RAGDistributed, multi-tenant, multi-session RAG service
Vector DB integrationSupport mainstream vector database

5.5 Middleware System

Agent MiddlewareNon-intrusive hook to modify Agent inference-action loop
Tool MiddlewareCustom logic before and after tool invocation
CombinableMultiple middleware in series/parallel

5.6 Production Services

Agent ServiceFastAPI the backend and start it with a single command
Multi-TenantTenant isolation, independent session and data
Multi-sessionSingle-user multi-session concurrency
Web UIPrebuilt frontend (examples/web_ui),Vue/Vite stack
DistributedMulti-node Agent Collaboration, RAG Distributed Deployment

6. Architecture/deployment/integration approach

Deployment Mode

ModeDescriptionApplicable Scenarios
Local development'pip install agentscope', running on local PythonDevelopment, debugging, prototype verification
Agent ServiceThe FastAPI service can be started by using the 'python main.py' commandThe production-level API service
Web UIThe frontend 'pnpm dev' is started and the backend is connectedA complete multi-tenant Agent platform
DistributedMulti-node deployment, Agent Team collaboration across nodesLarge-scale, high-concurrency scenarios
SandboxRunning tools in Docker, E2B, and K8sScenarios with security isolation requirements

Model Integration

-Ali Department:DashScope (Tongyi Thousand Questions Series, Deep Integration)

-OpenAI:GPT Series

-Anthropic:Claude Series

-DeepSeek:DeepSeek series

-Other: Access any LLM through Unified Model API

How to use #7.

Installation

# Python 3.11+
uv pip install agentscope
# 或 pip install agentscope

The First Agent

from agentscope.agent import Agent
from agentscope.model import DashScopeChatModel
from agentscope.credential import DashScopeCredential
from agentscope.message import UserMsg
import os

agent = Agent(
    name="Friday",
    system_prompt="你是一个有用的助手。",
    model=DashScopeChatModel(
        credential=DashScopeCredential(api_key=os.environ["DASHSCOPE_API_KEY"]),
        model="qwen3.6-plus",
    ),
)

async for evt in agent.reply_stream(UserMsg("Tony", "你好!")):
    # 处理事件流:REPLY_START、MODEL_CALL_START、TEXT_BLOCK_DELTA 等
    pass

Start Agent Service (Multi-Tenant Web UI)

git clone https://github.com/agentscope-ai/agentscope.git
cd agentscope/examples/agent_service
python main.py  # 启动后端

cd ../web_ui
pnpm install && pnpm dev  # 另一个终端启动前端

Key Screenshot

Agent Team - Leader creates a worker and coordinates execution:

! Agent Team

  • Agent Team mode: Leader Agent automatically manages Worker pools, assigns and coordinates tasks. *

Task Planning-Agent automatically breaks down complex tasks and tracks progress:

! Mission Planning

  • Task planning: The Agent splits complex tasks into traceable planning steps and updates them while executing them. *

8. What can I say before sales

8.1 a sentence positioning

" AgentScope is a production-level Agent framework produced by Ali-secure, full-stack, domestic controllable. "

8.2 customer pain points → solutions

Customer pain pointsAgentScope solutions
"Agent tool execution is not safe, worry about deleting the library and running away"Level 3 security protection: tool review Human-in-the-Loop sandbox isolation
"Need for localization/trust creation solution"Alibaba open source, Apache-2.0, DashScope deep integration, Chinese documents
"Multi-tenant SaaS service does not know how to build"Agent Service: Start multi-tenant multi-session backend Web UI with one line of command
"Multiple Agents need to collaborate but not orchestrate"Agent Team:Leader automatically creates and manages workers
"Agent requires code/file system operations"Built-in code toolset: Bash, Grep, Glob, Read, Write, Edit
"Agent context is too long, token cost is high"Context compression long-term memory RAG retrieval

8.3 Differentiated Selling Points

vs LlamaIndex / LangChain (Internationalization Framework):

-Produced by Ali, domestic controllable, Xinchuang friendly

-The security system (three-level protection sandbox) is not available in the competition.

-Multi-tenant multi-session service out of the box (competing products need to be built by themselves)

-DashScope/Tongyi Thousand Questions Deep Integration to Lower the Threshold for Domestic Customers

vs Agno:

-AgentScope security protection is more complete (level 3 vs single layer RBAC)

-AgentScope have web UI and complete front-end and back-end separation architecture

-Agno is more mature in versioning components and component management

-Different technical routes: AgentScope uses event-driven middleware, Agno uses primitive capability to mount

vs Dify / Coze (Low Code Platform):

-AgentScope is a code-level framework, more flexibility

-Dify/Coze is drag-and-drop low code for non-developers

-Different target users can be used in complementary ways

8.4 Customer Value Story Line

  1. Cut in:"What are you most worried about when you are working on AI Agent application? Security? Multi-tenancy? Or is it the requirement of localization?"
  2. Resonance :"Although the overseas framework is mature, it has shortcomings in security, compliance, Chinese support and Aliyun ecological integration."
  3. Demo : Run through the first Agent in 10 minutes → Add sandbox → Start Agent Service → Open Web UI
  4. Advanced : Single Agent → Code Tool Set → Agent Team → Distributed Deployment
  5. Rest assured : Ali Open Source, Apache-2.0, Two Academic Papers, 27K Stars, Active Community

9. Frequently Asked Customer Questions

QuestionAnswer
What is the relationship with other Alibaba AI products (Bailing and Tongyi)?AgentScope is an open-source agent framework that can be used independently. Deep integration with the DashScope, but different from the positioning of the refining platform-refining is the hosting platform, the AgentScope is the code framework.
Do I have to use the Alibaba Cloud model?No. Supports OpenAI, Anthropic, DeepSeek and other models, and integrates smoothly with DashScope.
How to ensure data security?When deployed on-premises, data does not leave the server. The third level of security protection ensures that the Agent does not operate beyond its authority.
What is the principle of sandbox isolation?The local file system/Docker container/E2B/Kubernetes can be configured to the user/agent/session level.
Can v1.0 be upgraded to v2.0?v2.0 is a complete rewrite (Breaking Change) and is API incompatible. New project directly with v2.0.
How about MCP support?The MCP protocol is fully supported. Agents can directly use the tools provided by the MCP server.
Do you have a Chinese document?Yes. The README is available in Chinese, as is the Contribution Guide.
Can I use it with LangChain/LlamaIndex?Yes. The tool system supports Python functions and Skills, which can be packaged as tools.

10. PoC Recommendations

Recommended PoC Direction: Enterprise Code Assistant Agent Platform

PhaseContentTimeOutput
1. Build the environmentPip install agentscope, configure the model API0.5 daysRun the environment
2. Single-agent developmentBuild a code assistant agent and connect to Bash, Grep, Read, and Write tools1 dayAvailable code agents
3. Security configurationConfigure the sandbox (Docker), set tool permissions and HITL1 daySecure and controllable Agents
4. Agent ServiceStart the multi-tenant Agent service and deploy the Web UI for1 dayMulti-user Agent platform
5. Agent TeamRealize Leader-Worker mode, automatic task allocation1 dayMulti-Agent collaboration system
6. Evaluation reportTest security protection, multi-tenant isolation, and performance0.5 daysPoC evaluation report

Validation Metrics:

-Sandbox isolation validity (Agent cannot access beyond authority)

-Multi-tenant data isolation (tenant A cannot see tenant B's data)

-Human-in-the-Loop Approval Process Availability

-Agent Team task assignment accuracy

-Service stability under concurrent sessions

11. Risks and Considerations

RiskLevelDescriptionMitigation
v2.0 is relatively youngMediumv2.0 was released in 2026-05, API and documentation are still being perfectedFocus on Release Notes, lock version
GitHub org MigrationLoworg Migration from alibaba to agentscope-aiUse the new org link
Alibaba System DependencyLowDeep DashScope integration, not mandatorySelect model provider on demand
Overseas community sizeLowOverseas visibility is lower than LlamaIndex/LangChainDomestic community active with paper endorsement
Chinese is preferredLowThe documents are mainly in Chinese, and the English materials are relatively fewdoes not affect domestic customers
Code Tool RisksMediumBash/Write/Edit has powerful functions, and improper configuration may cause security risks.Be sure to configure sandbox permission control.

12. My Pre-Sales Judgment

  • Recommendation: strongly recommended * (especially suitable for domestic enterprise customers with localization/safety requirements)

Reason:

  1. Domestic Benchmark : Alibaba, 27K Stars, two academic papers-is the most technical background in the domestic Agent framework
  2. Safety First : Three-level security protection sandbox isolation, the most complete security system in the competition-for financial, government and other customers is the killer
  3. Production Ready :v2.0 is fully committed to multi-tenant, distributed, Web UI and other production-level features.
  4. Full Stack Coverage : The SDK back-end front-end is distributed, and a set of frameworks can handle the full link.
  5. Eco-friendly:DashScope deep integration, MCP support, flexible tool system expansion

Recommended Customer Persona:

-Domestic enterprises, with demand for localization/trust creation

-Security-sensitive industries (finance, government, healthcare, energy)

-Need a multi-tenant Agent platform (SaaS entrepreneur)

-Use Aliyun Ecology (DashScope, Tongyi Thousand Questions)

-The team has Python foundation and takes the code-level development route.

Not recommended situations:

-Pure overseas deployment (LlamaIndex/LangChain recommended)

-Simple scenes do not require a security sandbox (complexity is not worth it)

-Low-code platform required for non-technical staff (Dify/Coze recommended)

-v1.0 old users and unable to invest in migration costs

13. REFERENCE

-GitHub repository: https://github.com/agentscope-ai/agentscope

-Official Document: https://docs.agentscope.io

-README (Chinese):https://github.com/agentscope-ai/agentscope/blob/main/README_zh.md

-Roadmap:https://github.com/orgs/agentscope-ai/projects/2/views/1

-Academic Papers v1.0:https://arxiv.org/abs/2508.16279

-Academic paper original: https://arxiv.org/abs/2402.14034

-Discord Community: https://discord.gg/eYMpfnkG8h

-PyPI:https://pypi.org/project/agentscope/

  • Analysis Date: 2026-06-02 | Data Aging: GitHub Information Pull in Real Time, Product Functions Based on Official Document v2.0.3 *