Skip to main content

Agent Detector

agent-detector is a small, dependency-free Python package for detecting which AI coding agent is driving the current process, and for parsing that identity back out of a User-Agent header on the receiving side.

It returns evidence rather than only a boolean, so callers can distinguish an explicit identity from a broad environmental hint.

Installation

pip install agent-detector

Usage

from agent_detector import detect_agent

detection = detect_agent()

if detection:
    print(detection.agent)       # "codex"
    print(detection.confidence)  # "high"
    print(detection.signal)      # "CODEX_THREAD_ID"

The returned DetectionResult contains:

  • agent: an AgentName literal containing a supported agent name
  • confidence: high, medium, or low
  • source: environment, path, or user-agent
  • signal: the name of the matched signal, never its value

Pass a mapping to make detection deterministic in tests:

assert detect_agent({"OPENCODE": "1"}).agent == "opencode"

Require a minimum confidence when broad environmental hints are not useful:

detection = detect_agent(minimum_confidence="high")

minimum_confidence is typed as Literal["high", "medium", "low"] and defaults to "low".

User-Agent propagation

A client can propagate a detected identity to a server as a second User-Agent product. The value must be exactly two whitespace-separated products:

<product>/<version> AI-Agent/<agent>

For example:

example-cli/1.2.3 AI-Agent/codex

The rules are strict and case-sensitive:

  • product and version are both required and must be non-empty RFC 9110 tokens (letters, digits, and !#$%&'*+-.^_`|~; no /, spaces, or parentheses)
  • the marker must be exactly AI-Agent (mirroring the AI_AGENT environment variable)
  • agent must be one of the supported agent names below, in lowercase
  • comments such as (darwin) and additional products are rejected
  • leading and trailing whitespace is ignored

A client can build the value like this:

from agent_detector import detect_agent

user_agent = "example-cli/1.2.3"
if detection := detect_agent(minimum_confidence="high"):
    user_agent += f" AI-Agent/{detection.agent}"

Use parse_invoking_agent on the receiving side. It returns a DetectionResult with confidence="high", source="user-agent", and signal="User-Agent", or None when the value does not match:

from agent_detector import parse_invoking_agent

detection = parse_invoking_agent(
    request.headers.get("user-agent"),
    expected_product="example-cli",
)

if detection:
    print(detection.agent)  # "codex"

expected_product is optional. When given, it must be a non-empty string and only values whose product matches it exactly are accepted; anything else returns None. Use it to ignore unrelated clients that happen to send a similar header. It is a filter, not authentication: as with environment detection, the identity is informational and any HTTP client can send it.

Supported agents

Agent Signals Confidence
Explicit override AI_AGENT containing a supported agent name high
Amp AGENT=amp, AMP_CURRENT_THREAD_ID high / medium
Codex CODEX_THREAD_ID, CODEX_CI, CODEX_SANDBOX high
Gemini CLI GEMINI_CLI high
Copilot CLI COPILOT_CLI medium
OpenCode OPENCODE high
Antigravity ANTIGRAVITY_AGENT medium
Augment CLI AUGMENT_AGENT medium
Cowork CLAUDE_CODE_IS_COWORK high
Claude Code CLAUDE_CODE_CHILD_SESSION, CLAUDECODE, CLAUDE_CODE high / medium
Cursor CURSOR_TRACE_ID medium
Cursor CLI CURSOR_AGENT, CURSOR_EXTENSION_HOST_ROLE=agent-exec high / medium
Kiro TERM_PROGRAM=kiro low
Pi .pi/agent entry in PATH medium
Replit REPL_ID low
Goose GOOSE_PROVIDER low

AI_AGENT takes precedence over inferred signals when its value is one of the supported agent names. Unknown values are ignored.

The detector is deliberately ordered. For example, Amp is checked before Claude Code because Amp also sets CLAUDECODE.

Important limitations

Detection is best-effort. None means unattributed, not "human". Some signals can also be present in an integrated terminal where a person typed the command manually.

This package detects the execution harness. It cannot determine whether a particular skill, plugin, prompt, or model caused the command. Use a separate explicit marker when that attribution matters.

Neither environment detection nor the User-Agent format verifies the caller. Do not use a detected identity to grant access or bypass checks.

Privacy

Environment values such as thread IDs are never returned. A result contains only a normalized agent name and the name and category of the matched signal. parse_invoking_agent likewise returns only the agent name, never the client product, version, or the raw header.

Development

uv sync --all-groups
uv run ruff check .
uv run ruff format --check .
uv run mypy
uv run pytest
uv build

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

agent_detector-1.1.0.tar.gz (53.7 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

agent_detector-1.1.0-py3-none-any.whl (8.0 kB view details)

Uploaded Python 3

File details

Details for the file agent_detector-1.1.0.tar.gz.

File metadata

  • Download URL: agent_detector-1.1.0.tar.gz
  • Upload date:
  • Size: 53.7 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.5 {"installer":{"name":"uv","version":"0.12.5","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for agent_detector-1.1.0.tar.gz
Algorithm Hash digest
SHA256 3428dc45713f93a115bd0b05c9dbbfdc72af70246064c07bd837a9a95cf016bc
MD5 f70de38d76030d51ab053bf4d12436fb
BLAKE2b-256 0a512d6a4580f8a1ad26eca1f3849207e08d65a0df318188fe1a5b56cd868a1e

See more details on using hashes here.

File details

Details for the file agent_detector-1.1.0-py3-none-any.whl.

File metadata

  • Download URL: agent_detector-1.1.0-py3-none-any.whl
  • Upload date:
  • Size: 8.0 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.5 {"installer":{"name":"uv","version":"0.12.5","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for agent_detector-1.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 c605af97afb894737dd798721b117d9bbc7aa491e02a676cd5916c79dc39a46d
MD5 9623abf0d4c3cdbd979d5bfb7db8a2b9
BLAKE2b-256 c42643b02c1cf72b12597dd7a3b49023918bded80edd733e00222f5a3ce42d85

See more details on using hashes here.

Release history Release notifications | RSS feed

2.0.0

2 files

1.1.2

2 files

1.1.1

2 files

This release

1.1.0 This release

2 files

1.0.0

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page