Skip to main content

agami-core

The governed trust layer between an AI agent and your database. The importable core behind the agami Claude Code skill and MCP server — the semantic model, the shared MCP TOOLS harness, and the local query executor.

What it does

Point an AI agent at a database and it answers by guessing — at the join, at what "revenue" means, at which rows it's allowed to read. agami-core turns your schema into a governed semantic model where every join is FK-derived or human-approved and every metric is signed off before the runtime trusts it. Every answer then ships a receipt — the exact SQL it ran and the model version it pinned — so a silent join mistake never reaches you as a confident wrong number.

It runs locally: credentials, schema, and query results never leave your machine.

Most people don't pip install this

If you just want to use agami, install the Claude Code plugin — you don't touch this package directly:

/plugin marketplace add AgamiAI/agami-core
/plugin install agami-core@agami

pip install agami-core is for the other two audiences: importing the library into your own code, or self-hosting the MCP server. Full product docs and the plugin walkthrough live in the repository.

Install

pip install agami-core            # executor + stdio harness (pure-stdlib)
pip install 'agami-core[model]'   # + the semantic model (pydantic / sqlglot / pyyaml)
pip install 'agami-core[server]'  # + the networked HTTP MCP server (see below)

From a checkout, swap in the editable path — pip install -e 'packages/agami-core[model]'.

Importing the library

The top-level names — semantic_model, mcp_harness, execute_sql, agami_paths — are a deliberate flat invariant (no parent package, no sys.path juggling), so a consumer's imports resolve unchanged:

from mcp_harness import TOOLS
import semantic_model
import execute_sql

Module entry points:

python -m mcp_harness                        # the stdio MCP server (Claude Desktop)
python -m execute_sql --sql-file query.sql   # the local query executor
python -m semantic_model.cli                 # the semantic-model CLI (driven by the `sm` launcher)
python -m mcp_http                           # the networked HTTP MCP server (see below)

HTTP MCP server ([server]) — early access, in testing

The [server] extra adds a networked MCP transport: the same TOOLS surface as the stdio server, but over HTTP with OAuth and a small admin console. It's the self-host shape of the hosted product — deploy it to your own host and a whole team connects their own Claude to one URL, zero-egress by default (enabling OIDC/SSO adds one outbound call to your identity provider).

🧪 Early access. This team/server layer is usable today but newer than the local single-player path — expect the occasional rough edge, and please report anything broken via a GitHub issue. The local library and stdio server are the stable path.

A minimal local launch (SQLite store, password admin):

PUBLIC_BASE_URL=https://your-host \
AGAMI_SIGNING_SECRET=$(openssl rand -hex 32) \
AGAMI_DB_URL=sqlite:///$PWD/agami.db \
AGAMI_ADMIN_USERNAME=you@example.com AGAMI_ADMIN_PASSWORD=choose-a-strong-one \
python -m mcp_http

The full detail — the auth/access model, OIDC onboarding, the admin console (Activity + Model views), and every environment variable — lives in the docs rather than here:

  • Repository & full docs — github.com/AgamiAI/agami-core
  • Homepage — agami.ai
  • License — fair-code (source-available), the Agami Functional Use License. Self-hosting for your own organization is free; serving people outside it needs a commercial license.

Metadata

Release files for agami-core 0.9.17

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for agami-core 0.9.17
File Size Uploaded Provenance Actions
agami_core-0.9.17.tar.gz 805.9 kB With provenance Details for agami_core-0.9.17.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for agami-core 0.9.17
File Interpreter ABI Platform Actions
agami_core-0.9.17-py3-none-any.whl Python 3 none any Details for agami_core-0.9.17-py3-none-any.whl

Total release size: 1.6 MB

Release files / agami_core-0.9.17.tar.gz

Download URL agami_core-0.9.17.tar.gz
Size 805.9 kB
Tags Source
SHA-256 checksum
How to use checksums
8aac5e48d29833555428b3125216ad5c98a5b3e6273fff87bef2c006a0a6ab61
BLAKE2b-256 checksum
How to use checksums
ec0a4939f48acd828e8876ec52891d09dbf51a6c8de0ad9a407be1e3c69171e0
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.13

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 18, 2026.

Transparency log

Release files / agami_core-0.9.17-py3-none-any.whl

Download URL agami_core-0.9.17-py3-none-any.whl
Size 843.1 kB
Tags Python 3
SHA-256 checksum
How to use checksums
998dc5ad8cc3a7f7351c533cdb78600a5ba1a6b2ea26a77ab9650a4a4c15bd9b
BLAKE2b-256 checksum
How to use checksums
36619b3e47db8906d89995a461733e98b9cb4b1283ecaa96d9b78caf5f283abd
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.13

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 18, 2026.

Transparency log

Security for agami-core 0.9.17

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for agami_core-0.9.17.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 18, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.9.17 This release

2 release files Full provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page