alter-sdk 0.13.0

Alter Vault Python SDK - OAuth token management with policy enforcement

Alter SDK for Python

Official Python SDK for Alter Vault — credential and authorization layer for apps and AI agents that call third-party APIs.

Tokens stay in the vault. The SDK injects the credential, refreshes it, and writes the audit row — application code only calls vault.request().

Install

pip install alter-sdk

Requires Python 3.10+.

Quick example

Make an authenticated API call — no token ever touches application code.

import asyncio
from alter_sdk import App, HttpMethod

async def main():
    async with App(api_key="<api-key>") as vault:
        response = await vault.request(
            HttpMethod.POST,
            "https://api.example.com/resource",
            grant_id="<grant-id>",
            json={"example": "payload"},
        )
        print(response.status_code, response.json())

asyncio.run(main())

For a full walkthrough — sign-up, key minting, OAuth — see the First 5 Minutes guide.

Documentation

Full docs are at https://docs.alterauth.com.

Topic	Page
Getting started end-to-end	First 5 Minutes
Concepts (principals, grants, identity resolution)	Concepts
OAuth flows (JWT, grant_id, headless)	OAuth
Identity Provider setup	Identity Providers
Managed secrets	Managed Secrets
Agents and workload identity	Agents
Per-method API reference	SDK reference
Framework integrations	FastAPI · MCP · LangChain

License

MIT. See LICENSE.

Support

Email [e-mail] or open an issue at https://github.com/alter-ai/alter-vault.