ory-langchain
Ory Agent Security for LangChain / LangGraph.
Adds three things to a LangChain agent with one line:
- Authorization — every tool call is checked against Ory Permissions before it runs.
- Activity auditing — every invocation is recorded in the unified privacy-safe NDJSON log.
- Identity propagation — user → agent → sub-agent delegation, recorded in Ory.
Install
pip install ory-langchain
Use
from langchain.agents import create_agent
from ory_langchain import OryMiddleware
agent = create_agent(
model,
tools=[search, send_email],
middleware=[OryMiddleware()], # gate every tool call through Ory
)
OryMiddleware() reads the shared Ory config at ~/.config/ory-agent-plugins/config.json,
so a login performed by any Ory coding-agent harness — or by ory-argus login — is reused
transparently. Configure a project explicitly with OryMiddleware(project_url=...).
Permission mode
observe(default) — denied tools still run, but apermission.observe_denyactivity event is recorded. Use this to see what would be blocked before enforcing.enforce— denied tools are blocked: the model receives an errorToolMessageand the tool never executes. The posture is read from the Ory project — an admin promotes it to enforce in the Ory Console (Agent Security);ory-argus permissionsshows what this machine resolves.
Activity only
If you only want lifecycle activity (no enforcement), use the callback handler instead:
from ory_langchain import OryCallbackHandler
agent.invoke({"messages": [...]}, config={"callbacks": [OryCallbackHandler()]})
Built on ory-argus, the shared Ory Agent Security core.
1 maintainer
Metadata
1 maintainer
Release files for ory-langchain 1.4.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| ory_langchain-1.4.2.tar.gz | 7.1 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| ory_langchain-1.4.2-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 12.6 kB
Release files / ory_langchain-1.4.2.tar.gz
| Download URL | ory_langchain-1.4.2.tar.gz |
|---|---|
| Size | 7.1 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
a5e367e88814e7f22ef2c1c3d05bb46b19d6460089c8202f4aa5ca76a3bcdc2f
|
|
BLAKE2b-256 checksum How to use checksums |
c699b0b31977ee8d4f5f072268f890dbeecef19eee0c50001765623409a68c37
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
uv/0.12.21 {"installer":{"name":"uv","version":"0.12.21","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Release files / ory_langchain-1.4.2-py3-none-any.whl
| Download URL | ory_langchain-1.4.2-py3-none-any.whl |
|---|---|
| Size | 5.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
54ff42eace2e8f29ead6f9c723c443685bb4dd1380d8ea225f0e87d6be7be187
|
|
BLAKE2b-256 checksum How to use checksums |
e1db5ede30a82d4eaf9c6cbed329a3b81c0d6e68b7f90d689eb111df8082acb4
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
uv/0.12.21 {"installer":{"name":"uv","version":"0.12.21","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
