auto-nomos-sdk (Python)
Python SDK for Nomos — multi-agent orchestration security.
Mirrors the TS SDK so LangGraph / CrewAI / AutoGen orchestrators get the same chain-aware authorize / proxy story.
Install
pip install auto-nomos-sdk
You also need the nomos-ucan CLI on PATH for UCAN minting:
npm install -g @auto-nomos/ucan-cli
Use — root agent
from nomos import AuthGuard
guard = AuthGuard(api_key="nomos_<id>_<secret>", pdp_url="https://pdp.example.com")
decision = guard.authorize(
ucan="<jwt>",
command="github:repo:read",
resource={"repo": "org/test-repo"},
)
if decision.allow:
...
Use — fork a child agent (LangGraph / CrewAI / AutoGen)
import subprocess, os, json
from nomos import fork_child, read_parent_chain_from_env
# Inside the parent agent (already authorized once and got a child UCAN
# minted via nomos-ucan or via the control-plane mint endpoint):
chain, env = fork_child(
parent_chain=read_parent_chain_from_env().chain,
child_ucan_jwt=child_jwt,
parent_receipt_id=last_receipt_id,
swarm_id=swarm_id,
)
subprocess.Popen(["python", "child_agent.py"], env={**os.environ, **env})
The child process's AuthGuard() automatically picks up
NOMOS_PARENT_UCAN_CHAIN and includes the full root → leaf chain on
every authorize / proxy call.
Env vars (orchestrator-agnostic wire format)
| Var | Purpose |
|---|---|
NOMOS_PARENT_UCAN_CHAIN |
JSON UCAN array (root-first). |
NOMOS_PARENT_UCAN_CHAIN_FILE |
Fallback file path when env exceeds OS limits. |
NOMOS_PARENT_RECEIPT_ID |
Causation back-link to parent's last receipt. |
NOMOS_SWARM_ID |
Explicit swarm id; PDP otherwise derives. |
NOMOS_MAX_CHAIN_DEPTH |
Override depth cap; default 8. |
NOMOS_UCAN_BIN |
Path to nomos-ucan binary; default nomos-ucan on PATH. |
1 maintainer
Metadata
1 maintainer
Release files for nomos-sdk 0.1.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| nomos_sdk-0.1.1.tar.gz | 10.2 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| nomos_sdk-0.1.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 18.2 kB
Release files / nomos_sdk-0.1.1.tar.gz
| Download URL | nomos_sdk-0.1.1.tar.gz |
|---|---|
| Size | 10.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
d66e16eabe42c4d25ca7fd6a8ff135e4ccd8b46d51b0c55f9ed43431ee4534a8
|
|
BLAKE2b-256 checksum How to use checksums |
bc1f1461e300374075ae0ae2f53ea4a1e2c3b04cb1c55380829d60b0708db336
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on May 24, 2026.
Transparency logRelease files / nomos_sdk-0.1.1-py3-none-any.whl
| Download URL | nomos_sdk-0.1.1-py3-none-any.whl |
|---|---|
| Size | 8.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
7649ee731e25d9df43b51b9b36c2aec6ee6242b86941db211aed1ed00f2e4fa2
|
|
BLAKE2b-256 checksum How to use checksums |
027c14ba8899892afcab453a3b017110410784140f3f62f9d51929e5ae569745
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on May 24, 2026.
Transparency log
