IntegrAuth Academy
Identity, security and practical AI — free, from zero. Byte-sized lessons, real diagrams, hands-on labs, zero fluff. Two programs, each with its own exam and certificate.
English is hard? Your browser can translate this page into Tamil, Telugu, Kannada, Malayalam or Hindi. Tech words stay in English so you learn the real names.
How?
- Chrome on phone: ⋮ menu → Translate
- Chrome on computer: right-click → Translate to …
- Edge: the translate icon in the address bar
Build an agent
Priya's team wants Kai to fix order problems for customers like Maya. Kai finds the order, refunds it if the rules allow, and changes an address. Your goal: build the parts around the model.
🧪 Interactive lab — enable JavaScript to play with this one.
- The model is the small part. The code around it is the harness.
- Give the agent few tools, with clear names, short results and helpful errors.
- Set limits before the first real run. Check “done” in the real system.
- Your code, not the prompt, decides which actions wait for a person.
Tools the model can use
An agent is a model that calls tools in a loop (Agents, subagents and skills). A tool's description is the only manual the model gets. So keep tools few and clear. Merge two tools that do the same job.
Take the customer from the sign-in, never from the model. Return a few rows, not thousands. Errors should say what to fix next.
Limits and a real finish
Set limits on steps, money and time. Watch for a stuck agent. The same failing call 3 times means stop and report. Name each way of stopping, and check it in code. Then "out of steps" never reaches a customer as if it were an answer.
Money needs a second signature, like a bank form that needs two. Your code pauses every refund until a person says yes.
Also check "done" outside the agent. Does the refund really exist in the payments system?
Follow Kai through a day. Pick the part that catches each problem.
🧪 Interactive lab — enable JavaScript to play with this one.
Go deeper: frameworks
You can write the loop yourself with a provider's SDK. Send the chat, run the tool the model asks for, add the result, and repeat. Anthropic's guide suggests you start this way. A framework can hide the real prompts and replies, so bugs are harder to find.
An agent framework helps when you need what it already solved. Examples are retries, saved state, human approval, tracing and hand-offs between agents. As of October 2026, options include the Claude Agent SDK, the OpenAI Agents SDK and LangGraph. Others are Google's Agent Development Kit, Microsoft Agent Framework, CrewAI, the Vercel AI SDK and Pydantic AI. They are in no order, and they change fast.
Choose by your team's language and the model providers you need. Also think about how much control you want. Whatever you pick, learn what it sends to the model.
Go deeper: tool design
- Few tools. More tools do not always help. OpenAI's docs loosely suggest fewer than 20 at a time. Tools that overlap cause more mistakes than many tools. Join steps the model always does together into one tool.
- Clear names. Say what the tool does and when not to use it. Add a system name to similar tools, like
orders_searchandkb_search. - Inputs that are hard to misuse. Name it
user_id, notuser. Give a fixed list of choices, not free text. - Short results. Thousands of rows fill the context window and the bill. Filter first.
- Useful errors. "PIN code must be 6 digits. You sent 56004." gets a fix. "Error 422" gets the same failing call again.
Go deeper: state, memory and approvals
A run can stop halfway. The server restarts, or the run waits two hours for an approval. It should go on from a save point. It must not start again and refund twice. This is durable execution.
Keep long-term memory per signed-in customer. Then nothing about Sam shows up in Maya's chat. Treat saved memory as untrusted. A note saved from an email can carry orders into later runs (prompt injection).
Pause for a person before anything you can't undo, anything that spends money, or anything that sends data out. Show the exact action, like a ₹1,499 refund to Maya's card for order 1042. Ask the right person (human-in-the-loop approvals). Too much power for the task is excessive agency.
Go deeper: computer use
Some old systems have no API. Computer use lets a model work a screen. Your code sends a screenshot. The model replies with an action, like a click. Your code does it and sends a new screenshot. As of October 2026, Anthropic, OpenAI and Google all offer this.
It is slow, because every step sends an image. It breaks easily, for example on a pop-up or a redesign. It is risky, because it acts with the browser's logins. So run it in a closed-off box with few logins and a list of allowed sites. Cap steps and cost. Ask a person before it buys or sends anything. If an API exists, use the API.
An agent acts with its own logins. If Kai's tool uses an admin login, one fooled step can read every customer. Give each tool the least privilege that works. Treat the agent as a non-human identity.
Build a two-tool agent for free with Ollama and a framework's quickstart. Then delete one tool's description. Watch how the agent's choices change.