The supervisor agent pattern: how an autonomous data conductor coordinates specialist agents
When one coordinator agent should route work to specialists, and where the pattern breaks
The supervisor agent pattern is a multi-agent design in which one coordinating agent receives a task, splits it up, delegates the pieces to specialist agents and assembles their results. Anthropic describes the same shape as the orchestrator-workers workflow in Building effective agents: a central model breaks a task down dynamically, hands subtasks to workers and synthesizes what comes back. On a data platform, we think it is the right default once a single agent's tool list and context window stop being enough.
Key Takeaways
- •A supervisor owns routing, sequencing and synthesis; specialists own one domain each (pipelines, schema, quality, governance, cost) and expose a narrow set of tools.
- •The pattern pays off when an incident or request crosses domains, because the supervisor holds the shared context that point tools do not have.
- •Its main failure modes are a supervisor that becomes a bottleneck, specialists that overlap, and delegation without limits on what a specialist may change.
- •A per-domain autonomy dial (observe, propose, act with approval, act alone) is what makes a supervisor safe to run against production data.
- •Exposing every specialist as an MCP server lets the same supervisor be driven from Claude Code, Cursor or any MCP-compatible client.
What the supervisor agent pattern is, in data terms
Strip away the framework vocabulary and the pattern has three parts. A supervisor takes a request in natural language. A set of specialists each do one kind of work with a small, well-described toolset. A shared context carries what each specialist learned back to the supervisor, so the next delegation starts from facts rather than from scratch.
Take the request "Why did row counts drop 40% overnight?" A single generalist agent has to hold warehouse access, orchestrator logs, lineage, schema history and quality rules in one prompt. A supervisor does less itself. It asks an incident specialist to trace the failure, asks a schema specialist whether a column changed, asks a quality specialist when the anomaly first appeared, and then writes one answer that cites all three.
The Model Context Protocol matters here because it standardizes how those specialists present their tools. The MCP specification defines servers that expose tools, resources and prompts to any compliant client. If each specialist is an MCP server, the supervisor, or an engineer sitting in a terminal, calls them the same way.
Why a supervisor beats one big agent on a data platform
We see three practical reasons, and we flag them as our opinion from building this, not a benchmark.
- •Tool overload. A generalist given dozens of tools across orchestration, warehouse, catalog and access control picks the wrong one more often. Specialists with five or six tools each are easier to describe and to test.
- •Context isolation. A specialist can read a thousand lines of logs and return a three-line finding. The supervisor never pays for the raw logs.
- •Blast-radius control. Permissions attach to the specialist, not to the whole system. The quality specialist can be read-only while the pipeline specialist is allowed to open a pull request.
Anthropic's engineering write-up on its multi-agent research system describes a lead agent that plans and spawns subagents to work in parallel. The structure is the same one we apply to data operations: the lead plans, the workers explore, and the lead synthesizes.
How an autonomous data conductor applies the pattern
Our Orchestration Agent, part of the Data Workers swarm, is the supervisor. It does not touch warehouses or orchestrators directly. It decides which specialist to call, in what order, and what to do with the answers. The other agents are the specialists: the Pipeline Agent builds and maintains pipelines, the Schema Agent detects column-level drift, the Quality Agent watches tests and anomalies, the Governance Agent handles PII and access, and the Cost Agent looks for waste.
We call the combined system an Autonomous Data Conductor because the goal is not a better chat interface. The goal is to reduce the amount of data operations a human does by hand, domain by domain, until the routine work is zero.
Here is how one incident moves through it. A schema change lands upstream. The Schema Agent flags the drifted column and projects which downstream models read it. The Incidents Agent correlates that with a failed run and identifies root cause. The Pipeline Agent drafts the fix. The supervisor holds the chain together and decides whether the fix is applied or sent to a person. In our early pilot testing, 60% of incidents auto-resolve before a human is notified. That is our pilot number, not an industry benchmark, and it will vary with how much autonomy a team grants.
The autonomy dial: letting the supervisor act without letting it run wild
Delegation is where supervisor designs get dangerous. If the supervisor can tell any specialist to do anything, a wrong inference becomes a production change. We set limits per domain instead of globally, because the right level of trust differs by domain. Most teams are comfortable with automated quality checks long before they are comfortable with automated access changes.
| Autonomy level | What the supervisor may do | Typical starting domain |
|---|---|---|
| Observe | Investigate and report; no changes proposed | Governance, access control |
| Propose | Draft a fix or migration for human review | Schema changes, pipeline edits |
| Act with approval | Apply the change after a person approves it | Pipeline fixes, cost actions |
| Act alone | Apply and log the change; notify afterward | Retries, freshness repairs, test reruns |
The open-source edition, dw-claw, is Apache 2.0 and read-only by default, so a team can run the supervisor at the observe level with no write path at all. Pro adds writes, approval workflows and audit trails, which is what the middle two levels need. Tamper-evident audit logs matter because a supervisor's decision chain has to be reconstructable after the fact.
Where the supervisor agent pattern fails
We would rather you hear the failure modes from us than discover them in production.
- •Supervisor bottleneck. Every request passes through one model, so latency and cost stack up. Fix it by letting specialists call each other directly for well-known chains, and keeping the supervisor for ambiguous or cross-domain work.
- •Overlapping specialists. If two agents can both change a table, they will eventually disagree. Give every action exactly one owner.
- •Lossy summaries. A specialist that returns a vague summary starves the supervisor. Require structured outputs with evidence: the query run, the row counts, the diff.
- •Unbounded loops. A supervisor that keeps re-delegating after a failure burns budget. Cap the number of delegation rounds and escalate to a person at the limit.
- •Silent scope creep. A fix that was proposed for one model should not quietly touch another. Check the blast radius, for example "What's the blast radius if I drop this column?", before any write.
Using the supervisor from Claude Code or Cursor
Engineers already work in Claude Code and Cursor, so we expose every agent as an MCP server instead of asking them to learn a new dashboard. You can ask the supervisor a question such as "What changed in the orders schema since last deploy?" or "Why is the nightly pipeline 3x slower this week?" from the terminal. It routes the question to the right specialists and returns one answer with its evidence.
We covered how the Schema Agent and the Catalog Agent share context in separate posts on our resources pages. The short version is that the Catalog Agent keeps metadata current, so the supervisor's questions about ownership, lineage and freshness are answered from the same source the specialists use.
When not to use a supervisor
Some work does not need one. A single scheduled check, such as rerunning a test suite every hour, is a job for one specialist or even a plain script. A supervisor adds value when the task is ambiguous, spans domains, or needs a decision about which specialist should act. If the path is fixed and known in advance, a deterministic workflow is cheaper and easier to test. Anthropic's own guidance in Building effective agents makes the same point: start with the simplest structure that works and add agent autonomy only when it earns its keep.
Frequently Asked Questions
What is the supervisor agent pattern? It is a multi-agent design where one coordinating agent plans a task, delegates subtasks to specialist agents and combines their results. It is also called the orchestrator-workers pattern.
How is a supervisor different from a single agent with many tools? A single agent holds every tool and all the context in one prompt. A supervisor holds only the plan and the findings, while each specialist keeps its own narrow toolset and returns a compact result. That separation reduces tool confusion and keeps raw logs out of the coordinator's context.
Does a supervisor need to be autonomous? No. Autonomy is a setting, not a property of the pattern. A supervisor can run in observe-only mode, propose fixes for review, or act on its own in domains where the team trusts it. We recommend setting that level per domain.
Can the specialists be used without the supervisor? Yes. Because each Data Workers agent is an MCP server, you can call the Quality Agent or the Schema Agent directly from Claude Code, Cursor or another MCP client, and add the Orchestration Agent when you want cross-domain coordination.
What is the biggest risk of the supervisor agent pattern? Unbounded delegation. Without limits on what each specialist may change, a wrong inference at the top becomes a wrong action at the bottom. Per-domain permissions, capped delegation rounds and tamper-evident audit trails are the controls we rely on.