How to Encrypt LangGraph Checkpoints with MongoDB CSFLE
MongoDB, Thursday, October 15th, 2026
MongoDB shows how to encrypt LangGraph agent checkpoints with Client-Side Field Level Encryption.
Plaintext agent checkpoints can be read by database administrators or anyone who gains database access in a breach, and this MongoDB post shows how to use Client-Side Field Level Encryption to encrypt LangGraph checkpoints before they are written to the database.
The application decrypts state when resuming a run, while anyone without the keys sees only ciphertext.
The example extends LangGraph's CipherProtocol and stores the encrypted payload through MongoDBSaver.