A Survey on Agent Workflow -- Status and Future
On the map: LLM agents and tool use → Software engineering coding agents
Abstract (arXiv)
In the age of large language models (LLMs), autonomous agents have emerged as a powerful paradigm for achieving general intelligence. These agents dynamically leverage tools, memory, and reasoning capabilities to accomplish user-defined goals. As agent systems grow in complexity, agent workflows-structured orchestration frameworks-have become central to enabling scalable, controllable, and secure AI behaviors. This survey provides a comprehensive review of agent workflow systems, spanning academic frameworks and industrial implementations. We classify existing systems along two key dimensions: functional capabilities (e.g., planning, multi-agent collaboration, external API integration) and architectural features (e.g., agent roles, orchestration flows, specification languages). By comparing over 20 representative systems, we highlight common patterns, potential technical challenges, and emerging trends. We further address concerns related to workflow optimization strategies and security. Finally, we outline open problems such as standardization and multimodal integration, offering insights for future research at the intersection of agent design, workflow infrastructure, and safe automation.
Key facts. Cited by 14 papers in the map (data through 14 Oct 2026). Placed in Software engineering coding agents, one of 16 directions in LLM agents and tool use. Builds on 43 of its 81 references that are in the map. First posted on arXiv 2 Aug 2025.
Builds on
43 of 81 references.
Closest ancestors · 5
Same direction, newest first
- 2025Why Do Multi-Agent LLM Systems Fail?17 Mar
- 2024WorkflowLLM: Enhancing Workflow Orchestration Capability of Large Language Models8 Nov
- 2024AutoFlow: Automated Workflow Generation for Large Language Model Agents1 Jul
- 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation16 Aug
- 2023ChatDev: Communicative Agents for Software Development16 Jul
Other references · 38
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2023Tree of Thoughts: Deliberate Problem Solving with Large Language Modelscited by 3,211
- 2022Do As I Can, Not As I Say: Grounding Language in Robotic Affordancescited by 2,348
- 2023MetaGPT: Meta Programming for A Multi-Agent Collaborative Frameworkcited by 1,808
- 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,439
- 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,395
- 2022Inner Monologue: Embodied Reasoning through Planning with Language Modelscited by 1,081
- 2023Large Language Models as Optimizerscited by 864
- 2023Reasoning with Language Model is Planning with World Modelcited by 861
- 2023DSPy: Compiling Declarative Language Model Calls into Self-Improving Pipelinescited by 832
- 2023AgentVerse: Facilitating Multi-Agent Collaboration and Exploring Emergent Behaviorscited by 598
- 2025Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directionscited by 265
26 more
- 2021ERNIE 3.0: Large-scale Knowledge Enhanced Pre-training for Language Understanding and Generationcited by 260
- 2025Agentic Retrieval-Augmented Generation: A Survey on Agentic RAGcited by 249
- 2024Magentic-One: A Generalist Multi-Agent System for Solving Complex Taskscited by 232
- 2024Agent Hospital: A Simulacrum of Hospital with Evolvable Medical Agentscited by 218
- 2019Multi-Agent Pathfinding: Definitions, Variants, and Benchmarkscited by 199
- 2023ReWOO: Decoupling Reasoning from Observations for Efficient Augmented Language Modelscited by 184
- 2024The Landscape of Emerging AI Agent Architectures for Reasoning, Planning, and Tool Calling: A Surveycited by 168
- 2024The Emerged Security and Privacy of LLM Agent: A Survey with Case Studiescited by 131
- 2024AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathwayscited by 127
- 2023Chatlaw: A Multi-Agent Legal Assistant based on a Role-Aligned Mixture-of-Experts Architecturecited by 122
- 2025Unveiling Privacy Risks in LLM Agent Memorycited by 101
- 2025TxAgent: An AI Agent for Therapeutic Reasoning Across a Universe of Toolscited by 59
- 2023Urban Generative Intelligence (UGI): A Foundational Platform for Agents in Embodied City Environmentcited by 37
- 2019EvalAI: Towards Better Evaluation Systems for AI Agentscited by 34
- 2024OmAgent: A Multi-modal Agent Framework for Complex Video Understanding with Task Divide-and-Conquercited by 34
- 2025API Agents vs. GUI Agents: Divergence and Convergencecited by 29
- 2024Security of AI Agentscited by 26
- 2025Multi-Agent Simulator Drives Language Models for Legal Intensive Interactioncited by 22
- 2019Optimization for Reinforcement Learning: From Single Agent to Cooperative Agentscited by 20
- 2024Enhancing Investment Analysis: Optimizing AI-Agent Collaboration in Financial Researchcited by 14
- 2024AI Agent for Education: von Neumann Multi-Agent System Frameworkcited by 12
- 2024CREW: Facilitating Human-AI Teaming Researchcited by 11
- 2024LiPUP-MA: A Residential Experience-centric Multi-Agent Framework for Living-in-the-loop Participatory Urban Planningcited by 8
- 2025Cognify: Supercharging Gen-AI Workflows With Hierarchical Autotuningcited by 7
- 2023AI Agent as Urban Planner: Steering Stakeholder Dynamics in Urban Planning via Consensus-based Multi-Agent Reinforcement Learningcited by 4
- 2022Analysis Of The Anytime MAPF Solvers Based On The Combination Of Conflict-Based Search (CBS) and Focal Search (FS)cited by 2
Built on by
Citing papers per year: 2025: 3; 2026: 11.
14 papers.
Sort:
By area:
- 2025MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocolscited by 51
- 2026From Static Templates to Dynamic Runtime Graphs: A Survey of Workflow Optimization for LLM Agentscited by 24
- 2025Failure-Driven Workflow Refinementcited by 20
- 2026Efficient LLM Serving for Agentic Workflows: A Data Systems Perspectivecited by 11
- 2025BetaWeb: Towards a Blockchain-enabled Trustworthy Agentic Webcited by 7
- 2026LLMs Can't Play Hangman: On the Necessity of a Private Working Memory for Language Agentscited by 4
- 2026The Y-Combinator for LLMs: Solving Long-Context Rot with λ-Calculuscited by 3
- 2026Graph Engineering in the Era of LLM Agents: From Individual Intelligence to System Intelligencecited by 3
- 2026MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Securitycited by 2
- 2026Coupled Hierarchical Search over Topology and Execution for Agentic Workflow Synthesiscited by 1
- 2026Agentic Evaluation of Copyright Law Compliancecited by 1
- 2026Agentic AI-based Coverage Closure for Formal Verificationcited by 0
- 2026A Scalable Trust Discovery Architecture for the Internet of Agents17 Sep 2026
- 2026Graph Engineering in the Era of LLM Agents: From Individual Intelligence to System Intelligence21 Aug 2026
- 2026Agentic Evaluation of Copyright Law Compliance23 Jul 2026
- 2026Coupled Hierarchical Search over Topology and Execution for Agentic Workflow Synthesis20 May 2026
- 2026MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security8 Apr 2026
- 2026Single-agent vs. Multi-agents for Automated Video Analysis of On-Screen Collaborative Learning Behaviors4 Apr 2026
- 2026From Static Templates to Dynamic Runtime Graphs: A Survey of Workflow Optimization for LLM Agents23 Mar 2026
- 2026The Y-Combinator for LLMs: Solving Long-Context Rot with λ-Calculus20 Mar 2026
- 2026Efficient LLM Serving for Agentic Workflows: A Data Systems Perspective17 Mar 2026
- 2026Agentic AI-based Coverage Closure for Formal Verification3 Mar 2026
- 2026LLMs Can't Play Hangman: On the Necessity of a Private Working Memory for Language Agents11 Jan 2026
- 2025Failure-Driven Workflow Refinement11 Oct 2025
- 2025MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocolscited by 51
- 2026From Static Templates to Dynamic Runtime Graphs: A Survey of Workflow Optimization for LLM Agentscited by 24
- 2026Efficient LLM Serving for Agentic Workflows: A Data Systems Perspectivecited by 11
- 2025BetaWeb: Towards a Blockchain-enabled Trustworthy Agentic Webcited by 7
- 2026LLMs Can't Play Hangman: On the Necessity of a Private Working Memory for Language Agentscited by 4
- 2026Graph Engineering in the Era of LLM Agents: From Individual Intelligence to System Intelligencecited by 3
- 2026MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Securitycited by 2
- 2026Coupled Hierarchical Search over Topology and Execution for Agentic Workflow Synthesiscited by 1
- 2026Agentic Evaluation of Copyright Law Compliancecited by 1
- 2026Agentic AI-based Coverage Closure for Formal Verificationcited by 0
- 2026Single-agent vs. Multi-agents for Automated Video Analysis of On-Screen Collaborative Learning Behaviorscited by 0
- 2026Graph Engineering in the Era of LLM Agents: From Individual Intelligence to System Intelligence21 Aug 2026
- 2026Agentic Evaluation of Copyright Law Compliance23 Jul 2026
- 2026Coupled Hierarchical Search over Topology and Execution for Agentic Workflow Synthesis20 May 2026
- 2026MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security8 Apr 2026
- 2026Single-agent vs. Multi-agents for Automated Video Analysis of On-Screen Collaborative Learning Behaviors4 Apr 2026
- 2026From Static Templates to Dynamic Runtime Graphs: A Survey of Workflow Optimization for LLM Agents23 Mar 2026
- 2026Efficient LLM Serving for Agentic Workflows: A Data Systems Perspective17 Mar 2026
- 2026Agentic AI-based Coverage Closure for Formal Verification3 Mar 2026
- 2026LLMs Can't Play Hangman: On the Necessity of a Private Working Memory for Language Agents11 Jan 2026
- 2025BetaWeb: Towards a Blockchain-enabled Trustworthy Agentic Web19 Aug 2025
- 2025MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocols17 Aug 2025
- 2025Failure-Driven Workflow Refinementcited by 20
- 2026The Y-Combinator for LLMs: Solving Long-Context Rot with λ-Calculuscited by 3
- 2026A Scalable Trust Discovery Architecture for the Internet of Agentscited by 0
- 2026A Scalable Trust Discovery Architecture for the Internet of Agents17 Sep 2026
- 2026The Y-Combinator for LLMs: Solving Long-Context Rot with λ-Calculus20 Mar 2026
- 2025Failure-Driven Workflow Refinement11 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2025A Practical Guide for Designing, Developing, and Deploying Production-Grade Agentic AI Workflows
- 2025Orchestrating Human-AI Teams: The Manager Agent as a Unifying Research Challenge
- 2026AgentFactory: Towards Automated Agentic System Design and Optimization
- 2025Flow: Modularized Agentic Workflow Automation
- 2026Beyond Rule-Based Workflows: An Information-Flow-Orchestrated Multi-Agents Paradigm via Agent-to-Agent Communication from CORAL
- 2025Self-Organizing Agent Network for LLM-based Workflow Automation
- 2026Rethinking the Value of Multi-Agent Workflow: A Strong Single Agent Baseline
- 2025Difficulty-Aware Agentic Orchestration for Query-Specific Multi-Agent Workflows