PulseAugur
EN
LIVE 10:57:25

LangChain subagents lack default tool permission inheritance; custom middleware offers solution

By PulseAugur Editorial · [1 sources] ·

A developer explored how subagents in LangChain's Deep Agents framework handle tool permissions, discovering that subagents do not inherit their parent's tool access by default. Instead, each subagent spec functions as a fresh grant, potentially allowing broader tool usage than intended. The developer implemented a custom middleware, BoundedByParent, to enforce that subagents can only access tools explicitly held by their parent agent, demonstrating a solution to this permission inheritance issue. This work also led to the creation of a library called attenu-guard, which offers more granular control over subagent capabilities, including scopes and ceilings. AI

IMPACT Provides a practical solution for controlling subagent permissions in agent frameworks, enhancing safety and predictability.

RANK_REASON Developer-created middleware and library for an existing AI framework.

Read on dev.to — LLM tag →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

LangChain subagents lack default tool permission inheritance; custom middleware offers solution

How we ranked this

Signal score
38 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Developer-created middleware and library for an existing AI framework.
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
product, other
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

Full methodology in our editorial standards.

COVERAGE [1]

  1. dev.to — LLM tag TIER_1 English(EN) · Rafael Asor ·

    Does a LangGraph subagent inherit its parent's tool permissions? I tested it.

    <p>I gave a supervisor agent in Deep Agents 0.7.6 exactly one tool, <code>write_brief</code>. It spawned a writer subagent. The writer ran a web search for <code>site:exfil.example internal customer list</code>, because a note in its input told it to. Nothing checked that call ag…

RELATED ENTITIES

RELATED TOPICS