Questions

14 of 24

1What is a Tool in LangChain and how does it differ from a plain function or API call?

2What is the difference between the tool() helper, DynamicTool, and StructuredTool class?

3How does an LLM decide which tool to call — what role does the tool description play?

4What is the role of Zod schema in tool definitions and how does it map to OpenAI's function calling spec?

5What is a ToolNode in LangGraph and how does it differ from calling a tool manually inside a graph node?

6How do you wrap a REST API call with auth headers inside a Tool in TypeScript?

7How do you handle async errors and retries inside a Tool without crashing the agent loop?

8How do you pass runtime context (userId, authToken, DB connection) into a Tool using RunnableConfig?

9How do you build a Toolkit (grouped set of related tools) using BaseToolkit?

10How do you validate and sanitize tool output before it is passed back to the LLM?

11How do you stream tool call results back to the client in real time?

12How do you implement tool-level authorization — allowing certain tools only for certain users?

13How do you build stateful tools that read/write to a database across multiple agent turns?

14How do you prevent tool abuse or infinite loops where an agent keeps calling the same tool repeatedly?

15How do you implement parallel tool calling — when the LLM decides to call multiple tools simultaneously?

16How do you create a human-in-the-loop tool that pauses the agent and waits for user approval before executing?

17How do you unit test and mock tools in isolation without invoking the LLM?

18How do you implement tool call caching to avoid redundant API calls for identical inputs?

19How do you design a multi-agent system where one agent's tool is actually another agent (agent-as-tool pattern)?

20How does LangGraph's ToolNode handle tool call errors and surface them back into the message state?

21What is the difference between tool_choice: "auto", "required", and "none" when binding tools to an LLM?

22How do you implement dynamic tool loading — where the set of available tools changes based on user role or session state?

23How do you trace and observe tool call latency in production using LangSmith?

24What are the token cost implications of registering too many tools and how do you mitigate it?

langchain

Context Engineering

Human in the loop

14 / 24

How do you prevent tool abuse or infinite loops where an agent keeps calling the same tool repeatedly?

Prevent tool abuse and infinite loops using multiple strategies: set recursion limits on your graph, implement loop detection middleware that tracks duplicate tool calls, enforce a maximum iteration budget, and use circuit breakers to halt execution after a threshold of repeated actions.

Preventing infinite loops and tool abuse requires a multi-layered defense. The most straightforward approach is setting a recursion_limit when compiling your LangGraph, which caps the total number of steps the agent can take[citation:1]. For more intelligent loop detection, you can implement custom middleware that tracks tool call signatures (name + arguments) and raises an error when the same call is repeated too many times[citation:9]. The langchain community has also discussed RecursionLimitFallbackMiddleware to gracefully terminate with a coherent response when limits are exceeded rather than abruptly stopping[citation:2].

Preventing Tool Abuse with Limits and Loop Detection