ory-argus (Python)

Ory Agent Security core for Python — the sibling of the TypeScript @ory/argus package.

It provides the shared primitives that the Ory Agent SDK integrations (LangChain, OpenAI Agents, Pydantic AI, Microsoft Agent Framework, CrewAI, LlamaIndex, Google ADK, AWS Strands, Google Antigravity) build on:

1. Authenticate the session on startup (user PKCE login + agent OAuth2 identity).
2. Authorize every tool call against Ory Permissions (Zanzibar-style relation checks).
3. Record every tool invocation as a privacy-safe structured activity event in the unified NDJSON log.
4. Propagate identity through the user → agent → sub-agent delegation chain.

Interop with the TypeScript core

ory-argus reads and writes the same shared config file as every TS harness plugin — ~/.config/ory-agent-plugins/config.json (XDG / %APPDATA% aware). A user who logs in via a TS coding-agent harness has those credentials transparently reused by a Python SDK integration, and vice-versa. This package never invents a second config location; use get_data_dir() / get_config_path().

Install: pip install ory-argus · Console script: ory-argus