Rating certificate · AW/26-09/42926 Sept 2026
80of 100
The Register / Multi-agent frameworks / OpenAI Agents SDK
Register entry · Multi-agent frameworks · updated 26 Sept 2026
OpenAI Agents SDK
The OpenAI Agents SDK is an MIT-licensed library (Python package openai-agents, JavaScript package @openai/agents) that succeeded the experimental Swarm project in March 2025. Its core abstractions are agents, tools, handoffs between agents, guardrails and sessions, with built-in tracing to the OpenAI dashboard. An April 2026 update added sandboxed workspaces and durable execution. It defaults to OpenAI models but can call other providers.
What reviewers and users praise
- Developers repeatedly describe it as simpler and lower-effort than LangGraph or heavier frameworks (HN, r/AI_Agents)
- Works with non-OpenAI providers, including local models (HN)
- Frequent releases: 17 Python releases in the 90 days to 2026-09-26
What they criticise
- Users report calling subagents is harder than in Claude's SDK (r/OpenAI)
- Infrastructure, observability and scaling are left to the developer (HN)
- One HN user found its APIs messy, e.g. inconsistent use of its own enums
- Tracing sends run data to OpenAI by default unless disabled; unavailable under Zero Data Retention
Experts vs the crowdneeds both scores
Experts—
Crowd61
| Price | Free |
|---|---|
| Use it via | API |
| Runs on | macos, linux, windows |
| Licence | MIT |
| Updated | Evidence collected 26 Sept 2026 |
How the rating was worked out
Weights for Multi-agent frameworks: adoption 45%, experts 30%, crowd 25%. Pillars without enough evidence are left out and the others re-weighted. The method.
| Adoption & momentumweight 45% | 90 | GitHub stars 30k → 75 · npm weekly downloads 1.7M → 87 · PyPI monthly downloads 12M → 94 · 17 releases in 90 days → 100reach × 0.7 + momentum × 0.3 |
|---|---|---|
| Expertsindependent reviews · weight 30% | — | No independent reviews found |
| Crowdcommunity sample · weight 25% | 61 | 12 dated posts from hackernews, reddit: 6 positive · 4 mixed · 2 negative (positive + ½ mixed) ÷ n, averaged toward 50 for small samples |
| Rating | 80 | Provisional: low confidence (2 of 3 pillars, 12 community posts). |
Trust & safety
Seven dimensions graded A–D from documented facts. Overall: A.
C
Permission model
Tools run automatically by default. Human-in-the-loop approval is per tool via needs_approval; docs: 'For local ShellTool and ApplyPatchTool, approval is opt-in: needs_approval defaults to False.' Sandboxed workspaces (April 2026) are opt-in. source
n/e
Data access scope
Access is whatever tools the developer registers; no general scoping model documented beyond per-tool definitions and sandbox workspaces. Not graded. source
A
Data storage
Library runs in the developer's own process; no required cloud storage. Caveat: 'Tracing is enabled by default' and exports traces to OpenAI's backend; it can be disabled (OPENAI_AGENTS_DISABLE_TRACING=1). source
A
Data retention & training
Follows the OpenAI API policy when used with OpenAI models: API data not used for training unless opted in; abuse-monitoring logs retained up to 30 days; Zero Data Retention available to approved customers (tracing unavailable under ZDR). source
A
Incident history (24 months)
No security advisories found for openai-agents (PyPI) or @openai/agents (npm) in the GitHub Advisory Database or the repository's security advisories as of 2026-09-26. source
A
Compliance
Graded on the default backend (OpenAI API platform): OpenAI Trust Portal lists a SOC 2 Type 2 report (period July 2025 – June 2026) and ISO/IEC 27001:2022 certification. The SDK itself has no separate attestation. source
A
Transparency
MIT open source with public GitHub releases. source
The experts
0 named independent reviews found; dated reviews from the last 12 months are scored.
- None found.
The crowd
12 coded posts from hackernews, reddit.
6 positive4 mixed2 negative
- positive
I've had great success with the OpenAI agents SDK [0]. This way I've been able to build the sandbox + slack + knowledge-bank integrations independently
news.ycombinator.com comment · 11 Sept 2026 · news.ycombinator.com - mixed
I've found the app-server to be the most flexible, compared to the raw Responses API or Agents SDK.
news.ycombinator.com comment · 10 Sept 2026 · news.ycombinator.com - positive
I am using Agents SDK by OpenAI. It's interoperable with every other inference provider, even local models running on LMStudio.
news.ycombinator.com comment · 29 May 2026 · news.ycombinator.com - mixed
largely happy with the abstractions - handoffs/sub-agents, tools, guardrails, structured output, etc. Building the infra and observability, and having it scale reliably, was a bigger pain for me.
news.ycombinator.com comment · 9 Apr 2026 · news.ycombinator.com - positive
Would highly advise keeping it minimal, just use OpenAI Agents SDK. Most of these frameworks are overengineered af
news.ycombinator.com comment · 5 Apr 2026 · news.ycombinator.com - negative
Agents is messy enough, like making inconsistent use of its own enums etc
news.ycombinator.com comment · 29 Mar 2026 · news.ycombinator.com - positive
OpenAI's Agents SDK or LangGraph are probably the most practical choices right now.
r/AI_Agents · 28 Jul 2026 · reddit.com - positive
OpenAI's Agents SDK feels much simpler when your use case mostly revolves around tool calling and memory.
r/AI_Agents · 27 Jul 2026 · reddit.com
Pricing
As published, checked 26 Sept 2026.
| Plan | Price | Notes |
|---|---|---|
| SDK | Free | MIT-licensed library; model and hosted-tool usage billed at OpenAI API token rates (or the chosen provider's rates). |
Recent changes
Sources
Every figure above traces to one of these, observed up to 26 Sept 2026.
- OpenAI: The next evolution of the Agents SDK (Apr 15, 2026) — fetch returned 403; date and summary from search snippet
- The New Stack (search snippet): Agents SDK adds sandboxed workspaces, durable execution, and cloud storage support
- JS edition repo: 3,859 stars (MIT)
- OpenAI Trust Portal (scraped): SOC 2 Type 2 and ISO/IEC 27001:2022