ory-crewai 0.11.1

Ory Agent Security for CrewAI — per-tool authorization, tracing, and identity propagation by wrapping tools. Built on ory-argus.

ory-crewai

Ory Agent Security for CrewAI.

Wraps your CrewAI tools so every call is authorized against Ory Permissions, traced, and tied to the user → agent identity — built on ory-argus.

pip install ory-crewai

from crewai import Agent
from ory_crewai import guard_tools

agent = Agent(role="researcher", tools=guard_tools([search, send_email]))

In enforce mode (ORY_PERMISSION_MODE=enforce) a denied tool raises an error that CrewAI surfaces to the LLM; the tool never runs. In observe mode (default) the tool runs and a permission.observe_deny span is recorded.

For tracing across paths that bypass the wrapped tools, also register the event listener:

from ory_crewai import ory_event_listener
listener = ory_event_listener()  # traces ToolUsage events

Credentials come from the shared ~/.config/ory-agent-plugins/config.json.