ory-agent-framework 0.11.1

Ory Agent Security for the Microsoft Agent Framework — per-tool authorization, tracing, and identity propagation via function middleware. Built on ory-argus.

ory-agent-framework

Ory Agent Security for the Microsoft Agent Framework (the successor to AutoGen + Semantic Kernel).

Gates every function/tool call through Ory Permissions via function middleware, traces invocations, and propagates the user → agent identity — built on ory-argus.

pip install ory-agent-framework

from ory_agent_framework import ory_function_middleware

agent = chat_client.create_agent(
    instructions="…",
    tools=[search, send_email],
    middleware=[ory_function_middleware()],
)

In enforce mode (ORY_PERMISSION_MODE=enforce) a denied call sets the result to the denial and terminates without invoking the function. In observe mode (default) the function runs and a permission.observe_deny span is recorded.

Credentials come from the shared ~/.config/ory-agent-plugins/config.json.