AI ERP with agents inside the systems you run
AI phone and voice agents for real calls
LLM.coPrivate, self-hosted LLM deployments
Legal AI infrastructure for firms
AI RFP discovery and response drafting
Automatic.coBusiness process automation
CyberAttack.aiThreat detection and defense
Secure AI virtual data roomsdeer-flow
DeerFlow is an open-source agentic framework from ByteDance that orchestrates AI agents with sandboxes, memory, and extensible skills to handle long-running research and coding tasks. It supports multiple LLM providers and integrates web search, file operations, and sub-agent delegation for complex workflows.
Key facts
Objective fields from the source. Values we can't verify are shown as “Unknown” rather than guessed.
| Field | Value |
|---|---|
| Repository | bytedance/deer-flow |
| Owner | bytedance |
| Primary language | Python |
| License | MIT — OSI-approved |
| Stars | 76.4k |
| Forks | 10.4k |
| Open issues | 930 |
| Latest release | v2.0.0 (2026-06-25) |
| Last updated | 2026-07-07 |
| Source | https://github.com/bytedance/deer-flow |
What deer-flow is
A Python/Node.js agent harness (v2.0 ground-up rewrite) that manages multi-step tasks via LangChain/LangGraph integrations, isolated execution sandboxes, persistent memory systems, and pluggable skill modules. Supports Claude Code, DeepSeek, Kimi, and OpenAI models with configurable execution policies and tracing backends (LangSmith, Langfuse).
Get the deer-flow source
Clone the repository and explore it locally.
git clone https://github.com/bytedance/deer-flow.gitcd deer-flow# follow the project's README for install & configurationNeed it deployed, integrated, or customized instead? DEV.co ships production installs.
Best use cases
Implementation considerations
- Interactive setup wizard (`make setup`) generates config.yaml and .env; Docker recommended for deployment. Local dev requires Python 3.12+ and Node.js 22+.
- LLM provider selection is mandatory; wizard guides choice but no default fallback. API keys and cost management are operator responsibility.
- Sandbox mode, bash access, and file-write tools are configurable execution policies; security posture depends on deployment context and chosen policies.
- Memory and sub-agent coordination rely on internal state management; no documented distributed-tracing or multi-instance consistency guarantees.
- Skills are extensible but framework expects developer to implement, test, and validate custom tools; no official marketplace or pre-built library documented.
When to avoid it — and what to weigh
- Strict Real-Time Latency Requirements — Long-horizon tasks and context compaction add latency; unsuitable for sub-100ms response SLAs or synchronous API gateways requiring immediate replies.
- Highly Regulated Security Environments — README explicitly warns improper deployment introduces security risks; sandboxing and memory isolation require careful configuration. Not suitable without thorough security review and hardening.
- Production without Vendor Lock-In Tolerance — Heavy reliance on ByteDance-recommended models (Doubao, Kimi) and proprietary integrations (BytePlus InfoQuest, Volcengine). OpenAI/OSS alternatives work but are not primary targets.
- Limited DevOps/Observability Budget — Requires Docker, tracing backend setup, LLM provider accounts, and configuration management. Minimal prerequisites but non-trivial operational overhead for small teams.
License & commercial use
MIT License (permissive; allows commercial use, modification, distribution, and private use with attribution requirement). No proprietary restrictions on code; derivative works may be distributed under MIT or compatible licenses.
MIT License permits commercial deployment without royalties or vendor approval. However, integration with BytePlus/Volcengine services (InfoQuest, Doubao models, Coding Plan incentives) may introduce commercial terms. Requires review of service ToS for any bundled or recommended proprietary tools. Open-source code itself is commercially viable.
DEV.co evaluation signals
Editorial assessment — not user reviews. Directional, with an explicit confidence level.
| Signal | Assessment |
|---|---|
| Maintenance | Active |
| Documentation | Adequate |
| License clarity | Clear |
| Deployment complexity | Moderate |
| DEV.co fit | Good |
| Assessment confidence | High |
README includes explicit ⚠️ security notice: 'Improper Deployment May Introduce Security Risks' with recommendation for security review. Sandbox mode, bash access, and file-write tools are configurable; default posture is not stated. No details on: isolation guarantees, code injection prevention, credential handling, audit logging, or compliance frameworks. Evaluate threat model, LLM provider trust, and sandbox implementation before production use. ByteDance sponsorship does not imply third-party audit.
Alternatives to consider
LangGraph / LangChain Agent Framework
Lower-level orchestration; requires more custom wiring for memory/sandboxes but avoids vendor integration and gives fine-grained control.
AutoGen (Microsoft)
Multi-agent conversation framework with similar long-horizon task support; more mature, broader LLM provider support, but less focus on sandboxing and research workflows.
Crew AI
Role-based agent framework with task composition; simpler mental model for sequential workflows but lacks deep-research, sandbox, and memory specialization.
Build on deer-flow with DEV.co software developers
Start with DeerFlow's interactive setup wizard (make setup) and deploy your first agent in Docker. Review the security notice and configuration examples, then connect your LLM provider and optional web search.
Talk to DEV.coRelated open-source tools
Surfaced by semantic similarity across the DEV.co open-source index.
Related on DEV.co
Explore the category and the services that help you build with it.
deer-flow FAQ
Can I use DeerFlow with my own LLM (e.g., local Ollama)?
What happens if my LLM provider goes down or API limits are hit?
Is DeerFlow suitable for production chatbots with real-time user interaction?
What is the cost to run DeerFlow?
Software developers & web developers for hire
deer-flow rarely ships on its own. As a software development company, DEV.co handles the surrounding work — data modeling, service integration, deployment, and the ai frameworks glue code that production actually requires.
Ready to automate research and coding workflows?
Start with DeerFlow's interactive setup wizard (make setup) and deploy your first agent in Docker. Review the security notice and configuration examples, then connect your LLM provider and optional web search.