Agents and tools

Loops that call tools, the protocol that exposes them, and what to keep in context.

Sign in to track your progress across sections.

Courses in this topic

Practice in this topic

43 articles

Claude Agent SDK

Listed inClaude Agent SDKAgents and toolson

Writing the agent loop is straightforward; the harness supplies what surrounds it. Context management, sessions, permissions, and the file and shell tools an agent needs are what adopting the SDK gives you.

Guide
Intermediate4 min
#agents
#sdk

Modus

Listed inModusAgents and toolson

The repository is archived and read-only, last pushed in September 2025. The idea worth keeping is the sandboxed WebAssembly module, which bounds what an agent can touch in a way importing a library does not.

Guide
Intermediate3 min
#frameworks

Google ADK

Listed inGoogle ADKAgents and toolson

`SequentialAgent`, `ParallelAgent` and `LoopAgent` make the workflow patterns deterministic classes rather than behaviour you hope for, which suits a pipeline with one judgement call in it. Model-agnostic across five language bindings, with evaluation in the box.

Guide
Intermediate4 min
#frameworks

What are AI Agents?

Listed inWhat are AI Agents?Agents and toolson

Anthropic's line is who decides what happens next: your code, or the model. The five workflow patterns that sit between one call and an agent, and the three costs the loop brings with it.

Guide
Beginner3 min
#concepts

Vertex AI Agent Builder

Listed inVertex AI Agent BuilderAgents and toolson

Google's managed half, where grounding, scaling and availability are configured rather than assembled. IAM, VPC Service Controls and data residency are usually what decides it, and what you give up is visibility into the retrieval pipeline.

Guide
Beginner4 min
#platforms

OpenAI AgentKit

Listed inOpenAI AgentKit & Agents SDKAgents and toolson

Three approaches form a ladder rather than alternatives: a hosted Agents API, an SDK that runs inside your application, and the raw Responses API. Guardrails are a validation step you configure, not an enforcement boundary the model cannot cross.

Guide
Intermediate4 min
#frameworks

Multi-Agent Systems

Listed inMulti-Agent SystemsAgents and toolson

Four topologies, and costs that do not appear in a token count: latency is the slowest path, and four agents at 90% each is nearer a 65% system. The documented failures were delegation quality rather than architecture, which means the fix is the brief.

Guide
Advanced4 min
#architecture

Agent Use Cases

Listed inAgent Use CasesAgents and toolson

An agent costs roughly four times a chat interaction, so the test is whether the path is unknown in advance and whether success is checkable. Software tasks pass both; anything with a fixed procedure passes neither.

Guide
Beginner4 min
#use-cases

MCP in one sitting

Listed inModel Context Protocol (MCP)Agents and toolson

Hosts, clients and servers, and the three primitives a server exposes: tools, resources and prompts. Includes a working TypeScript server in about forty lines, and the mistakes that make a server unusable in practice.

Guide
Intermediate9 min
#mcp
#tools
#integration

Transport Layer

Listed inTransport LayerAgents and toolson

stdio or streamable HTTP, at revision 2026-07-28, which removed sessions, GET streams and resumability. What moving off stdio forces you to add.

Guide
Intermediate5 min
#mcp

MCP Server

Listed inMCP ServerAgents and toolson

Tools are model-controlled, resources are application-controlled. That column decides which primitive a capability belongs to.

Guide
Intermediate4 min
#mcp
#security

MCP Host

Listed inMCP HostAgents and toolson

The six responsibilities the specification gives the host, why one client per server is the isolation boundary, and what happens when a server asks you for a completion.

Guide
Beginner6 min
#architecture

Building an MCP Server

Listed inBuilding an MCP ServerAgents and toolson

The input schema tells the model what to send as well as validating what arrives. Returning tools in a stable order protects callers' prompt caches, and an error that names the rule lets the model correct itself.

Guide
Intermediate5 min
#implementation

Data Layer

Listed inData LayerAgents and toolson

The current MCP revision is stateless: server/discover replaces the handshake, and every request carries its own protocol version and capabilities in _meta. Notifications are opt-in now, and sampling and logging are both deprecated.

Guide
Intermediate4 min
#protocol

Connect to a Remote Server

Listed inConnect to a Remote ServerAgents and toolson

Transport, authentication and trust all change at once. A remote server can alter its tool descriptions without a deploy on your side, which means it can change your prompt, and a shared service credential leaves it unable to tell your users apart.

Guide
Intermediate4 min
#implementation
#security

Building an MCP Client

Listed inBuilding an MCP ClientAgents and toolson

The protocol is handled by every SDK, so the real work is translation: MCP tool definitions into your provider's format, namespacing two servers that both offer `search`, and deciding which tools the model sees at all.

Guide
Advanced4 min
#implementation

What is a Context Layer?

Listed inWhat is a Context Layer?Agents and toolson

One place in the codebase that decides what goes into every prompt. The limit that binds is the model's attention rather than the size of the context window, so the layer curates what it sends instead of filling the space available.

Guide
Advanced4 min
#context-engineering
#architecture

Atlan

Listed inAtlanAgents and toolson

The context an assistant needs for warehouse data is metadata, not rows. Certification is what makes it trustworthy enough to act on.

Guide
Intermediate4 min
#context-engineering
#data

Context Isolation

Listed inContext IsolationAgents and toolson

Running a sub-task in its own context window keeps its exploration out of the main conversation, which can return a short result from a long search. The same separation is a normative rule in the Model Context Protocol, and it costs the caller information the sub-task never reports.

Guide
Advanced6 min
#techniques
#security

State & Historical Context

Listed inState & Historical ContextAgents and toolson

Twenty turns into a booking, six settled facts are what the model needs and the transcript is an inefficient way to carry them. Trimming a turn per request can also cost more than sending everything, because it breaks the cache.

Guide
Intermediate4 min
#memory

Context Sources

Listed inContext SourcesAgents and toolson

A request that looks like one prompt is usually four or five fetches, each with its own latency, freshness and trust level. Giving every source a token budget at assembly makes the total knowable before the request goes out.

Guide
Intermediate4 min
#architecture

DataHub

Listed inDataHubAgents and toolson

Once a retrieval corpus is real, three questions arrive that nothing in an AI stack answers: what is in it, where each piece came from, and whether you may use it. Lineage answers which parts of your index a broken upstream source affected.

Guide
Advanced4 min
#governance

Memory Systems

Listed inMemory SystemsAgents and toolson

A memory directory an agent fills without discrimination is worse than none, because a wrong note gets cited on every later task. Facts that persist and progress on unfinished work age differently, so they belong in separate files.

Guide
Advanced4 min
#memory

Context Security

Listed inContext SecurityAgents and toolson

Prompt injection is text arriving that should not steer the model; this is data sitting in the window that should not be there at all. The tenant filter belongs inside the retrieval query, and the payload you assembled now exists in four other systems.

Guide
Advanced4 min
#security

Context Failure Modes

Listed inContext Failure ModesAgents and toolson

Poisoning, distraction, confusion and clash are four measured ways a window degrades, and shortening the context helps only two of them. One study found a 39% drop from delivering the same information across several turns instead of at once.

Guide
Advanced4 min
#debugging

Multi-Agent Context Sharing

Listed inMulti-Agent Context SharingAgents and toolson

Separate context windows are the reason to run several agents, since each one condenses what it read before reporting back. Multi-agent systems use about 15 times the tokens of a chat, which is the figure any architecture has to justify.

Guide
Advanced4 min
#memory
#agents

Context Compaction

Listed inContext CompactionAgents and toolson

Compaction replaces older turns with a summary Claude writes on the server, and the swap that follows has two mistakes that raise no error. Images and documents inside the summarized range do not survive it.

Guide
Advanced5 min
#techniques

External Memory

Listed inExternal MemoryAgents and toolson

Claude's memory tool runs client-side, so your application executes every file operation and /memories is a prefix you map onto real storage. That makes path traversal your bug to prevent, and the documented example handlers skip the validation on purpose.

Guide
Intermediate5 min
#memory