DURATION

12 WEEKS

DELIVERY

INSTRUCTOR-LED
MON–THU

100% PRACTICAL

LABS/
CAPSTONE PROJECT

COMPLETION

CERTIFICATION

Programme Overview

This practical 12-week programme takes you from Python and API fundamentals to a working, secure AI agent backend. Learners cover tool use, LangGraph workflows, SQL data, MCP integrations, security, testing and observability, then present a capstone project.

Learning outcomes

  • Write Python with type hints, connect to AI models over HTTP APIs and manage prompts, tokens, context windows, structured outputs and API-key safety.
  • Build FastAPI services with Pydantic v2 validation, async endpoints and dependency injection, and expose safe, typed agent tools through them.
  • Orchestrate agents with LangChain 1.0 and LangGraph — explicit state, nodes, branching, checkpoints, streaming and human-in-the-loop approval.
  • Persist data and memory with PostgreSQL and SQLAlchemy, ground answers in approved knowledge sources, and apply privacy, consent and retention practices.
  • Build MCP servers and integrations, secure routes with JWT and OAuth 2.1, and defend against OWASP agentic risks such as prompt injection and excessive agency.
  • Test and evaluate agents with pytest and evaluation datasets, observe them with OpenTelemetry, LangSmith and Langfuse, and present a documented capstone.
Level & Delivery
Beginner to Junior
Instructor-Led
Guided Labs & Projects
From Python Fundamentals to a Secure, Observable AI Agent Backend

Why Enroll?

AI Agent Engineering is a 12-week programme delivered by Ibadan Digital Academy. You will build a working AI agent backend with Python and FastAPI — connecting models to tools, SQL data, LangGraph workflows, MCP integrations and observability systems — while learning the security and testing practices production agents require. Every session follows explanation, demonstration, guided practice and independent application, and the course ends with a presented, documented capstone agent.

Full Agent Stack:

Python, FastAPI, LangChain 1.0, LangGraph, PostgreSQL, MCP and observability — the complete agent engineering toolkit.

Security-First Design:

JWT and OAuth 2.1, least privilege, the OWASP Top 10 for LLM and Agentic Applications, approvals, rate limits and spending caps.

Production Quality:

pytest, evaluation datasets, prompt-injection regression tests, OpenTelemetry traces, LangSmith and Langfuse monitoring.

Instructor-Led Delivery:

Monday to Thursday, 11:00 a.m. to 2:00 p.m., with Friday optional for project completion, corrections and mentorship.

Capstone You Can Defend:

A secure AI service-desk agent with SQL data, controlled tools, role-based permissions, tests, evaluations and traces.

How the Programme Runs

Delivery & Assessment

Teaching runs Monday to Thursday, 11:00 a.m. to 2:00 p.m.; Friday is optional for project completion, corrections and mentorship. At 12 scheduled hours per week, practical work is distributed across every module, and independent practice is approximately 5 to 7 hours weekly.

  • Weekly labs: 25%
  • Month 1 agent services build: 15%
  • Month 2 workflow, data and security build: 20%
  • Testing and evaluation portfolio: 10%
  • Month 3 capstone agent: 30%

Evidence includes source files, running FastAPI services, test and evaluation reports, recorded traces, Git history and live demonstrations.

12-Week Curriculum

AI Agent Engineering Outline

Month 1 — Foundations: Python, APIs, FastAPI and Tools

Week 1. Introduction to AI agents and Python

  • Topics: what AI agents are — models, instructions, tools and memory working in a loop; Python essentials (variables, functions, lists, dictionaries, modules, type hints, virtual environments).
  • Practical: set up VS Code, Jupyter Notebook, Git/GitHub and the uv package manager; read, test and understand AI-assisted code.
  • Exit: a working Python project environment with version control and a clear understanding of the agent loop.

Week 2. APIs, JSON and working with AI models

  • Topics: HTTP APIs and JSON; prompts, system instructions, tokens, context windows and structured outputs; environment variables for keys, cost and rate limits.
  • Practical: build a command-line AI assistant that accepts user input and returns structured responses.
  • Exit: a model-connected CLI tool with safe key handling and visible cost awareness.

Week 3. FastAPI backend fundamentals

  • Topics: request/response cycle, path and query parameters, request bodies; Pydantic v2 validation; async endpoints, dependency injection, settings management; FastAPI CLI and automatic OpenAPI documentation.
  • Practical: create validated AI-service routes and explore the generated API docs.
  • Exit: a running FastAPI service that validates input and returns reliable responses.

Week 4. Building tools for AI agents

  • Topics: function calling; safe, typed Python tools; input validation and error handling; least-privilege design.
  • Practical: build calculation, internal-search and user-request tools exposed through FastAPI endpoints.
  • Exit: a model that can call validated tools and act on clear results.

Month 1 project: agent services toolkit (15%) — a FastAPI application with validated routes, environment-managed configuration and a set of safe, typed tools the model can call, with tests and Git history.

Month 2 — Agents, Data, Integrations and Security

Week 5. Agent workflows with LangChain and LangGraph

  • Topics: LangChain 1.0 create_agent for models, prompts and tools; LangGraph state, nodes, branching, checkpoints and repeatable execution; streaming and human-in-the-loop approval.
  • Practical: build a single-agent backend that decides when to answer directly and when to call a tool.
  • Exit: a stateful, checkpointed agent workflow with an approval step.

Week 6. Data, SQL and agent memory

  • Topics: PostgreSQL tables and queries; FastAPI with SQLAlchemy; retrieval basics (full-text and vector search); short-term conversation state and long-term user memory; privacy, consent, retention and data quality.
  • Practical: ground agent answers in an approved knowledge source and persist conversation state.
  • Exit: an agent that retrieves approved facts and remembers users within a defined retention policy.

Week 7. Model Context Protocol and external integrations

  • Topics: MCP hosts, clients and servers; tools, resources and prompts; stdio vs Streamable HTTP transports and the 2026-07-28 specification; treating tool output as untrusted input.
  • Practical: build an MCP server with the Python SDK and connect it to the agent for approved actions in an external system.
  • Exit: a working MCP integration with least-privilege actions.

Week 8. Authentication, permissions and secure agent design

  • Topics: authentication, authorization, users, roles and permissions; JWT and OAuth 2.1; OWASP Top 10 for LLM Applications 2026 and for Agentic Applications — prompt injection, sensitive data disclosure, excessive agency, tool misuse; least agency, output validation, approvals, rate limits and spending caps.
  • Practical: protect FastAPI routes and restrict which tools each user or agent may access.
  • Exit: an authenticated agent with per-role tool permissions and safeguards against the core agentic risks.

Month 2 project: workflow, data and security build (20%) — an authenticated agent backend combining a LangGraph workflow, PostgreSQL memory and retrieval, an MCP-connected external system, role-based tool permissions and documented safeguards, with tests and Git history.

Month 3 — Quality, Reliability and Capstone

Week 9. Testing and evaluation of AI agents

  • Topics: traditional software tests plus behavioural evaluation; pytest for routes, validation, database functions and tools with mocked model calls; evaluation datasets measuring answer quality, tool selection, format, safety, latency and cost; prompt-injection test cases as regression checks.
  • Practical: build an evaluation suite and run it automatically.
  • Exit: repeatable tests and evaluations that catch quality and safety regressions.

Week 10. Observability, debugging and reliability

  • Topics: traces, logs and metrics across multi-step requests; OpenTelemetry basics; LangSmith and Langfuse inspection of prompts, model calls, tool calls and execution paths; timeouts, retries, structured errors, approvals and fallbacks; cost, latency and failure-pattern monitoring.
  • Practical: instrument the agent and diagnose a failing multi-step request from production traces.
  • Exit: a traceable agent with documented reliability improvements.

Week 11. Designing and building the capstone agent

  • Topics: problem, users, data sources, tools, permissions and success criteria; FastAPI backend combining model, validated tools, SQL data, workflow, authentication and observability; realistic scenarios, evaluation sets, Docker packaging and automated test runs.
  • Practical: build the AI service-desk agent and improve accuracy, safety and usability from evaluation results.
  • Exit: a containerised capstone passing tests before presentation.

Week 12. Capstone project presentation

  • Topics: demonstrate the agent; present architecture, tools, database design, security controls, testing and evaluation results and observed traces; README documentation; peer and instructor feedback.
  • Practical: defend design decisions and identify improvements for a future version.
  • Exit: a reproducible, documented agent with evidence of security, quality and reliability.

Month 3 project: capstone agent (30%) — a secure AI service-desk and operations agent that answers from an approved knowledge source, looks up customer or ticket data in SQL, creates support requests through a controlled tool, and hands sensitive or uncertain cases to a human — with role-based permissions, tests, evaluations and traces proving it works.

Tools & Scope

Python, FastAPI, Agents and Production Quality

  • Core stack: Python 3, type hints, virtual environments and the uv package manager; VS Code, Jupyter Notebook, Git/GitHub.
  • Backend and agents: FastAPI, Pydantic v2, LangChain 1.0, LangGraph, PostgreSQL, SQLAlchemy.
  • Integrations and security: Model Context Protocol (Python SDK), JWT, OAuth 2.1, OWASP LLM and Agentic guidance.
  • Quality and operations: pytest, evaluation datasets, OpenTelemetry, LangSmith, Langfuse, Docker.

Scope: beginner-friendly AI agent backends with Python and FastAPI. Frontend UI frameworks, model fine-tuning, advanced MLOps and large-scale deployment are outside the core assessment. AI coding assistants are used responsibly — every generated line is read, tested and understood.

Agent Engineering Practical Progression

Competency Checklist

  • Explain the difference between a basic chatbot, a workflow and an AI agent.
  • Build a working Python backend and secure FastAPI service.
  • Connect a model to validated, typed and least-privilege tools.
  • Use Pydantic v2 to validate requests, responses and agent outputs.
  • Build a LangGraph workflow with state, nodes, branching, checkpoints, streaming and human approval.
  • Persist data and memory with PostgreSQL and retrieval, treating privacy and consent as first-class requirements.
  • Build and connect an MCP server and treat its output as untrusted.
  • Secure routes with JWT and OAuth 2.1 and defend against the OWASP LLM and Agentic Top 10 risks.
  • Test and evaluate agents with pytest, evaluation datasets and prompt-injection regression checks.
  • Observe agents with OpenTelemetry, LangSmith and Langfuse, and present a documented capstone agent.

Compact lab sequence: Python environment and Git baseline → model API client with structured outputs and key management → FastAPI service with Pydantic v2 validation and docs → typed tool registry with least-privilege design → LangGraph stateful workflow with checkpointing and approval → PostgreSQL memory with retention policy → retrieval over an approved knowledge source → MCP server with the Python SDK and external integration → JWT and OAuth 2.1 protection with role-based tool permissions → prompt-injection and excessive-agency safeguards → pytest suites with mocked model calls → evaluation datasets for quality, safety, latency and cost → OpenTelemetry traces with LangSmith/Langfuse inspection → timeout, retry, fallback and human-handoff patterns → Docker packaging and automated test runs → capstone integration, presentation and defence.

Secure Your Seat

Start Your AI Agent Engineering Journey

12 weeks to a working, secure AI agent backend you can defend. Ibadan Digital Academy — Iyaganku GRA, Ibadan. Mon–Thu, 11:00 a.m.–2:00 p.m., with optional Friday labs.