Mistral just patented the most ordinary move in agent development

On June 30, 2026, the US patent office granted Mistral AI patent US 12,670,045 B1, “Code implemented tool calls”. The inventor is Gabriel Vergnaud, in Paris. The filing is dated March 4, 2026. Twenty claims. The mechanism it describes, however, is neither from 2026 nor from Mistral: it is the now-standard pattern of agents that execute code to call their tools, and the grant was noticed on Hacker News on August 10.1 5

What the patent actually covers

Claim 1 describes a loop familiar to anyone who has built a recent agent: a server receives a request, the language model generates a block of code wrapping the tool calls, that block executes inside a sandbox, and whenever a tool call is pending, execution pauses to hand the call to the client — the user's machine — which runs it with its real access rights (a local file, an OAuth session, an interface). The result comes back, the block resumes, and only the final result is returned to the model.1

This is not a laboratory curiosity. It is the technical core of agents that no longer just propose things: they do them.

A gesture already documented, and already argued to be better

The problem this patent locks up had been documented years before the filing. In February 2024, the CodeAct paper showed that agents using executable code as their action space outperform agents forced to emit JSON or text in a predefined format, and it shipped a benchmark and a dataset to reproduce the result.2 Cloudflare then formalized the gesture in 2025 with its “Code Mode”: convert MCP tools into a TypeScript API and let the model write the code that calls them.3

Mistral itself has long documented and sells a neighbouring vision, from structured function calling to human-in-the-loop confirmation flows, in its own docs and in its Studio product.4 6

That is the whole tension of the title: a patent now covers a gesture Mistral did not invent, but one the US system now treats as conventional. The question is not whether that is ironic. The question is what it changes for the people building agents today.

Why this patent complicates things for agent makers

As long as the pattern is free, it belongs to everyone: an independent developer, a studio, a weekend volunteer. Once it becomes property, even as a defensive asset, anyone who sells, hires or raises money around that mechanism has to account for it. Nobody needs to feel victimized to have to take it seriously.5

Two readings are possible, and they do not exclude each other.

The defensive reading: software patents in the US often serve as trading currency, valuation material or mutual deterrence between large portfolios. A European player files in the US because the system is friendlier to pure software there, and the asset becomes leverage in cross-litigation. The announcement is sober: no threats, no announced licence fees.

The strategic reading: Mistral is putting a marker on the architecture it believes will win — the model writes code, all the way down, rather than an intermediate JSON layer. That is a technical declaration dressed as law, consistent with its bet on Codestral.

Neither reading is a fact yet. The case has not been challenged in court, and the patent's validity has not been tested.5

What the move reveals, beyond Mistral

The story goes beyond the patent portfolio of one French company.

Writing code instead of emitting JSON has become the de facto standard for agent development. That a company feels the need to patent it is the clearest possible sign that the standard is no longer a research experiment: it is infrastructure. Patents arrive when a mechanism stops being an idea and becomes a building block others rely on.

There is also a lesson for makers that gets underestimated: documenting a process publicly before it becomes monetizable remains one of the best protections. The dated, public work from February 2024 became the prior-art piece most invoked in the public discussion — far harder to ignore than an unrecorded oral claim.2

What to watch

Three signals deserve the attention of anyone building agents: the eventual validity challenge, Mistral's real commercial behaviour, and above all the precedent — how many similar filings will follow in other companies' portfolios.

For now, only two facts are established: a patent marks something, and a public debate exists. The rest — what Mistral will do with this asset — is unknown, and worth not guessing.