LangChain has added Connections to Managed Deep Agents, giving deployed agents a managed way to retrieve credentials at runtime. Secrets live in a LangSmith workspace rather than in the project build, allowing operators to rotate or revoke them without changing code or redeploying the agent.
A connection can belong either to the agent or to the person making a request. Agent-owned credentials suit shared services such as search APIs. User-owned connections resolve separately for each caller, so an issue created in GitHub can appear under that person’s account rather than a common bot identity. Connections can contain static secrets or OAuth grants.
Managed Deep Agents handles authorization redirects, token storage and refresh logic. If a required user grant is missing or expired, the run pauses and asks for permission; multiple missing grants can be collected in one interruption. The feature supports catalog integrations as well as custom OAuth metadata and compatible MCP servers. Connections is available in Managed Deep Agents version 0.7.0 and later.