This release is a pre-release and may not be stable for production use.
Morse Python SDK
Unified observability for AI agents and infrastructure. One SDK.
Install
pip install morse-ai
With an adapter (installs the underlying provider SDK too):
pip install "morse-ai[anthropic]"
pip install "morse-ai[openai]"
pip install "morse-ai[openai_agents]"
pip install "morse-ai[langgraph]" # also pulls langchain-core
pip install "morse-ai[claude_agent_sdk]"
pip install "morse-ai[all]" # every adapter
The import name is morse_ai (underscore) regardless of which extra
you install — import morse_ai.
Supported versions
Python 3.11+. We verify two versions of each framework — the declared floor
and the current latest. Versions between them are expected to work but are
not verified; below the floor is unsupported. The latest half is still
being built out (MHQ-930), so today only the floor is verified. Policy:
engineering/SDK_VERSION_SUPPORT.md.
The versions below are what CI installs and runs the adapter suite against — not the widest version we believe works.
What is verified against the real installed package is the structural contract
— every adapter monkey-patches a method on someone else's class
(Messages.create, Runner.run, ClaudeSDKClient.receive_response, …), and
tests/contract/ asserts those targets still exist on every PR. Without it an
upstream rename makes install() return False silently, and you get no
telemetry and no error.
Behavioural coverage is still mostly fixture-driven, so a green suite is weaker evidence than it looks; cross-version coverage is MHQ-930.
| Framework | Declared floor | Tested in CI |
|---|---|---|
anthropic |
>=0.40.0 |
0.86.0 |
openai |
>=1.50.0 |
2.29.0 |
openai-agents |
>=0.15.0,<1.0 |
0.15.2 |
langgraph |
>=1.0 |
1.2.2 |
langchain-core |
>=1.0 |
1.4.0 |
claude-agent-sdk |
>=0.1.0 |
0.2.130 |
Quick Start
import morse_ai
morse_ai.init(api_key="mhq_xxxxx") # pragma: allowlist secret
morse_ai.record(
agent="lead-qualifier",
success=True,
outcome="qualified",
cost=0.043,
)
Or trace a multi-step run:
with morse_ai.run("lead-qualifier") as r:
with morse_ai.span("fetch-lead", "tool"):
...
r.set_outcome(True, "qualified")
record()/run()/span()/@trace_agent all send real OpenTelemetry
spans over OTLP by default — see Transport below.
Zero-config instrumentation
pip install "morse-ai[anthropic]"
export MORSE_API_KEY=mhq_xxxxx
# your existing anthropic / openai / openai-agents / langgraph /
# claude-agent-sdk code is now traced — no morse_ai.wrap() calls anywhere
When the SDK initializes, it scans sys.modules for installed
provider SDKs — and registers an import hook for ones imported later —
and calls each detected adapter's install(). Today that covers
anthropic, openai (raw clients, and libraries that drive one: LiteLLM's
OpenAI provider, Agno's OpenAIChat), openai-agents (imports as agents),
langgraph, and claude-agent-sdk. Priority rules: when both LangGraph and
generic LangChain are importable, only the LangGraph adapter installs; and the
raw OpenAI adapter does not record a call that a framework adapter already
records (an OpenAI Agents run, a LangChain ChatOpenAI call under the
callback handler), to avoid duplicate spans. google-genai and LiteLLM's
non-OpenAI providers are not covered: send those over OTLP. Opt out entirely with
MORSE_DISABLE_AUTO_DETECT=1; you can still call any adapter's
install()/wrap() directly.
The plain LangChain adapter (MorseCallbackHandler, for chains
outside a LangGraph graph) is not auto-installed — pass it via
callbacks=[...] explicitly (see below).
Adapters
Anthropic
from morse_ai.adapters import anthropic as av_anthropic
import anthropic
client = av_anthropic.wrap(anthropic.Anthropic())
# every messages.create call now emits an `llm` span automatically
response = client.messages.create(
model="claude-sonnet-4-6",
max_tokens=1024,
messages=[{"role": "user", "content": "Qualify this lead..."}],
)
wrap() is idempotent and works whether or not auto-detect already
installed the adapter globally. Pass summarize=True (or use the
summarize() context manager per-call) to also emit a sibling
memory span.
OpenAI
from morse_ai.adapters import openai as av_openai
import openai
client = av_openai.wrap(openai.OpenAI())
response = client.chat.completions.create(
model="gpt-4.1",
messages=[{"role": "user", "content": "Qualify this lead..."}],
)
Context segments (messages + tools) are captured automatically on
every call — no separate extraction step. responses.create is traced the
same way.
- Streaming.
stream=True(and the.stream()helpers when the adapter is installed) records onellmspan when the stream ends. Chat Completions only sends usage on a stream withstream_options={"include_usage": True}; without it the span has the model and output but no tokens (metadata.usage_unavailable = true). - Tools. Your code runs the tools, so the adapter infers a
toolspan from the response that asked for a call and the next request that carries its result (metadata.timing = "inferred": the span covers the gap between the two calls). A failed call records a failedllmspan with the error.
OpenAI Agents SDK, LangGraph, Claude Agent SDK
These three are auto-installed globally by zero-config detection (see
above) — no wrap call needed once the package is importable and
MORSE_API_KEY is set. To install manually (e.g. to control ordering,
or with auto-detect disabled):
from morse_ai.adapters import openai_agents, langgraph, claude_agent_sdk
openai_agents.install() # patches agents.Runner.run / run_sync / run_streamed
langgraph.install() # registers a callback handler globally with LangChain
claude_agent_sdk.install() # patches ClaudeSDKClient.receive_response
Each emits an outer agent span, per-call llm + tool spans,
and adapter-specific spans (LangGraph: nested chain spans; OpenAI
Agents: subagent.spawn-shaped handoff spans; Claude Agent SDK: a
sub-agent launch is the tool Agent (or Task) span tagged
metadata.askl_is_spawn = true, with the sub-agent's own agent, tool and
llm spans nested under it. The Python adapter does not emit a span per
customer hook; failed tools carry the tool's error text).
Plain LangChain (chains, LLMs, tools, retrievers)
Not auto-installed — attach MorseCallbackHandler via callbacks:
from morse_ai.adapters.langchain import MorseCallbackHandler
handler = MorseCallbackHandler("my-agent")
chain = SomeChain(..., callbacks=[handler])
Called inside an existing morse_ai.run() context, the handler
appends child spans to that trace. Called standalone (no enclosing
run()), it auto-creates a trace that flushes when the outermost
chain completes — no morse_ai.run() wrapper required.
Linking runs to business records and versions
Tell Morse which business record a run handled and which version of your agent produced it, so outcomes that arrive later (a ticket closed, a refund issued) land on the right run and a change can be compared with what came before.
morse_ai.init(api_key="mhq_xxxxx", agent_version="2.4.1") # pragma: allowlist secret
with morse_ai.run(
"support-triage",
record_keys={"zendesk_ticket": 4812}, # known up front...
agent_version="2.5.0-rc1", # ...overrides init() for this run
):
morse_ai.link_record("order_id", "A-1009") # ...or discovered mid-run
with morse_ai.span("classify", "llm"):
morse_ai.set_prompt("triage", version=7) # pinned to this span
morse_ai.set_prompt("summarise") # no version: prompts kept in code
-
Record keys.
link_record(key_type, key_value)andrun(record_keys={...})attach ids from your own systems.key_typeis lower-cased and must match^[a-z0-9][a-z0-9_.-]{0,63}$; values are strings or ints, 1-256 characters. Up to 20 per run; a repeatedkey_typereplaces its earlier value. Invalid keys are dropped and logged at debug level, never raised. Use opaque ids, not personal data such as email addresses. -
agent_version. Your own label (max 128 characters).init(agent_version=...)is the default for every run;run(..., agent_version=...)overrides it. -
set_prompt(name, version=None). Records which named prompt a run used. Inside aspan()the reference is pinned to that span. Up to 20 per run. Over OTLP a span carries one reference, so if several are set on the same span the last one wins there; the JSON path keeps them all. -
Git revision. Detected automatically from
MORSE_GIT_REVISION,GITHUB_SHA,CI_COMMIT_SHA,RAILWAY_GIT_COMMIT_SHA,VERCEL_GIT_COMMIT_SHA,RENDER_GIT_COMMIT,SOURCE_VERSION, thengit rev-parse HEAD, in that order. In a Docker image with no.gitdirectory, inject it at build time:ARG GIT_SHA ENV MORSE_GIT_REVISION=$GIT_SHA
(
docker build --build-arg GIT_SHA=$(git rev-parse HEAD) .) -
service.version. IfOTEL_RESOURCE_ATTRIBUTEScontainsservice.version=..., it is sent with every run. No code change needed.
Outside an open trace, link_record() and set_prompt() do nothing.
Fetching hosted prompts
import morse_ai
prompt = morse_ai.get_prompt("triage") # label="production"
prompt = morse_ai.get_prompt("triage", version=3) # or pin a version
same = morse_ai.get_prompt("triage", if_none_match=prompt.etag)
if same.not_modified: ... # 304, other fields are None
prompt = morse_ai.get_prompt("triage", cache_ttl=60) # optional in-memory cache
get_prompt is a thin GET: no retries, no fallback. Inside an open run it also links that run to
the fetched prompt version (link_source="fetch"), so the trace shows which version ran; pass
link=False to opt out. A cache hit links too, a 304 links via the SDK's own cached copy, and with
no open run nothing happens. If you also call set_prompt for the same name, version and span, one
reference is kept. It raises PromptAccessError (403, the key needs the
prompts:read scope), PromptNotFoundError (404) and PromptRateLimitError (429, .retry_after);
network failures raise httpx's transport errors.
We recommend caching in some form so Morse is not on your request hot path. You have three options:
- Call the API directly on every use (the default). Responses carry
Cache-Control: max-age=30. - Use your own cache, with a bundled fallback prompt if you want one.
- Pass
cache_ttl(seconds) for a small process-local LRU. A fresh entry is returned without a request; a stale one is revalidated withIf-None-Match(a 304 refreshes it). Errors are never masked by stale data, so keep your own fallback if you want one.Noneor0(the default) uses no cache, and passing your ownif_none_matchbypasses it.configure_prompt_cache(max_entries=256)sets the size andclear_prompt_cache()empties it.
Capturing logs alongside agent traces
If you already use stdlib logging or structlog, you can ship every
log line to Morse with one line of config. Each record is
auto-correlated with the active trace (the one entered via
morse_ai.run(), @morse_ai.trace_agent, or any active
morse_ai.span(...)) and appears under the trace's Logs tab on
the dashboard.
The shim re-uses the SDK's batched transport — no blocking I/O on your hot path.
Stdlib logging
import logging
import morse_ai
from morse_ai.logging import MorseHandler
morse_ai.init(api_key="mhq_xxxxx") # pragma: allowlist secret
logging.basicConfig(level=logging.INFO, handlers=[MorseHandler()])
structlog
import structlog
import morse_ai
from morse_ai.logging import structlog_processor
morse_ai.init(api_key="mhq_xxxxx") # pragma: allowlist secret
structlog.configure(processors=[structlog_processor, structlog.processors.JSONRenderer()])
Log lines emitted outside any trace context still flow to Morse — they
just won't be correlated to a specific trace. Errors inside the
handler / processor are absorbed and never propagate into your
logger.info(...) call.
Cost
cost_usd is computed automatically from the model + token counts on
every llm span the adapters above emit, using a bundled pricing
table — no separate call needed. record() doesn't auto-compute —
pass cost yourself if you have it.
Transport
run()/span()/trace_agent/record() emit real OpenTelemetry spans
— TracerProvider / BatchSpanProcessor / TraceIdRatioBased sampler
— over OTLP (protobuf+gzip). This is a core dependency
(opentelemetry-sdk, opentelemetry-exporter-otlp-proto-http), not an
optional extra — every install speaks OTLP. track()/batch_track()
are a lower-level, non-trace-shaped escape hatch of their own — prefer
record().
PII Redaction
The SDK ships with PII redaction on by default. Span attributes and event payloads are scrubbed inside your process before any data leaves for the Morse ingest endpoint. You can opt out per-pattern, opt out entirely, or extend the catalogue with your own regex.
What gets redacted by default
| Pattern key | Matches | Replacement |
|---|---|---|
api_key_prefixed |
sk-…, sk_live_…, sk_test_…, mhq_…, GitHub PATs (ghp_…/gho_…/…), Slack tokens (xoxb-…), AWS access keys (AKIA…/ASIA…/…) |
[REDACTED:api_key] |
jwt |
Three-segment base64url tokens (eyJ…) |
[REDACTED:jwt] |
credit_card |
13-19 digit groups passing the Luhn checksum | [REDACTED:credit_card] |
email |
RFC-5322-ish address regex | [REDACTED:email] |
phone_us |
US-format phone numbers | [REDACTED:phone] |
phone_e164 |
International E.164 phone numbers | [REDACTED:phone] |
ssn_us |
US Social Security numbers (999-99-9999) |
[REDACTED:ssn] |
ip_address |
IPv4 / IPv6 — disabled by default, opt-in | [REDACTED:ip] |
secret_assignment |
Key-context secret assignments: password=, client_secret:, authorization: Bearer …, PGPASSWORD= and similar. Excludes token counts (input_tokens=, max_tokens=) — those are telemetry, not credentials. |
[REDACTED:secret] |
Configuring redaction
import morse_ai
morse_ai.init(
api_key="mhq_xxxxx", # pragma: allowlist secret
# All four kwargs below are optional; defaults are shown.
redaction_enabled=True,
redaction_disabled_patterns=None, # e.g. ["email", "phone_us"]
redaction_extra_patterns=None, # e.g. [r"INTERNAL-\w+"]
)
redaction_enabled=Falseturns OFF every built-in pattern at the SDK layer. The server-side mandatory floor still applies —api_key_prefixed,jwt,credit_card, andssn_usare rewritten on ingest regardless of SDK configuration. Opting out shifts where redaction happens, it does not remove it.redaction_disabled_patternslets you skip individual non-mandatory keys (email,phone_us,phone_e164,ip_address). Trying to disable a mandatory pattern raisesValueErroratinit().redaction_extra_patternsaccepts up to 10 customer regex strings (each ≤ 256 chars). Each must compile viare.compile(); matches are replaced with[REDACTED:custom]. Built-in patterns run before extra patterns, so a custom regex sees the already-redacted text.
What is NOT touched
Non-string leaves (numbers, booleans, None, opaque objects) pass
through untouched. Span IDs, timestamps, durations, token counts, and
other metadata are never redacted.
Docs
Full reference — every adapter, all init() options, configuration,
troubleshooting — lives at docs.morsehq.dev.
This README stays a quickstart.
Naming
The PyPI project is morse-ai; the import name is morse_ai
(Python's underscore convention). The npm package for the TypeScript
SDK is @morsehq-dev/sdk — see that package's README for why it
doesn't match this one's naming.
Metadata
Release files for morse-ai 0.7.0rc1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| morse_ai-0.7.0rc1.tar.gz | 612.5 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| morse_ai-0.7.0rc1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 839.9 kB
Release files / morse_ai-0.7.0rc1.tar.gz
| Download URL | morse_ai-0.7.0rc1.tar.gz |
|---|---|
| Size | 612.5 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
fa908541792b0d5bd2b7ba7a184f03ec08884a8967c684c2f8357b1b0a24807d
|
|
BLAKE2b-256 checksum How to use checksums |
e0c85b3d6c15013d968ffa45c1f79610b0a13dfd5753219e8d10d2d945d6653d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 24, 2026.
Transparency logRelease files / morse_ai-0.7.0rc1-py3-none-any.whl
| Download URL | morse_ai-0.7.0rc1-py3-none-any.whl |
|---|---|
| Size | 227.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
35c06d4dd268844b034a888dbbc9dbed03deca5ec2cd920c62103ac0caf98f62
|
|
BLAKE2b-256 checksum How to use checksums |
8d889282d10072a80cbba34b87d03ce592f9e88939236d9faed9bc41f7ab4752
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 24, 2026.
Transparency logSecurity for morse-ai 0.7.0rc1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for morse_ai-0.7.0rc1.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 24, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.