moss-openai

MOSS signing integration for OpenAI SDK. Unsigned output is broken output.

Installation

pip install moss-openai

Quick Start

Sign tool calls, completions, and messages from OpenAI:

from openai import OpenAI
from moss_openai import sign_tool_call, sign_completion, sign_message

client = OpenAI()

# Get a completion with tool calls
response = client.chat.completions.create(
    model="gpt-4",
    messages=[{"role": "user", "content": "What's the weather?"}],
    tools=[{"type": "function", "function": {"name": "get_weather", ...}}]
)

# Sign the completion
result = sign_completion(response, agent_id="weather-bot")
print(f"Signed: {result.signature[:20]}...")

# Sign individual tool calls
for choice in response.choices:
    if choice.message.tool_calls:
        for tool_call in choice.message.tool_calls:
            result = sign_tool_call(tool_call, agent_id="weather-bot")

Enterprise Mode

Set MOSS_API_KEY for automatic policy evaluation:

import os
os.environ["MOSS_API_KEY"] = "your-api-key"

from moss_openai import sign_tool_call, enterprise_enabled

print(f"Enterprise: {enterprise_enabled()}")  # True

result = sign_tool_call(
    tool_call,
    agent_id="finance-bot",
    context={"user_id": "u123"}
)

if result.blocked:
    print(f"Blocked by policy: {result.policy.reason}")

Verification

from moss_openai import verify_envelope

verify_result = verify_envelope(result.envelope)
if verify_result.valid:
    print(f"Signed by: {verify_result.subject}")

All Functions

Enterprise Features

Links

• moss-sdk - Core MOSS SDK
• mosscomputing.com - Project site

License

This package is licensed under the Business Source License 1.1.

• Free for evaluation, testing, and development
• Free for non-production use
• Production use requires a MOSS subscription
• Converts to Apache 2.0 on January 25, 2030