Skip to main content
SI
TheBestSI
Guide

10 AI Agent Platforms Businesses Are Evaluating in 2026

Ten agent frameworks and platforms, from LangGraph and CrewAI to Microsoft Agent Framework and Agentforce, with what each is for, what its docs say about human oversight, and one caveat each.

By Technology Desk11 min read

Every vendor now has an 'agent'. The word covers a chat assistant that suggests a reply, a framework that lets a developer wire a model to company systems, and a hosted product that handles customer conversations on its own. Putting them in one list is useful only if we are clear about what differs between them.

What does 'autonomous' actually mean for an agent?

An agent, as our guide to AI coding agents puts it, plans its own steps and calls tools instead of answering a single prompt. Autonomy is how far that goes before a person steps in. Three questions place any product on the spectrum:

  1. What can it touch? Read-only data, or systems where it can change records, send messages or spend money.
  2. What needs approval? Nothing, a list of named actions, or everything.
  3. What is recorded? Whether you can reconstruct, afterwards, what it did and why.

Which ten platforms are in this list?

Ten agent platforms, grouped by what you get. Descriptions follow each vendor's own docs.
PlatformTypeStated purpose (from its docs)Oversight features its docs mention
LangGraphDeveloper frameworkBuilding, managing and deploying long-running, stateful agentsHuman-in-the-loop: people can review and change agent state; persistence
CrewAIDeveloper frameworkOrchestrating AI agents and building workflows from Flows and CrewsNot described on the page we read
Microsoft Agent FrameworkDeveloper frameworkBuilding AI agents and multi-agent workflows in .NET, Python and GoTool approval in its Harness Agent; human-in-the-loop state management
AutoGenDeveloper frameworkA framework for building AI agents and applicationsNot described on the page we read
OpenAI Agents SDKDeveloper frameworkBuilding agentic apps with few abstractionsGuardrails; human-in-the-loop mechanisms; tracing
Claude Agent SDKDeveloper libraryClaude Code's agent loop and tools as a libraryPermissions for tool approval; hooks
Google Agent Development KitDeveloper frameworkBuilding, debugging and deploying agentsNavigation lists human input and action confirmations; not explained on the page
LlamaIndex agentsDeveloper frameworkSemi-autonomous software that picks tools step by stepA human-in-the-loop page exists; not described on the page we read
Amazon Bedrock Agents (Classic)Hosted serviceAgents that call APIs and query knowledge basesTraces of the agent's step-by-step reasoning
Salesforce AgentforceHosted productAutonomous agents for customer and employee serviceEscalation to human agents; set guardrails

Ten agent platforms, grouped by what you get. Descriptions follow each vendor's own docs.

1. LangGraph

The LangGraph overview describes it as a low-level orchestration framework and runtime for 'building, managing, and deploying long-running, stateful agents', usable with or without LangChain. It lists human-in-the-loop (people can review and change an agent's state during a run), persistence and durable execution among its capabilities. Caveat: 'low-level' means your team builds the approval screens and the monitoring; the framework does not supply a finished product.

2. CrewAI

CrewAI calls itself an open-source framework for orchestrating autonomous agents. It pairs Flows, which manage state and control execution, with Crews, which are teams of agents that take on tasks a Flow hands them. Caveat: the introduction page we read does not describe human review or approval features, so a buyer must find and test them in the rest of the documentation. The page also describes itself as 'the leading' framework, a claim we have not assessed and do not repeat as fact.

3. Microsoft Agent Framework

Microsoft's overview presents Agent Framework as a way to build agents and graph-based workflows in .NET, Python and Go. Its 'Harness Agent' lists planning, file access and memory, 'don't-ask-again tool approval' and observability, and the page says its state system supports long-running and human-in-the-loop scenarios. It describes itself as the direct successor to both Semantic Kernel and AutoGen. Caveat: the page says the Go version is in public preview, and tells users that applications built with third-party systems are their own responsibility to review and test.

4. AutoGen

AutoGen's documentation describes 'a framework for building AI agents and applications' in four parts: AgentChat for conversational single and multi-agent apps, Core for event-driven multi-agent systems, Extensions, and Studio, a web interface for prototyping without code. Caveat: Microsoft's Agent Framework page calls itself the direct successor to AutoGen, while the AutoGen page we read states no maintenance status. Check the project's current status before starting a new build on it.

5. OpenAI Agents SDK

The SDK is described as a lightweight Python framework with 'very few abstractions'. Its core ideas are agents (a model given instructions and tools), handoffs or agents-as-tools for delegation, and guardrails that validate inputs and outputs and can stop a run when a check fails. The docs mention built-in human-in-the-loop mechanisms and tracing. Caveat: guardrails check what you tell them to check. They catch the failures you thought of, not the ones you did not.

6. Claude Agent SDK

Anthropic's docs describe the Agent SDK as Claude Code's tools, agent loop and context management as a library for Python and TypeScript. Its capability list includes permissions ('control which tools run automatically, which need approval') and hooks that run your own code at points in the agent's lifecycle. Caveat: the page notes that third-party products may not offer claude.ai login or rate limits unless previously approved and must use API-key authentication. Read the licence and terms section before building a product on it.

7. Google Agent Development Kit (ADK)

ADK is described as an open-source framework to 'build, debug, and deploy reliable AI agents at enterprise scale', available in Python, TypeScript, Go, Java and Kotlin. Its navigation lists graph-workflow human input, function-tool action confirmations and an evaluation section. Caveat: the landing page does not explain those features, and we did not read their pages, so we cannot say how they behave. Treat the list as a prompt for your own check.

8. LlamaIndex agents

LlamaIndex describes an agent as 'a semi-autonomous piece of software powered by an LLM' that chooses from a set of tools at each step and decides after each whether the task is finished. Tools range from plain Python functions to its own query engines. Caveat: the page we read names a human-in-the-loop section but does not describe it. Note the framework's own word: 'semi-autonomous'.

9. Amazon Bedrock Agents (Classic)

AWS describes Bedrock Agents as a service for building agents that break requests into steps, collect missing information from the user, call company APIs and query knowledge bases, with traces to examine the agent's reasoning at each step. Caveat: the AWS page states that Bedrock Agents (now 'Bedrock Agents Classic') is no longer open to new customers, that existing customers can continue as normal, and points to Amazon Bedrock AgentCore for similar capabilities. We did not read the AgentCore documentation, so we do not describe it.

10. Salesforce Agentforce

Salesforce presents Agentforce as an AI agent platform for customer and employee service across web, phone and apps. Its page says agents work 'within set guardrails', draw on business data such as CRM data, and can 'escalate the matter to human agents' when an issue is out of scope. Caveat: this is vendor marketing. It describes intended behaviour, not measured results, and we state none of its performance claims. Ask for evidence under your own conditions.

What governance questions should you ask before trusting any of them?

The platform matters less than the controls you set around it. Use the same evidence discipline as in our procurement evidence checklist and vendor claims versus verified findings guides.

Six questions to answer in writing

  1. PermissionsList every system the agent can read and every system it can change. Give it the least access that lets the task work.
  2. ApprovalsName the actions that need a person's sign-off, such as sending external messages, deleting data or moving money, and test that the block actually holds.
  3. LoggingConfirm you can see each tool call, its inputs and its result afterwards, and how long the records are kept.
  4. DataFind out where prompts and outputs go, who can see them and how long they are retained. See our guide on AI data retention.
  5. Failure handlingDecide what happens when the agent is wrong, stuck or looping, and who is paged.
  6. EvidenceRun a small trial on a real task, record the failures as well as the successes, and judge by what you measured.

What are the limitations of this list?

We read one or two documentation pages per product on a single day. Docs change, features move between versions, and a page can omit a feature that exists. We did not install, run or test any of these tools, and nothing here is a performance comparison. The list is not exhaustive and its order is not a ranking. Confirm every detail on the vendor's current documentation before you decide.

Frequently asked questions

What makes an AI agent 'autonomous'?+

There is no agreed threshold. In practice autonomy means how many steps the system takes, and how many tools it calls, before a person has to approve something. Vendors use the word for products with very different levels of oversight, so ask what the agent can do without approval rather than relying on the label.

Is a framework the same thing as a platform?+

No. A framework such as LangGraph or the OpenAI Agents SDK is code your developers use to build an agent and then run themselves. A platform such as Salesforce Agentforce is a vendor product that hosts and runs agents for you. The first gives more control and more work; the second reduces work and moves some decisions to the vendor.

Which of these should a business pick?+

We do not rank them, and we have not tested them. The right choice depends on your team's skills, the systems the agent must reach, your data rules and how much oversight the task needs. Run a small trial on a real task and judge it by the evidence you collect, as described in our procurement checklist.

Can an agent act without human approval?+

That depends on how it is configured. Several of these tools document ways to require human input or approval; whether yours does so is a setting you must choose and test. Never assume the default is the safe one.

Sources

  1. LangGraph overview — LangChain (accessed October 18, 2026). Stated purpose; human-in-the-loop, persistence and durable execution listed as capabilities.
  2. CrewAI introduction — CrewAI (accessed October 18, 2026). Flows and Crews; no human-input features described on this page.
  3. Microsoft Agent Framework overview — Microsoft Learn (accessed October 18, 2026). Agents, Harness Agent, workflows; successor statement for AutoGen and Semantic Kernel; Go in public preview.
  4. AutoGen documentation — Microsoft (accessed October 18, 2026). AgentChat, Core, Extensions, Studio; no maintenance status stated.
  5. OpenAI Agents SDK — OpenAI (accessed October 18, 2026). Agents, handoffs, guardrails, human-in-the-loop, tracing.
  6. Agent SDK overview — Anthropic (accessed October 18, 2026). Permissions, hooks, sessions; terms note on third-party authentication.
  7. Agent Development Kit — Google (accessed October 18, 2026). Stated purpose; human input, action confirmations and evaluation appear in navigation only.
  8. Building agents with LlamaIndex — LlamaIndex (accessed October 18, 2026). Definition of an agent as semi-autonomous; human-in-the-loop page not read.
  9. Amazon Bedrock Agents — Amazon Web Services (accessed October 18, 2026). Purpose; trace feature; Classic no longer open to new customers; AgentCore named as alternative.
  10. Agentforce — Salesforce (accessed October 18, 2026). Vendor marketing page; escalation to human agents and 'set guardrails' wording.

Further reading

  1. AI Risk Management Framework — NIST (accessed October 18, 2026). Background reading. Not a source for the platform descriptions above.

Who writes this?

The site was founded by Liyam Flexer, Founder & Editor. Content is managed by Adam Green, Content Manager, with Tal Slavin joining as Writer & Editor. A byline identifies who is responsible for the editorial content; it does not claim the author tested a product. Articles carry an editorial-review status, and those awaiting review say so. Questions or corrections: contact.