Kimss Forge — open-source agent harness
Build and run agents with any model — free, forever. Connect Kimss when production needs governance.
Kimss Forge (kimss-forge on PyPI, import kimss_forge) is a small MIT-licensed harness: a local multi-turn tool loop that talks to any OpenAI-compatible endpoint (OpenAI, Azure/Foundry, Anthropic-compatible proxies, Ollama, vLLM). No Kimss account required to develop and test.
When your security team needs identity, kill switch, budgets, and audit for production, flip one argument — gateway="kimss" — and traffic routes through the Kimss AI Gateway.
from kimss_forge import Agent, tool
@tool
def multiply(a: float, b: float) -> float:
"""Multiply two numbers."""
return a * b
# Local — your provider key only
agent = Agent(model="gpt-4o-mini", tools=[multiply])
print(agent.run("What is 6 times 7?"))
# Production — one line to the Kimss control plane
agent = Agent(
model="custom:your-vaulted-model",
tools=[multiply],
gateway="kimss",
agent_id="ops_bot",
workspace_key="kimss_...",
)
Naming (unified)
| Surface | Name |
|---|---|
| Product | Kimss Forge |
| GitHub | kimss-ai/kimss-forge |
| PyPI | kimss-forge |
| Import | import kimss_forge / from kimss_forge import Agent |
| Monorepo SSOT | kimssApi/kimss-forge/ |
Why this exists
| Layer | Cost | What you get |
|---|---|---|
| Forge (this package) | Free / MIT | Run agents, tools, MCP; any model endpoint |
| Kimss Developer gateway | Free tier (25k governed requests/mo) | Identity, audit trail, kill switch |
| Kimss Production+ | Paid | Authority Boundary, RBAC, Threat Intercepts, PII scrub |
| Kimss Scale / Enterprise | Paid | SSO, SCIM, retention, schema isolation |
Developers adopt Forge to ship faster. CISOs purchase the control plane when production governance is mandatory — without rewriting the agent.
Install
pip install kimss-forge
# optional MCP tools:
pip install 'kimss-forge[mcp]'
Local (zero Kimss)
export OPENAI_API_KEY=sk-...
# optional: OPENAI_BASE_URL=https://your-endpoint/v1
python examples/01_local_agent.py
Production via Kimss (one line)
- Sign up at kimss.ai (Developer tier is free).
- Vault your provider under Connected Infrastructure.
- Mint a
kimss_...workspace key. - Set
gateway="kimss",agent_id=..., and the workspace key.
Agent(
model="custom:your-vaulted-model",
gateway="kimss", # → https://api.kimss.ai/v1
agent_id="fleet_reporter",
workspace_key="kimss_...",
)
Every call sends X-Kimss-Agent-Id. Disable that agent in the Kimss UI and subsequent hops return 403 (kill switch). Paid tiers add Authority Boundary, Team & Access, SCIM/SSO, and more — see pricing.
Examples
| Script | What it shows |
|---|---|
examples/01_local_agent.py |
Local chat, no tools |
examples/02_tools.py |
@tool functions |
examples/03_mcp.py |
MCP stdio tools ([mcp] extra) |
examples/04_production_kimss.py |
Gateway connect |
Design decision
See ADR.md (why Forge is separate from the proprietary Hermis server loop, and why kill switch stays free).
Related
- Control-plane client (register agents, report usage):
kimss/ kimss-python-sdk - Gateway quickstart: kimss-python-quickstart
- Docs: Agent harness · Open source
License
MIT — see LICENSE.
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file kimss_forge-0.1.0.tar.gz.
File metadata
- Download URL: kimss_forge-0.1.0.tar.gz
- Upload date:
- Size: 13.2 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
6e81184fe9f23a63193b0b992835c3590ac05feeef6f554c3a0ed4338449c405
|
|
| MD5 |
0dd12257c1bec88701546881dbfd477a
|
|
| BLAKE2b-256 |
4c7063f5f16e7263c0edda3c201a658803c02e4aa68ffd3c000419c12091f5d8
|
Provenance
The following attestation bundles were made for kimss_forge-0.1.0.tar.gz:
Publisher:
publish.yml on kimss-ai/kimss-forge
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
kimss_forge-0.1.0.tar.gz -
Subject digest:
6e81184fe9f23a63193b0b992835c3590ac05feeef6f554c3a0ed4338449c405 - Sigstore transparency entry: 2817119795
- Sigstore integration time:
-
Permalink:
kimss-ai/kimss-forge@d740a40b0eac7d636bcd763fd4f710b24069cf0a -
Branch / Tag:
refs/tags/v0.1.0 - Owner: https://github.com/kimss-ai
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@d740a40b0eac7d636bcd763fd4f710b24069cf0a -
Trigger Event:
workflow_dispatch
-
Statement type:
File details
Details for the file kimss_forge-0.1.0-py3-none-any.whl.
File metadata
- Download URL: kimss_forge-0.1.0-py3-none-any.whl
- Upload date:
- Size: 12.4 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
6d7fb2b0a509e5247e63090f01fc7463818d6ff30997fbf484df2d6b3a3b875b
|
|
| MD5 |
f6541152d4e58db9080e1ee71d462205
|
|
| BLAKE2b-256 |
9dae4db7957b4b56d83ebe03a56084e0e648170744bd5d9bd8deadb28185650d
|
Provenance
The following attestation bundles were made for kimss_forge-0.1.0-py3-none-any.whl:
Publisher:
publish.yml on kimss-ai/kimss-forge
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
kimss_forge-0.1.0-py3-none-any.whl -
Subject digest:
6d7fb2b0a509e5247e63090f01fc7463818d6ff30997fbf484df2d6b3a3b875b - Sigstore transparency entry: 2817119915
- Sigstore integration time:
-
Permalink:
kimss-ai/kimss-forge@d740a40b0eac7d636bcd763fd4f710b24069cf0a -
Branch / Tag:
refs/tags/v0.1.0 - Owner: https://github.com/kimss-ai
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@d740a40b0eac7d636bcd763fd4f710b24069cf0a -
Trigger Event:
workflow_dispatch
-
Statement type: