On November 5, 2026, Mistral’s Studio blog described broader managed agents and apps. The technical boundary that matters for self-hosting sits in the Agents docs: Managed Agents and the Agents SDK are in public preview, so APIs, behavior and limits can still change.

Self-hosting the worker is not keeping the whole session local

Run modes decide where the agent loop, tool code and hooks execute.

  • Local, in-process: the agent runs inside the developer process; the session stays in process memory, or on disk with an experimental journal. Studio tracing is off.
  • Self-hosted agents serve: a long-running worker runs on owned infrastructure, and tools/hooks run there. Mistral’s control plane still stores the session and routes it, and Mistral serves the model calls.
  • Mistral-managed agents deploy: Mistral builds from git and runs the worker. Session storage follows the same Mistral-side path as self-hosted.

So standard self-hosting moves the worker, not the entire data plane. The blog separately notes that enterprises can deploy models and the platform in their own cloud, VPC, on-premises or hybrid environments. That is a broader platform option, not the default effect of agents serve.

Tracing and durability follow the deployed modes

For both agents serve and agents deploy, Studio tracing is on by default and includes prompt and completion content. Local in-process runs keep tracing off.

Deployed sessions are durable: finished steps are recorded and usually survive a worker interruption. A turn may also fail, or remain Running until a limit. Work that was in flight has an unknown outcome; tools with side effects and hooks need to tolerate retries. The docs also treat the execution environment separately from the worker location—defaulting to NoSandbox—so shell or file access still needs its own configuration.

For related context, see Mistral’s Responses API preview for agents. A different vendor’s managed-agent offering appears in Zhipu’s Managed Agents beta.

We haven’t deployed Managed Agents, and we haven’t measured privacy or performance.