ory-adk 0.11.1

Ory Agent Security for the Google Agent Development Kit (ADK) — per-tool authorization, tracing, and identity propagation via before/after tool callbacks. Built on ory-argus.

ory-adk

Ory Agent Security for the Google Agent Development Kit (ADK).

Authorizes every tool call against Ory Permissions via ADK's before/after tool callbacks, traces invocations, and propagates user → agent → sub-agent identity — built on ory-argus.

pip install ory-adk

from google.adk.agents import Agent
from ory_adk import ory_before_tool_callback, ory_after_tool_callback

agent = Agent(
    name="assistant",
    model="gemini-2.5-flash",
    tools=[search, send_email],
    before_tool_callback=ory_before_tool_callback(),   # gate every tool call
    after_tool_callback=ory_after_tool_callback(),     # trace completions
)

In enforce mode (ORY_PERMISSION_MODE=enforce) a denied tool is skipped — ADK returns the denial to the model and the tool never runs. In observe mode (default) the tool runs and a permission.observe_deny span is recorded. When the model delegates to a sub-agent (transfer_to_agent), a sub-agent identity + agent→subagent delegation are recorded.

Credentials come from the shared ~/.config/ory-agent-plugins/config.json, so a login from any Ory harness or ory-argus login is reused automatically. See docs/sdk-integrations.md.