Skip to content

Open Source LLM Agents Just Stopped Being Toys

#llm-agents #production-ai #mcp #pydantic-ai #agent-tooling

The agent production inflection point

Nobody announced it. There was no press release. But if you watched GitHub trending over the last four weeks you saw it happen.

Open source LLM agents are no longer demo toys.

We have moved past the phase where every repository is a 300 line loop that calls OpenAI, prints some thinking emojis, and fails on the third step. The projects shipping right now solve real problems, have proper error handling, observability, persistence, security boundaries. Most importantly: people are using them every day for real work.

This article breaks down the current state. What works. What doesn't. What you should actually be running right now.

What changed this month

Six months ago every agent framework was competing on how many cool demo gifs they could put in the readme. Today they are competing on boring things.

Things that matter for production:

  • Type safety
  • Persistence across restarts
  • Proper error recovery
  • Cost tracking
  • Observability
  • Standardized tool protocols
  • Human approval gates
  • Sandboxed execution

Every single top trending agent repository this month is built around these properties. Not demos.

Every single one of these projects implements MCP natively. That is not a coincidence. This is the standard that won. There will not be another one.

Pydantic AI: The FastAPI moment for agents

If you only look at one project from this entire batch, make it Pydantic AI.

This is the inflection point. Exactly like FastAPI did for web development, Pydantic AI took every good idea that existed scattered across 20 bad agent frameworks, removed all the garbage, and made it pleasant to use. It does not try to be clever. It does exactly what you expect, every time.

It has:

  • Full static type safety. Your IDE knows what the agent returns.
  • Proper dependency injection. No global state.
  • First class structured output with automatic retry on validation failure.
  • Native observability integrated with Logfire.
  • Built in human in the loop approval.
  • Durable execution that survives restarts.

Most importantly: it has no magic. You can read the entire codebase in an afternoon and understand every part. There are no hidden callbacks, no undocumented behaviour, no 1000 line agent loop that does 17 things you didn't ask for.

This is the baseline that every other agent framework will now be measured against.

Agent framework comparison

This table compares the production ready frameworks as of July 2026. All benchmarks are from real world usage, not marketing material.

FrameworkMCP SupportType SafePersistenceObservabilityHuman ApprovalProduction Ready
Pydantic AI✅ Native✅ Full✅ Durable✅ Native✅ Native✅ Yes
PraisonAI✅ Native❌ Partial✅ Session✅ OTel✅ Optional✅ Yes
OpenManus✅ Native❌ No❌ None❌ None❌ No⚠️ Beta
CrewAI✅ Partial❌ No✅ Basic❌ None✅ Optional⚠️ Beta
LangGraph✅ Partial❌ No✅ Checkpoint✅ LangSmith✅ Optional❌ No
AutoGPT❌ No❌ No❌ None❌ None❌ No❌ No

Do not use anything in the rightmost column for production right now. You will regret it.

PraisonAI: The boring reliable workhorse

If Pydantic AI is for building custom agents, PraisonAI is for when you just want something that works out of the box.

It is not pretty. It does not have a clever marketing website. It has 25 features, all of them work, and it supports every LLM provider that exists. You can spin up a multi agent team connected to Slack and Telegram in 5 lines of code. It will run unattended for weeks without crashing.

Most importantly: it does not try to lock you in. You can export every part of your agent state at any time. There is no cloud service you have to pay for. There is no telemetry.

This is the framework people are actually using right now to run agents in production. Not the ones you see on Twitter.

Profiling attention: The hidden cost no one talks about

All of this agent progress is almost completely useless if you don't understand what is actually happening on the GPU.

The Hugging Face profiling series released this month is the single most important thing published about LLM performance all year. Everyone building agents should read it twice.

The most important takeaway:

The default math backend for PyTorch SDPA is 3.7x slower than a naive hand written attention implementation. It does not use tensor cores. It rebuilds the causal mask on every single forward pass. Almost every open source LLM deployment is running this by default.

You are throwing away 75% of your GPU performance and no one told you.

This is not an accident. This is the reference implementation. It exists to be correct, not fast. Every production deployment should be forcing Flash Attention explicitly. There is no good reason to run anything else.

Vertical agents are solving real problems now

General purpose agents are still mostly useless. Vertical domain specific agents work extremely well.

We saw two excellent examples this month:

Vibe Trading

This is not a trading bot. This is a full agent runtime built exclusively for financial research and trading. It has 460 implemented alpha factors, backtesting, proper cost modelling, and connects to every broker. It will not place trades for you. It will do the work that a junior analyst used to do.

This repository got 1200 stars in 7 days. Every single one of those stars is from someone who is actually using this.

Webnovel Writer

This is an agent that writes long form web novels. Not 1000 word blog posts. 200 chapter serials. It solves the exact problem every other LLM writer fails at: consistency. It remembers every character, every plot point, every setup, 80 chapters later.

It has a formal commit log for story events, consistency checks on every chapter, and a full state dashboard. This is not a demo. People are publishing books written with this tool right now.

The missing middle: tooling for agents

The biggest gap right now is not agent runtimes. It is tooling that agents can actually use well.

notebooklm-py is the best example of this done right. It wraps Google NotebookLM as an MCP tool that any agent can call. Instead of your agent burning $20 in tokens reading 30 research papers, it offloads the entire reading and synthesis step to NotebookLM for free, gets cited answers, and only spends tokens on the final polish.

This pattern will become standard. Agents will not do work themselves. They will orchestrate specialized services that do one thing very well.

What is still broken

This is all very good, but we are not done. There are still huge unsolved problems:

  1. Doom loops. Every agent will eventually get stuck in an infinite loop repeating the same action. Every framework claims to solve this. None of them actually do.
  2. Cost control. There is still no good way to put a hard upper bound on how much an agent will spend on API calls. You can set limits, but agents will happily burn right through them.
  3. Evaluation. We still have no good way to measure if an agent is actually doing good work. All existing evals are trivial to game.
  4. Trust. You still cannot let an agent run unattended for more than about 30 minutes without checking on it.

None of these are fundamental problems. They just haven't been solved properly yet.

What comes next

Over the next 6 months you will see:

  • Every existing application get an agent interface. Not a chat box. An actual agent that can use the application on your behalf.
  • MCP become as ubiquitous as REST is today. Every service will ship an MCP server.
  • Agent frameworks will stop being products. They will become standard library components, just like HTTP clients.
  • Someone will finally build a good standard for agent evaluation.

This is not the peak. This is the starting line. We just finished building the foundation. Now the actual work begins.