ory-langchain

Ory Agent Security for LangChain / LangGraph.

Adds three things to a LangChain agent with one line:

Authorization — every tool call is checked against Ory Permissions before it runs.
Activity auditing — every invocation is recorded in the unified privacy-safe NDJSON log.
Identity propagation — user → agent → sub-agent delegation, recorded in Ory.

Install

pip install ory-langchain

Use

from langchain.agents import create_agent
from ory_langchain import OryMiddleware

agent = create_agent(
    model,
    tools=[search, send_email],
    middleware=[OryMiddleware()],   # gate every tool call through Ory
)

OryMiddleware() reads the shared Ory config at ~/.config/ory-agent-plugins/config.json, so a login performed by any Ory coding-agent harness — or by ory-argus login — is reused transparently. Configure a project explicitly with OryMiddleware(project_url=...).

Permission mode

observe (default) — denied tools still run, but a permission.observe_deny activity event is recorded. Use this to see what would be blocked before enforcing.
enforce — denied tools are blocked: the model receives an error ToolMessage and the tool never executes. The posture is read from the Ory project — an admin promotes it to enforce in the Ory Console (Agent Security); ory-argus permissions shows what this machine resolves.

Activity only

If you only want lifecycle activity (no enforcement), use the callback handler instead:

from ory_langchain import OryCallbackHandler

agent.invoke({"messages": [...]}, config={"callbacks": [OryCallbackHandler()]})

Built on ory-argus, the shared Ory Agent Security core.

Metadata

Release files for ory-langchain 1.4.3

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for ory-langchain 1.4.3
File	Size	Uploaded
ory_langchain-1.4.3.tar.gz	7.1 kB	Oct 3, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for ory-langchain 1.4.3
File	Interpreter	ABI	Platform	Reset
ory_langchain-1.4.3-py3-none-any.whl 5.5 kB Oct 3, 2026	Python 3	none	any	Details

Total release size: 12.6 kB

Release files / ory_langchain-1.4.3.tar.gz

Download URL	ory_langchain-1.4.3.tar.gz
Size	7.1 kB
Tags	Source
SHA-256 checksum How to use checksums	`a47e9259ce99db7b549e868ff7a2858f6e19048a81073b2f132044f3bc8acfde`
BLAKE2b-256 checksum How to use checksums	`4e4a7e286fdbe82b44bdc8eb6a2ca0e1cfefe06dc6b6f8c5a343ff5c5e3a289a`
Upload date	Oct 3, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`uv/0.12.22 {"installer":{"name":"uv","version":"0.12.22","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}`

Release files / ory_langchain-1.4.3-py3-none-any.whl

Download URL	ory_langchain-1.4.3-py3-none-any.whl
Size	5.5 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`3e87ad35a94b0cd073fddf4ba26df717fd3d1aeb9a0174fdea8574553403ad76`
BLAKE2b-256 checksum How to use checksums	`a718b21d546c9adcd99607e9729da1d5a735f4cbf72f82556eeae80d3d8e78b0`
Upload date	Oct 3, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`uv/0.12.22 {"installer":{"name":"uv","version":"0.12.22","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}`