Skip to content

About

[Survey] Agent and Tool Search: Foundations, Techniques, and Open Challenges

Resources

Stars

15 stars

Watchers

0 watching

Forks

Latest commit

Β 

History

5 Commits

Folders and files

NameName
Last commit message
Last commit date
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 

Repository files navigation

Awesome Agent Search

A curated reading list accompanying Agent and Tool Search: Foundations, Techniques, and Open Challenges

Awesome arXiv Contribution Welcome GitHub star chart License Visitors

Oryx Video-ChatGPT

πŸ“š Citation

If you find this survey useful in your research and applications, please cite and ⭐ star to watch the repo for updates:

@article{wu2026agentsearch,
  title={Agent and Tool Search: Foundations, Techniques, and Open Challenges},
  author={Wu, Bin and Rahmani, Hossein A and Kim, To Eun and Mammadli, Arastun and 
          Qiao, Shuofei and Fu, Xiao and Ramineni, Varsha and Zhang, Xiaoyu and Meng, 
          Chuan and Drayson, George and Chowdhury, Anu and Ramos, Jerome and Maiga, 
          Abdine and Yilmaz, Emine},
  year={2026},
  publisher={Preprints}
}

Tip

πŸ‘‹ This repository tracks the fast-moving literature on agent and tool search: how systems discover, represent, retrieve, rank, and evaluate agents and tools for a given task. If you know a paper we're missing, or work in this space yourself, PRs are very welcome (see Contributing).

Evolution of agent search research directions, 2023-2026

Evolution of research directions related to agent search from 2023 to 2026. Existing work has progressed from task understanding and planning capabilities, through representation and search mechanisms for tools and agents, toward deployment-oriented concerns such as evaluation, safety, robustness, and domain-specific applications. Together, these developments form the broader research landscape that underpins agent search systems.

Motivating Agent Search

Motivating agent search

Conceptual Framework of Agent Search

Conceptual framework of agent search


πŸ“‹ Table of Contents

Section Subsections
1. Task Understanding 1.1 Task Decomposition Β· 1.2 Planning Augmentation Β· 1.3 Proactive User Intent Clarification
2. Agent Discovery, Representation & Indexing 2.1 Units of Discovery Β· 2.2 Tool Representation Surfaces Β· 2.3 Indexing & Retrieval Backends Β· 2.4 Agent Representations Β· 2.5 Maintenance
3. Retrieval, Reranking & Selection of Agents 3.1 Agent/Tool Selection Β· 3.2 Iterative Tool Retrieval Β· 3.3 Agent and Tool Recommendation
4. Evaluation of Agent Search 4.1 Intrinsic Evaluation Β· 4.2 Extrinsic Evaluation
5. System-Level Dimensions 5.1 Safety Β· 5.2 Bias and Fairness Β· 5.3 Security Risks Β· 5.4 Personalization Β· 5.5 Transparency & Explainability
6. Applications 6.1 Healthcare Β· 6.2 Law Β· 6.3 Deep Research
Related Resources β€”
Contributing β€”

1. Task Understanding

Transforming user tasks into actionable requirement specifications for downstream agent search β€” task decomposition, planning augmentation, and proactive intent clarification.

1.1 Task Decomposition

Sequential/global, iterative, and structured (tree/graph) strategies for breaking a task into sub-tasks.

Paper Venue
Describe, Explain, Plan and Select: Interactive Planning with LLMs Enables Open-World Multi-Task Agents NeurIPS 2023
AdaPlanner: Adaptive Planning from Feedback with Language Models NeurIPS 2023
Reasoning with Language Model is Planning with World Model (RAP) EMNLP 2023
Leveraging Pre-trained Large Language Models to Construct and Utilize World Models for Model-based Task Planning NeurIPS 2023
ADAPT: As-Needed Decomposition and Planning with Language Models NAACL Findings 2024
TaskLAMA: Probing the Complex Task Understanding of Language Models AAAI 2024
TaskBench: Benchmarking Large Language Models for Task Automation NeurIPS 2024
Can Graph Learning Improve Planning in LLM-based Agents? NeurIPS 2024
What's the Plan? Evaluating and Developing Planning-Aware Techniques for Language Models arXiv 2024
Understanding the Planning of LLM Agents: A Survey arXiv 2024
Tree Search for Language Model Agents arXiv 2024
LATS: Language Agent Tree Search Unifies Reasoning, Acting, and Planning ICML 2024
WebDART: Dynamic Decomposition and Re-planning for Complex Web Tasks arXiv 2025
GAP: Graph-based Agent Planning with Parallel Tool Use and Reinforcement Learning arXiv 2025
ALAS: Transactional and Dynamic Multi-Agent LLM Planning arXiv 2025
SelfGoal: Your Language Agents Already Know How to Achieve High-Level Goals NAACL 2025
RECAP: Recursive Context-Aware Reasoning and Planning for LLM Agents arXiv 2025
THREAD: Thinking Deeper with Recursive Spawning NAACL 2025
ParaCook: On Time-Efficient Planning for Multi-Agent Systems arXiv 2025
FutureWeaver: Planning Test-Time Compute for Multi-Agent Systems with Modularized Collaboration arXiv 2025
Reason-Plan-ReAct: A Reasoner-Planner Supervising a ReAct Executor for Complex Enterprise Tasks AAAI Workshop
ReAcTree: Hierarchical LLM Agent Trees with Control Flow for Long-Horizon Task Planning arXiv 2025
TPS-Bench: Evaluating AI Agents' Tool Planning & Scheduling Abilities in Compounding Tasks arXiv 2025
CostBench: Evaluating Multi-Turn Cost-Optimal Planning and Adaptation in Dynamic Environments for LLM Tool-Use Agents arXiv 2025
Verification-Aware Planning for Multi-Agent Systems arXiv 2025
DeepPlanner: Scaling Planning Capability for Deep Research Agents via Advantage Shaping arXiv 2025
PlanGenLLMs: A Modern Survey of LLM Planning Capabilities ACL 2025
End-to-End Planning Framework with Agentic LLMs and PDDL arXiv 2025
ToolTree: Efficient LLM Agent Tool Planning via Dual-Feedback Monte Carlo Tree Search and Bidirectional Pruning ICLR 2026

1.2 Planning Augmentation

Agentic post-training (SFT/RL), multi-agent frameworks, and planning offloading to boost planning capability.

Paper Venue
LLM+P: Empowering Large Language Models with Optimal Planning Proficiency arXiv 2023
RestGPT: Connecting Large Language Models with Real-World RESTful APIs arXiv 2023
CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Society NeurIPS 2023
HuggingGPT: Solving AI Tasks with ChatGPT and its Friends in Hugging Face NeurIPS 2023
FireAct: Toward Language Agent Fine-Tuning arXiv 2023
BOLAA: Benchmarking and Orchestrating LLM-Augmented Autonomous Agents arXiv 2023
MetaGPT: Meta Programming for a Multi-Agent Collaborative Framework ICLR 2024 (Oral)
ChatDev: Communicative Agents for Software Development ACL 2024
Agent-FLAN: Designing Data and Methods of Effective Agent Tuning for Large Language Models ACL Findings 2024
AgentTuning: Enabling Generalized Agent Abilities for LLMs ACL Findings 2024
AutoAct: Automatic Agent Learning from Scratch for QA via Self-Planning ACL 2024
Agent Lumos: Unified and Modular Training for Open-Source Language Agents ACL 2024
Trial and Error: Exploration-Based Trajectory Optimization for LLM Agents (ETO) ACL 2024
KnowAgent: Knowledge-Augmented Planning for LLM-Based Agents NAACL 2024
Magentic-One: A Generalist Multi-Agent System for Solving Complex Tasks arXiv 2024
Internet of Agents: Weaving a Web of Heterogeneous Agents for Collaborative Intelligence ICLR 2025
OWL: Optimized Workforce Learning for General Multi-Agent Assistance in Real-World Task Automation NeurIPS 2025
ToolRL: Reward is All Tool Learning Needs NeurIPS 2025
EmbodiedBrain: Expanding Performance Boundaries of Task Planning for Embodied Intelligence arXiv 2025
AgentGen: Enhancing Planning Abilities for LLM-Based Agents via Environment and Task Generation KDD 2025
End-to-End Planning Framework with Agentic LLMs and PDDL arXiv 2025
AOrchestra: Automating Sub-Agent Creation for Agentic Orchestration ICML 2026
Holistic Agent Leaderboard: The Missing Infrastructure for AI Agent Evaluation arXiv 2025
Meta-Harness: End-to-End Optimization of Model Harnesses arXiv 2026
Agentic Harness Engineering: Observability-Driven Automatic Evolution of Coding-Agent Harnesses arXiv 2026
Retrospective Harness Optimization: Improving LLM Agents via Self-Preference over Trajectory Rollouts arXiv 2026
Adaptive Auto-Harness: Sustained Self-Improvement for Agentic System Deployment on Open-Ended Task Streams arXiv 2026
MemoHarness: Agent Harnesses That Learn from Experience arXiv 2026
Harness-Bench: Measuring Harness Effects across Models in Realistic Agent Workflows arXiv 2026
Self-Harness: Harnesses That Improve Themselves arXiv 2026

1.3 Proactive User Intent Clarification

Closed-ended attribute-based and open-ended language-based clarification; agent-vs-human user intent.

Paper Venue
Generating Clarifying Questions for Information Retrieval WWW 2020
Unified Conversational Recommendation Policy Learning via Graph-Based RL (UNICORN) SIGIR 2021
HutCRS: Hierarchical User-Interest Tracking for Conversational Recommender System EMNLP 2023
System Initiative Prediction for Multi-turn Conversational Information Seeking CIKM 2023
Tell Me More! Towards Implicit User Intention Understanding of Language Model Driven Agents (Mistral-Interact) ACL 2024
SAPIENT: Mastering Multi-Turn Conversational Recommendation with Strategic Planning and MCTS NAACL 2025
AskToAct: Enhancing LLMs Tool Use via Self-Correcting Clarification EMNLP 2025
Bridging the Gap: From Ad-hoc to Proactive Search in Conversations SIGIR 2025
Designing Intent Communication for Agent-Human Collaboration MUM 2025
A Comparative Analysis of Linguistic and Retrieval Diversity in LLM-Generated Search Queries CIKM 2025
Ambig-SWE: Interactive Agents to Overcome Underspecificity in Software Engineering ICLR 2026
Structured Uncertainty Guided Clarification for LLM Agents (SAGE-Agent) ACL 2026
MAC: A Multi-Agent Framework for Interactive User Clarification in Multi-Turn Conversations ACL 2026
Behind the Prompt: The Agent-User Problem in Information Retrieval arXiv 2026
A Picture of Agentic Search (ASQ) arXiv 2026

2. Agent Discovery, Representation and Indexing

How agents and tools are discovered as retrieval units, represented for matching, indexed for scalable search, and kept up to date as the candidate ecosystem evolves.

2.1 Units of Discovery

API-level tools, toolkits/packages, and agents as registries/catalogs β€” the retrieval unit itself.

Paper Venue
TaskMatrix.AI: Completing Tasks by Connecting Foundation Models with Millions of APIs arXiv 2023
Toolformer: Language Models Can Teach Themselves to Use Tools NeurIPS 2023
API-Bank: A Comprehensive Benchmark for Tool-Augmented LLMs EMNLP 2023
Gorilla: Large Language Model Connected with Massive APIs NeurIPS 2024
ToolLLM: Facilitating Large Language Models to Master 16000+ Real-World APIs ICLR 2024
MetaTool: Deciding Whether to Use Tools and Which to Use ICLR 2024
ToolRerank: Adaptive and Hierarchy-Aware Reranking for Tool Retrieval COLING 2024
Dynamic ReAct: Scalable Tool Selection for Large-Scale MCP Environments arXiv 2025
MCP-Zero: Active Tool Discovery for Autonomous LLM Agents arXiv 2025
Tool Learning with Foundation Models (survey) ACM Computing Surveys 2024

2.2 Tool Representation Surfaces

Names, natural-language docs, schemas, usage examples, and learned tool tokens/embeddings.

Paper Venue
ToolkenGPT: Augmenting Frozen Language Models with Massive Tools via Tool Embeddings NeurIPS 2023
Tool Documentation Enables Zero-Shot Tool-Usage with Large Language Models arXiv 2023
ToolGen: Unified Tool Retrieval and Calling via Generation ICLR 2025
Psychometric Tests for AI Agents and Their Moduli Space arXiv 2025
Classification-Based Concurrent API Calls and External Tool Categories Scientific Reports 2025
PLAY2PROMPT: Zero-Shot Tool Instruction Optimization for LLM Agents via Tool Play ACL 2025
From Exploration to Mastery: Enabling LLMs to Master Tools via Self-Driven Interactions ICLR 2025
EasyTool: Enhancing LLM-Based Agents with Concise Tool Instruction NAACL 2025
A Joint Optimization Framework for Enhancing Efficiency of Tool Utilization in LLM Agents ACL Findings 2025
DeepCodeSeek: Real-Time API Retrieval for Context-Aware Code Generation ECAI 2025
DeepAgent: A General Reasoning Agent with Scalable Toolsets WWW 2026

2.3 Indexing and Retrieval Backends

Sparse/dense indexes, rerankers, hierarchical catalogs, query rewriting, and generation-as-retrieval over tool libraries.

Paper Venue
Enhancing Tool Retrieval with Iterative Feedback from Large Language Models EMNLP 2023
ProTIP: Progressive Tool Retrieval Improves Planning arXiv 2023
ToolNet: Connecting Large Language Models with Massive Tools via Tool Graph arXiv 2024
Towards Completeness-Oriented Tool Retrieval for Large Language Models (COLT) CIKM 2024
Re-Invoke: Tool Invocation Rewriting for Zero-Shot Tool Retrieval EMNLP Findings 2024
Tulip Agent: Enabling LLM-Based Agents to Solve Tasks Using Large Tool Libraries arXiv 2024
AnyTool: Self-Reflective, Hierarchical Agents for Large-Scale API Calls ICML 2024
CRAFT: Customizing LLMs by Creating and Retrieving from Specialized Toolsets ICLR 2024
Efficient and Scalable Estimation of Tool Representations in Vector Space (ToolBank) arXiv 2024
Toolken+: Improving LLM Tool Usage with Reranking and a Reject Option EMNLP Findings 2024
Data-Efficient Massive Tool Retrieval: An RL Approach for Query-Tool Alignment (QTA) SIGIR-AP 2024
Planning and Editing What You Retrieve for Enhanced Tool Learning (PLUTO) NAACL Findings 2024
AVATAR: Optimizing LLM Agents for Tool-Assisted Knowledge Retrieval NeurIPS 2024
Benchmarking Tool Retrieval for Large Language Models (ToolRet) ACL Findings 2025
MassTool: A Multi-Task Search-Based Tool Retrieval Framework for LLMs arXiv 2025
Improving Tool Retrieval by Leveraging Large Language Models for Query Generation COLING Industry 2025
ToolReAGt: Tool Retrieval for LLM-Based Complex Task Solution via Retrieval Augmented Generation ACL Workshop (KnowLLM) 2025
ToolLibGen: Scalable Automatic Tool Creation and Aggregation for LLM Reasoning arXiv 2025
Tool-Planner: Task Planning with Clusters across Multiple Tools ICLR 2025
Tool-to-Agent Retrieval: Bridging Tools and Agents for Scalable LLM Multi-Agent Systems arXiv 2025
Tools Are Under-Documented: Simple Document Expansion Boosts Tool Retrieval ICLR 2026
ToolDreamer: Instilling LLM Reasoning into Tool Retrievers ACL 2026
Beyond Single-Shot: Multi-Step Tool Retrieval via Query Planning ACL 2026
Multi-Field Tool Retrieval arXiv 2026

2.4 Agent Representations

Policy/prompt, capability/profile, and routing-metadata representations; automated agent design and composition.

Paper Venue
AgentVerse: Facilitating Multi-Agent Collaboration and Exploring Emergent Behaviors ICLR 2024
LIMP: Large Language Model Enhanced Intent-Aware Mobility Prediction arXiv 2024
Dynamic LLM-Agent Network: An LLM Agent Collaboration Framework with Agent Team Optimization (DyLAN) COLM 2024
DSPy: Compiling Declarative Language Model Calls into State-of-the-Art Pipelines ICLR 2024
Trace Is the Next Autodiff: Generative Optimization with Rich Feedback, Execution Traces, and LLMs (OptoPrime) NeurIPS 2024
GPTSwarm: Language Agents as Optimizable Graphs ICML 2024
Symbolic Learning Enables Self-Evolving Agents arXiv 2024
MasRouter: Learning to Route LLMs for Multi-Agent Systems ACL 2025
Automated Design of Agentic Systems (ADAS) ICLR 2025
Self-Improving AI Agents through Self-Play arXiv 2025
Automated Composition of Agents: A Knapsack Approach for Agentic Component Selection NeurIPS 2025
ToolOrchestra: Elevating Intelligence via Efficient Model and Tool Orchestration arXiv 2025
AgentSquare: Automatic LLM Agent Search in Modular Design Space ICLR 2025
MetaAgents: Large Language Model Based Agents for Decision-Making on Teaming arXiv 2025
Large Language Model-Driven Meta-Structure Discovery in Heterogeneous Information Networks (ReStruct) KDD 2025
AutoFlow: Automated Workflow Generation for Large Language Model Agents ICLR Oral 2025
AFlow: Automating Agentic Workflow Generation ICLR 2025
SkillOrchestra: Learning to Route Agents via Skill Transfer arXiv 2026

2.5 Maintenance: Drift, Updates, and Missing Information

Keeping representations/indexes accurate as tools, APIs, and agents evolve.

Paper Venue
StableToolBench: Towards Stable Large-Scale Benchmarking on Tool Learning of Large Language Models ACL Findings 2024
Beyond Static Toolsets: Self-Evolving LLM Tool Agents via Continual Documentation Adaptation ACL Findings 2026

3. Retrieval, Reranking, and Selection of Agents

How candidates are ranked and selected once represented and indexed β€” similarity matching, LLM-based reasoning, structure-aware search, iterative retrieval, and preference-driven recommendation.

3.1 Agent/Tool Selection

Similarity matching, LLM-based (training-free/training-based) selection, and structure-aware retrieval.

Paper Venue
Toolken+: Improving LLM Tool Usage with Reranking and a Reject Option EMNLP Findings 2024
ToolRerank: Adaptive and Hierarchy-Aware Reranking for Tool Retrieval COLING 2024
Towards Completeness-Oriented Tool Retrieval for Large Language Models (COLT) CIKM 2024
Data-Efficient Massive Tool Retrieval: An RL Approach for Query-Tool Alignment (QTA) SIGIR-AP 2024
Re-Invoke: Tool Invocation Rewriting for Zero-Shot Tool Retrieval EMNLP Findings 2024
AVATAR: Optimizing LLM Agents for Tool-Assisted Knowledge Retrieval NeurIPS 2024
CRAFT: Customizing LLMs by Creating and Retrieving from Specialized Toolsets ICLR 2024
Retrieval Models Aren't Tool-Savvy: Benchmarking Tool Retrieval for Large Language Models (ToolRet) ACL 2025
MassTool: A Multi-Task Search-Based Tool Retrieval Framework for LLMs arXiv 2025
Online-Optimized RAG for Tool Use and Function Calling arXiv 2025
Position: Toward a Theory of Agents as Tool-Use Decision-Makers arXiv 2025
Multi-Field Tool Retrieval (MFTR) arXiv 2026

3.2 Iterative Tool Retrieval

Reason-act-reflection loops and iterative query reformulation for retrieval that co-evolves with task execution.

Paper Venue
Enhancing Tool Retrieval with Iterative Feedback from Large Language Models EMNLP 2023
AnyTool: Self-Reflective, Hierarchical Agents for Large-Scale API Calls ICML 2024
Tulip Agent: Enabling LLM-Based Agents to Solve Tasks Using Large Tool Libraries arXiv 2024
Planning and Editing What You Retrieve for Enhanced Tool Learning (PLUTO) NAACL Findings 2024
ReAct: Synergizing Reasoning and Acting in Language Models ICLR 2024
MCP-Zero: Active Tool Discovery for Autonomous LLM Agents arXiv 2025
Dynamic ReAct: Scalable Tool Selection for Large-Scale MCP Environments arXiv 2025
ToolReAGt: Tool Retrieval for LLM-Based Complex Task Solution via Retrieval Augmented Generation ACL Workshop (KnowLLM) 2025
ToolGen: Unified Tool Retrieval and Calling via Generation ICLR 2025
BrowseComp-Plus: A More Fair and Transparent Evaluation Benchmark of Deep-Research Agent ACL 2026
Online-Optimized RAG for Tool Use and Function Calling arXiv 2025
DeepAgent: A General Reasoning Agent with Scalable Toolsets WWW 2026
AgentIR: Reasoning-Aware Retrieval for Deep Research Agents arXiv 2026

3.3 Agent and Tool Recommendation

Mining behavioral history / preferences to personalize agent or tool selection.

Paper Venue
RecMind: Large Language Model Powered Agent For Recommendation NAACL Findings 2024
AgentCF: Collaborative Learning with Autonomous Language Agents for Recommender Systems WWW 2024
Collaborative Large Language Model for Recommender Systems (CLLM4Rec) WWW 2024
Prospect Personalized Recommendation on LLM-Based Agent Platform (Rec4Agentverse) arXiv 2024
On Generative Agents in Recommendation SIGIR 2024
Agentic Feedback Loop Modeling Improves Recommendation and User Simulation (AFL) SIGIR 2025
Recommender AI Agent: Integrating Large Language Models for Interactive Recommendations TOIS 2025
Reinforced Prompt Personalization for Recommendation with Large Language Models (RPP) TOIS 2025
PersonaX: A Recommendation Agent-Oriented User Modeling Framework for Long Behavior Sequence ACL Findings 2025
Advancing and Benchmarking Personalized Tool Invocation for LLMs (PTool) arXiv 2025
AgentSelect: Benchmark for Narrative Query-to-Agent Recommendation ICML 2026

4. Evaluation of Agent Search

Intrinsic evaluation of the search process itself, and extrinsic evaluation of downstream task outcomes.

4.1 Intrinsic Evaluation

Retrieval quality, invocation correctness, and tool/agent-use benchmarks assessed against annotated ground truth.

Paper Venue
API-Bank: A Comprehensive Benchmark for Tool-Augmented LLMs EMNLP 2023
ToolQA: A Dataset for LLM Question Answering with External Tools NeurIPS 2023
ToolAlpaca: Generalized Tool Learning for Language Models with 3000 Simulated Cases arXiv 2023
Can Large Language Models Be an Alternative to Human Evaluations? ACL 2023
LLMs in the Imaginarium: Tool Learning through Simulated Trial and Error (STE) ACL 2024
T-Eval: Evaluating the Tool Utilization Capability of LLMs Step by Step ACL 2024
MetaTool: Deciding Whether to Use Tools and Which to Use ICLR 2024
Gorilla: Large Language Model Connected with Massive APIs NeurIPS 2024
StableToolBench: Towards Stable Large-Scale Benchmarking on Tool Learning of LLMs ACL Findings 2024
LLMJudge: LLMs for Relevance Judgments LLM4Eval Workshop (SIGIR) 2024
MCP-Zero: Active Tool Discovery for Autonomous LLM Agents arXiv 2025
Benchmarking Tool Retrieval for Large Language Models (ToolRet) ACL Findings 2025
Judging the Judges: A Collection of LLM-Generated Relevance Judgements SIGIR 2025
MasRouter: Learning to Route LLMs for Multi-Agent Systems ACL 2025
Ο„-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domains ICLR 2025
τ²-Bench: Evaluating Conversational Agents in a Dual-Control Environment arXiv 2025
The Berkeley Function Calling Leaderboard (BFCL) ICML 2025
Vending-Bench: A Benchmark for Long-Term Coherence of Autonomous Agents arXiv 2025
Humanity's Last Exam (HLE) Nature 2025
DeepAgent: A General Reasoning Agent with Scalable Toolsets WWW 2026
MCP-Atlas: A Large-Scale Benchmark for Tool-Use Competency with Real MCP Servers arXiv 2026
The Tool Decathlon: Benchmarking Language Agents for Diverse, Realistic, and Long-Horizon Task Execution ICLR 2026
SealQA: Raising the Bar for Reasoning in Search-Augmented Language Models ICLR 2026
DeepPlanning: Benchmarking Long-Horizon Agentic Planning with Verifiable Constraints ACL 2026
VitaBench: Benchmarking LLM Agents with Versatile Interactive Tasks in Real-World Applications ICLR 2026

4.2 Extrinsic Evaluation

Downstream task success on agentic/deep-research/web benchmarks, incl. agent-as-a-judge evaluation.

Paper Venue
WebCanvas: Benchmarking Web Agents in Online Environments (Mind2Web-Live) Agentic Markets Workshop 2024
VisualWebArena: Evaluating Multimodal Agents on Realistic Visually Grounded Web Tasks ACL 2024
GAIA: A Benchmark for General AI Assistants ICLR 2024
AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents NeurIPS 2024
Identifying the Risks of LM Agents with an LM-Emulated Sandbox ICLR 2024
G-Eval: NLG Evaluation using GPT-4 with Better Human Alignment EMNLP 2023
A Survey on LLM-as-a-Judge (survey) arXiv 2024
LLMs-as-Judges: A Comprehensive Survey on LLM-based Evaluation Methods arXiv 2024
Deep Research Comparator: A Platform for Fine-Grained Human Annotations of Deep Research Agents arXiv 2025
ResearcherBench: Evaluating Deep AI Research Systems on the Frontiers of Scientific Inquiry arXiv 2025
Mind2Web 2: Evaluating Agentic Search with Agent-as-a-Judge NeurIPS Datasets 2025
Agent-as-a-Judge: Evaluate Agents with Agents ICML 2025
TrustJudge: Inconsistencies of LLM-as-a-Judge and How to Alleviate Them arXiv 2025
Who Judges the Judge? LLM Jury-on-Demand: Building Trustworthy LLM Evaluation Systems arXiv 2025
BearCubs: A Benchmark for Computer-Using Web Agents COLM 2025
BrowseComp arXiv 2025
BrowseComp-Plus: A More Fair and Transparent Evaluation Benchmark of Deep-Research Agent ACL 2026
MM-BrowseComp: A Comprehensive Benchmark for Multimodal Browsing Agents arXiv 2025
RealWebAssist: A Benchmark for Long-Horizon Web Assistance with Real-World Users NeurIPS 2025
DeepShop: A Benchmark for Deep Research Shopping Agents arXiv 2025
WideSearch: Benchmarking Agentic Broad Info-Seeking ICLR 2025
xBench: Tracking Agents Productivity Scaling with Profession-Aligned Real-World Evaluations arXiv 2025
AgentRewardBench: Evaluating Automatic Evaluations of Web Agent Trajectories COLM 2025
BrowserArena: Evaluating LLM Agents on Real-World Web Navigation Tasks NeurIPS Workshop 2025
DeepResearch Bench: A Comprehensive Benchmark for Deep Research Agents ICLR 2026
Automated Rubrics for Reliable Evaluation of Medical Dialogue Systems arXiv 2026
UDA: Unsupervised Debiasing Alignment for Pair-wise LLM-as-a-Judge AAAI 2026
A Survey on Agent-as-a-Judge arXiv 2026
FairJudge: An Adaptive, Debiased, and Consistent LLM-as-a-Judge arXiv 2026

5. System-Level Dimensions

System-level concerns that shape whether agent search is trustworthy, fair, secure, personalized, and inspectable in practice.

5.1 Safety

Paper Venue
Evil Geniuses: Delving into the Safety of LLM-Based Agents arXiv 2023
Testing Language Model Agents Safely in the Wild arXiv 2023
Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training arXiv 2024
BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents ACL 2024
Towards Tool Use Alignment of Large Language Models (ToolAlign) ACL 2024
R-Judge: Benchmarking Safety Risk Awareness for LLM Agents EMNLP Findings 2024
TrustAgent: Towards Safe and Trustworthy LLM-based Agents EMNLP Findings 2024
SG-Bench: Evaluating LLM Safety Generalization across Diverse Tasks and Prompt Types NeurIPS 2024
BELLS: A Framework Towards Future-Proof Benchmarks for the Evaluation of LLM Safeguards ICML Workshop 2024
AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents NeurIPS 2024
Identifying the Risks of LM Agents with an LM-Emulated Sandbox ICLR 2024
Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents NeurIPS 2024
Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents arXiv 2024
Agent-SafetyBench: Evaluating the Safety of LLM Agents arXiv 2024
SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agents arXiv 2024
SafeSearch: Automated Red-Teaming for the Safety of LLM-Based Search Agents arXiv 2025
MiniScope: A Least Privilege Framework for Authorizing Tool Calling Agents arXiv 2025
AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents ICLR 2025
Securing AI Agents with Information-Flow Control arXiv 2025
OS-Harm: A Benchmark for Measuring Safety of Computer Use Agents NeurIPS 2025
SafeScientist: Enhancing AI Scientist Safety for Risk-Aware Scientific Discovery EMNLP 2025
SafeArena: Evaluating the Safety of Autonomous Web Agents ICML 2025
NetSafe: Exploring the Topological Safety of Multi-Agent Networks ACL 2025
ToolSafety: A Comprehensive Dataset for Enhancing Safety in LLM-Based Agent Tool Invocations EMNLP 2025
Position: Trustworthy AI Agents Require the Integration of Large Language Models and Formal Methods ICML Position 2025
AgentRewardBench: Evaluating Automatic Evaluations of Web Agent Trajectories COLM 2025
BrowserArena: Evaluating LLM Agents on Real-World Web Navigation Tasks NeurIPS Workshop 2025
AgenTRIM: Tool Risk Mitigation for Agentic AI arXiv 2026
SafeSearch: Do Not Trade Safety for Utility in LLM Search Agents EACL Findings 2026
Mind the GAP: Text Safety Does Not Transfer to Tool-Call Safety in LLM Agents arXiv 2026
MobileSafetyBench: Evaluating Safety of Autonomous Agents in Mobile Device Control AAAI 2026
OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safety ICLR 2026
Your Agent May Misevolve: Emergent Risks in Self-Evolving LLM Agents ICLR 2026
The Alignment Waltz: Jointly Training Agents to Collaborate for Safety ICLR 2026
Superficial Safety Alignment Hypothesis ICLR 2026
Risk-Sensitive Agent Compositions ICLR 2026

5.2 Bias and Fairness

Paper Venue
Fairness in Multi-Agent Sequential Decision-Making NeurIPS 2014
FA*IR: A Fair Top-K Ranking Algorithm CIKM 2017
Measuring Fairness in Ranked Outputs SSDBM 2017
Policy Learning for Fairness in Ranking NeurIPS 2019
Learning Fairness in Multi-Agent Systems NeurIPS 2019
Reducing Disparate Exposure in Ranking: A Learning to Rank Approach (DELTR) Web Conference 2020
Societal Biases in Retrieved Contents: Measurement Framework and Adversarial Mitigation for BERT Rankers (AdvBert) SIGIR 2021
Cooperative Multi-Agent Fairness and Equivariant Policies AAAI 2022
Fairness-Guided Few-Shot Prompting for Large Language Models NeurIPS 2023
Fair Division with Prioritized Agents AAAI 2023
Fairness and Optimization in Dynamic Multiagent Allocation Problems IJCAI 2024
Fairness-Aware Exposure Allocation via Adaptive Reranking SIGIR 2024
Using Protected Attributes to Consider Fairness in Multi-Agent Systems AEQUITAS Workshop 2024
Towards Implicit Bias Detection and Mitigation in Multi-Agent LLM Interactions EMNLP Findings 2024
Unmasking Conversational Bias in AI Multiagent Systems arXiv 2025
MALIBU Benchmark: Multi-Agent LLM Implicit Bias Uncovered ICLR 2025
Bias Mitigation Agent: Optimizing Source Selection for Fair and Balanced Knowledge Retrieval KDD 2025
Does RAG Introduce Unfairness in LLMs? Evaluating Fairness in Retrieval-Augmented Generation Systems ACL 2025
Prompting Techniques for Reducing Social Bias in LLMs through System 1 and System 2 Cognitive Processes RANLP 2025
ToolTweak: An Attack on Tool Selection in LLM-Based Agents arXiv 2025
Bias-Aware Agent: Enhancing Fairness in AI-Driven Knowledge Retrieval Web Conference 2025
Actions Speak Louder than Words: Agent Decisions Reveal Implicit Biases in Language Models FAccT 2025
FairTopia: Envisioning Multi-Agent Guardianship for Disrupting Unfair AI Pipelines arXiv 2025
Mitigating Social Bias in Large Language Models: A Multi-Objective Approach within a Multi-Agent Framework (MOMA) AAAI 2025
BiasBusters: Uncovering and Mitigating Tool Selection Bias in Large Language Models ICLR 2026
From Personalization to Prejudice: Bias and Discrimination in Memory-Enhanced AI Agents for Recruitment WSDM 2026
From Biased Chatbots to Biased Agents: Examining Role Assignment Effects on LLM Agent Robustness arXiv 2026
Aligned Agents, Biased Swarm: Measuring Bias Amplification in Multi-Agent Systems ICLR 2026

5.3 Security Risks

Paper Venue
Not What You've Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection AISec Workshop (CCS) 2023
InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents ACL Findings 2024
AgentPoison: Red-Teaming LLM Agents via Poisoning Memory or Knowledge Bases NeurIPS 2024
GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning ICML 2025
The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in LLM Agents ACL 2025
Red-Teaming LLM Multi-Agent Systems via Communication Attacks ACL Findings 2025
Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models KDD 2025
Breaking Agents: Compromising Autonomous LLM Agents through Malfunction Amplification EMNLP 2025
AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents EMNLP Findings 2025
Attractive Metadata Attack: Inducing LLM Agents to Invoke Malicious Tools NeurIPS 2025
A Practical Memory Injection Attack against LLM Agents (MINJA) arXiv 2025
Persuade Me If You Can: Evaluating AI Agent Influence on Safety Monitors ICML Workshop 2025
AI Agents under Threat: A Survey of Key Security Challenges and Future Pathways ACM Computing Surveys 2025
TRiSM for Agentic AI: Trust, Risk and Security Management Framework arXiv 2025
Prompt Injection Attack to Tool Selection in LLM Agents (ToolHijacker) NDSS 2026
Breaking Agent Backbones: Evaluating the Security of Backbone LLMs in AI Agents ICLR 2026
Optimizing Agent Planning for Security and Autonomy ICLR 2026
Reliable Weak-to-Strong Monitoring of LLM Agents ICLR 2026
A2ASecBench: A Protocol-Aware Security Benchmark for Agent-to-Agent Multi-Agent Systems ICLR 2026
Breaking and Fixing Defenses against Control-Flow Hijacking in Multi-Agent Systems ICLR 2026
The Attack and Defense Landscape of Agentic AI: A Comprehensive Survey arXiv 2026

5.4 Personalization

Paper Venue
Personalisation of Web Search IJCAI Workshop 2003
Personalisation in Web Computing and Informatics: Theories, Techniques, Applications, and Future Research Information Systems Frontiers 2010
RouteLLM: Learning to Route LLMs from Preference Data ICLR 2025
A Survey of Personalization: From RAG to Agent arXiv 2025
FSPO: Few-Shot Optimization of Synthetic Preferences Personalizes to Real Users arXiv 2025
PersonaAgent: When Large Language Model Agents Meet Personalization at Test Time NeurIPS Workshop (MTI-LLM) 2025
MAPS: Motivation-Aware Personalized Search via LLM-Driven Consultation Alignment ACL 2025
Large Language Models Empowered Personalized Web Agents (PWAB / PUMA) WWW 2025
Towards Adaptive Personalized Conversational Information Retrieval (APCIR) CIKM 2025
UXAgent: An LLM-Agent-Based Usability Testing Framework for Web Design CHI Extended Abstracts 2025
Shop-R1: Rewarding LLMs to Simulate Human Behavior in Online Shopping via Reinforcement Learning ICLR 2025
Customer-R1: Personalized Simulation of Human Behaviors via RL-Based LLM Agent in Online Shopping arXiv 2025
Deep Research: A Survey of Autonomous Research Agents arXiv 2025
PersRM-R1: Enhance Personalized Reward Modeling with Reinforcement Learning arXiv 2025
ProductAgent: Benchmarking Conversational Product Search Agent with Asking Clarification Questions EMNLP Industry 2025
Towards Personalized Deep Research: Benchmarks and Evaluations (PDR-Bench) ICLR 2026
SPARK: Search Personalization via Agent-Driven Retrieval and Knowledge-Sharing WSDM 2026
Latent Preference Modeling for Cross-Session Personalized Tool Calling arXiv 2026

5.5 Transparency and Explainability

Paper Venue
A Study on the Interpretability of Neural Retrieval Models using DeepSHAP SIGIR 2019
Rank-LIME: Local Model-Agnostic Feature Attribution for Learning to Rank ICTIR 2023
Describe, Explain, Plan and Select: Interactive Planning with LLMs Enables Open-World Multi-Task Agents (DEPS) NeurIPS 2023
Mechanistic Interpretability for AI Safety β€” A Review TMLR 2024
RankSHAP: Shapley Value Based Feature Attributions for Learning to Rank ICLR 2025
RankingSHAP - Faithful Listwise Feature Attribution Explanations for Ranking Models SIGIR 2025
TRAIL: Trace Reasoning and Agentic Issue Localization arXiv 2025
AgentSHAP: Explaining Black-Box LLM Agent Tool Use with Shapley Values arXiv 2025
Transparency in Agentic AI: A Survey of Interpretability, Explainability, and Governance (survey) engrXiv 2026
Evolving Interpretable Constitutions for Multi-Agent Coordination ICML 2026

6. Applications

6.1 Healthcare

Paper Venue
Empowering Biomedical Discovery with AI Agents Cell 2024
MDAgents: An Adaptive Collaboration of LLMs for Medical Decision-Making NeurIPS 2024
MedAgents: Large Language Models as Collaborators for Zero-Shot Medical Reasoning ACL Findings 2024
Agent Hospital: A Simulacrum of Hospital with Evolvable Medical Agents arXiv 2024
AgentClinic: A Multimodal Agent Benchmark to Evaluate AI in Simulated Clinical Environments arXiv 2024
MMedAgent: Learning to Use Medical Tools with Multi-Modal Agent EMNLP Findings 2024
TriageAgent: Towards Better Multi-Agent Collaborations for LLM-Based Clinical Triage EMNLP Findings 2024
MedAgentBoard: Benchmarking Multi-Agent Collaboration with Conventional Methods for Diverse Medical Tasks NeurIPS 2025
MedAgentBench: A Virtual EHR Environment to Benchmark Medical LLM Agents NEJM AI 2025
ReasonMed: A 370K Multi-Agent Generated Dataset for Advancing Medical Reasoning EMNLP 2025
Tiered Agentic Oversight: A Hierarchical Multi-Agent System for Healthcare Safety ICML Workshop 2025
The Anatomy of a Personal Health Agent arXiv 2025
MEDDxAgent: A Unified Modular Agent Framework for Explainable Automatic Differential Diagnosis ACL 2025
ColaCare: Enhancing Electronic Health Record Modeling through LLM-Driven Multi-Agent Collaboration ACM Web Conference 2025
HealthBench OpenAI 2025
A Survey of LLM-Based Agents in Medicine: How Far Are We from Baymax? ACL Findings 2025
LLM-Based Agentic Systems in Medicine and Healthcare Nature Machine Intelligence 2025
Large Language Model Agents Can Use Tools to Perform Clinical Calculations npj Digital Medicine 2025
Healthcare Agent: Eliciting the Power of Large Language Models for Medical Consultation npj Artificial Intelligence 2025
MedHELM: Holistic Evaluation of Large Language Models for Medical Tasks Nature Medicine 2026
CARE: Towards Clinical Accountability in Multi-Modal Medical Reasoning with an Evidence-Grounded Agentic Framework ICLR 2026
MMedAgent-RL: Optimizing Multi-Agent Collaboration for Multimodal Medical Reasoning ICLR 2026
AI Agent in Healthcare: Applications, Evaluations, and Future Directions npj Digital Medicine 2026

6.2 Law

Paper Venue
When Does Pretraining Help? Assessing Self-Supervised Learning for Law and the CaseHOLD Dataset ICAIL 2021
CUAD: An Expert-Annotated NLP Dataset for Legal Contract Review NeurIPS 2021
LexGLUE: A Benchmark Dataset for Legal Language Understanding in English ACL 2022
LegalBench: A Collaboratively Built Benchmark for Measuring Legal Reasoning in Large Language Models NeurIPS 2023
Large Legal Fictions: Profiling Legal Hallucinations in Large Language Models J. Legal Analysis 2024
LawBench: Benchmarking Legal Knowledge of Large Language Models EMNLP 2024
LegalBench-RAG: A Benchmark for Retrieval-Augmented Generation in the Legal Domain arXiv 2024
A Reasoning-Focused Legal Retrieval Benchmark CS&Law 2025
LexRAG: Benchmarking Retrieval-Augmented Generation in Multi-Turn Legal Consultation Conversation SIGIR 2025
LegalAgentBench: Evaluating LLM Agents in Legal Domain ACL 2025
LLMs Provide Unstable Answers to Legal Questions ICAIL 2025
L-MARS: Legal Multi-Agent Workflow with Orchestrated Reasoning and Agentic Search arXiv 2025
PAKTON: A Multi-Agent Framework for Question Answering in Long Legal Agreements EMNLP 2025
LAW: Legal Agentic Workflows for Custody and Fund Services Contracts COLING Industry 2025
LRAS: Advanced Legal Reasoning with Agentic Search arXiv 2026
Ready Jurist One: Benchmarking Language Agents for Legal Intelligence in Dynamic Environments ACL 2026

6.3 Deep Research

Paper Venue
Deep Research: A Systematic Survey arXiv 2025
WebDancer: Towards Autonomous Information Seeking Agency NeurIPS 2025
WebThinker: Empowering Large Reasoning Models with Deep Research Capability NeurIPS 2025
Search-R1: Training LLMs to Reason and Leverage Search Engines with Reinforcement Learning COLM 2025
Search-o1: Agentic Search-Enhanced Large Reasoning Models EMNLP 2025
WebShaper: Agentically Data Synthesizing via Information-Seeking Formalization ICLR 2026
WebSailor-V2: Bridging the Chasm to Proprietary Agents via Synthetic Data and Scalable Reinforcement Learning ICLR 2026
DeepAgent: A General Reasoning Agent with Scalable Toolsets WWW 2026
Flash-Searcher: Fast and Effective Web Agents via DAG-Based Parallel Execution ICLR 2026

πŸ“š Related Resources

The position paper motivating agent search as a distinct problem, its companion benchmark, and the workshop this survey is affiliated with.

Resource Description Links
AgentSearch: Indexing, Retrieval, and Ranking of AI Agents Position paper (SIGIR 2026) motivating agent search as a distinct research problem πŸ“„ Paper
Agent-Search Workshop @ SIGIR 2026 The workshop this survey is affiliated with 🌐 Website
AgentSearchBench: A Benchmark for AI Agent Search in the Wild Companion benchmark for evaluating agent search systems πŸ“„ Paper Β· 🌐 Project Page Β· πŸ€— Dataset Β· πŸ’» Code

🀝 Contributing

This collection is an ongoing effort. We are actively expanding and refining its coverage, and welcome contributions from the community. You can:

  • Submit a pull request to add papers or resources
  • Open an issue to suggest additional papers or resources
  • Email us at bin.wu.23@ucl.ac.uk

We regularly update the repository to include new research on agent and tool search.

Star History Chart




Licensed under MIT.

About

[Survey] Agent and Tool Search: Foundations, Techniques, and Open Challenges

Resources

Stars

15 stars

Watchers

0 watching

Forks

Releases

Packages

Contributors