Authorization

LangSmith Fleet formalizes two agent authorization models: Assistants (on-behalf-of user credentials) and Claws (fixed service-account credentials). Picking the wrong one creates either security gaps or broken functionality. This guide helps you choose and implement correctly. For background on why this distinction matters, see: LangChain Formalizes Two-Tier Agent Authorization in LangSmith Fleet Decision Framework: Which Model Do You Need? Answer these questions before you write a line of config: 1. Does the agent access data that belongs to the individual user interacting with it? ...

One of the most consequential decisions in enterprise AI agent deployment is also one of the least discussed: should your agent act as the user, or as a service? LangChain’s Harrison Chase formalized this question in a March 23 post on “In the Loop,” LangChain’s developer newsletter, introducing the two-tier authorization model now available in LangSmith Fleet. The framework is called Assistants vs. Claws, and it directly addresses a security gap that enterprise teams have been quietly dealing with for months. ...