kazenai-finops
Stop your AI agents from burning your budget. Catch loops before they catch you.
Install: PyPI · kazenai-finops · Docs: docs.kazenai.com · Products: kazenai.com
Source: github.com/kazenai-ai/kazenai-finops-sdk
What is this?
kazenai-finops is the customer-facing Agent FinOps SDK. Install it, wrap your OpenAI or Anthropic client with monitor(), and get:
- Pre-call budget deny — hard
BudgetExceededbefore a provider call - Soft trajectory pause —
KazenCircuitBreakerwhen projected spend trips (alias:KazenBudgetExceeded) - Loop detection — stop repeated high-risk patterns before another LLM call
- Optional FinOps / Lens evidence — canonical
KazenEventbatches when ingest is configured
It depends on kazenai (the core engine) and kazen-event-schema. Most teams should install this package, not core directly.
Traditional tools: LLM call → response → log cost → dashboard shows overspend
KazenAI: Pre-flight check → BLOCKED → LLM call never made
Install
python -m pip install kazenai-finops openai
# Optional Anthropic path:
# python -m pip install kazenai-finops anthropic
Requires Python 3.10–3.12.
Quick start
from kazenai_finops import monitor, BudgetExceeded, KazenCircuitBreaker
import openai
client = openai.OpenAI()
monitored = monitor(
client,
agent_id="customer-support",
# Optional ingest: set KAZENAI_FINOPS_API_KEY / KAZENAI_FINOPS_URL in the environment
max_budget_usd=5.00,
debug=True,
)
try:
for i in range(100):
monitored.chat.completions.create(
model="gpt-4o-mini",
messages=[{"role": "user", "content": f"Step {i}"}],
)
except BudgetExceeded as e:
print(f"Hard cap (before provider): {e}")
except KazenCircuitBreaker as e:
print(f"Soft pause (after a completed call): {e}")
Call sites stay the same — monitor() wraps the client.
Supported today
| Path | Status |
|---|---|
Sync OpenAI chat.completions.create (non-streaming and stream=True) / chat.completions.stream |
Supported via monitor() |
Sync Anthropic messages.create / messages.stream |
Supported via monitor() |
| OpenAI Responses / async / Realtime | Unsupported on the Control path |
| LangChain / LangGraph / CrewAI / AutoGen adapters | Optional extras for evaluation — prefer wrapping the underlying client with monitor() |
Optional framework extras
pip install 'kazenai-finops[langgraph]' # similarly: langchain, crewai, etc. — see pyproject.toml
from kazenai_finops.adapters.langchain import wrap_langchain_runnable
from kazenai_finops.adapters.langgraph import wrap_graph_invoke
from kazenai_finops.adapters.crewai import wrap_crew_kickoff
These helpers are for evaluation. For the supported control path, wrap the OpenAI/Anthropic client with monitor().
Streaming (Control-certified)
Streaming uses the same pre-dispatch reservation. At provider dispatch the
reservation becomes provider_started. Settlement happens when the stream ends
with authoritative usage; early close(), a provider error, or missing final
usage becomes outcome_unknown and leaves shared reconciliation pending rather
than recording an exact zero or releasing an already-started call.
from kazenai_finops import monitor, StreamCutoffError
import openai
monitored = monitor(
openai.OpenAI(),
agent_id="streaming-agent",
max_budget_usd=1.00,
stream_cutoff_usd=0.50, # optional local cutoff (does not use /v1/budget/stream-tick)
)
try:
stream = monitored.chat.completions.create(
model="gpt-4o-mini",
messages=[{"role": "user", "content": "Long answer please"}],
stream=True,
)
with stream:
for chunk in stream:
...
except StreamCutoffError as e:
print(f"Stream cut at ${e.blocked_usd:.6f}")
The official lazy OpenAI helper is supported too. Dispatch occurs when its context manager is entered, and the nested SDK call is accounted for exactly once:
with monitored.chat.completions.stream(
model="gpt-4o-mini",
messages=[{"role": "user", "content": "Long answer please"}],
) as stream:
for event in stream:
...
stream_enforcement=True is deprecated; prefer stream_cutoff_usd. The cutoff
uses output observable at the client. It cannot see hidden reasoning or guarantee
that the provider stopped generating or billing immediately after the close.
Local and shared enforcement
- Local hard cap works offline — no FinOps round-trip is required for the in-process client limit
- Low overhead — checks stay on the hot path
- Shared policies can fail closed — production/staging modes deny when a required shared reservation cannot be obtained
The local cap is not an account-wide provider billing limit. Multiple workers or services need the shared FinOps authority for a cross-process budget. An explicit development fail-open path retains only local safeguards.
How it relates to kazenai
| Package | Role |
|---|---|
kazenai-finops |
Customer SDK (this package) — recommended install |
kazenai |
Core monitor() engine |
kazen-event-schema |
Shared event contract |
from kazenai_finops import monitor re-exports the core engine so existing integrations keep working.
Maintainers: follow RELEASING.md. Core 1.1.0 must be available on public PyPI before this package's 1.1.0 CI, clean build and publication.
License
Apache License 2.0. See LICENSE and NOTICE.
Issues: https://github.com/kazenai-ai/kazenai-finops-sdk/issues · Products: kazenai.com · founder@kazenai.com
Metadata
Release files for kazenai-finops 1.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| kazenai_finops-1.1.0.tar.gz | 22.4 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| kazenai_finops-1.1.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 42.8 kB
Release files / kazenai_finops-1.1.0.tar.gz
| Download URL | kazenai_finops-1.1.0.tar.gz |
|---|---|
| Size | 22.4 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
13d94d96eb406376a4b2c8a2dbb2b9728b7a1a3df33236f558809b4fc07d0053
|
|
BLAKE2b-256 checksum How to use checksums |
e263b971ec95166aa22f4c8c7f46b29b51594adc7c1d8f358273e2dd99437cc7
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 1, 2026.
Transparency logRelease files / kazenai_finops-1.1.0-py3-none-any.whl
| Download URL | kazenai_finops-1.1.0-py3-none-any.whl |
|---|---|
| Size | 20.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
b3e5f0bb8a9cbd073aabe01a0fb489f10de36fbbc5845ef81cf14db4fffc0512
|
|
BLAKE2b-256 checksum How to use checksums |
340ac844bbecad5de827b692a8e47b12cec7b775ef9890cdc3b38283cbbd127f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 1, 2026.
Transparency log