LangChain Managed Deep Agents gain browser use with human handoff
Source
docs.langchain.com
Author
LangChain
Date
Why it matters
Managed deep agents can now drive a browser on sites with no API, with thread or user scoped sessions and a human handoff for login, CAPTCHA and 2FA. Scope choice determines whether cookies and logins are shared across conversations.
Key takeaways · AI-distilled
Thread scope, the default, gives each conversation its own browser with no cookies or logins from other threads; user scope gives each signed-in person one browser that shares logins across their threads.
LangChain warns that user scope shares login state rather than isolating accounts: logging out or switching accounts in one thread can affect that person's other threads, so purchases and bookings need coordinating across conversations.
When a site needs login, CAPTCHA or two-factor input, the AI agentAn AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.Full definition → calls browser_handoff and the person signs in directly in the browser rather than in chat; the agent's browser tools cannot act until control is handed back.
Handoff links expire after 15 minutes and anyone holding a valid link can control the browser, so LangChain says to keep them private and never put passwords in prompts, chat or agent-written files.
Terms in this piece · Glossary
AI agent — An AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.
