ory-llamaindex 0.11.1

Ory Agent Security for LlamaIndex — per-tool authorization, tracing, and identity propagation by wrapping FunctionTools. Built on ory-argus.

ory-llamaindex

Ory Agent Security for LlamaIndex.

Wraps your LlamaIndex tools so every call is authorized against Ory Permissions, traced, and tied to the user → agent identity — built on ory-argus.

pip install ory-llamaindex

from llama_index.core.agent.workflow import FunctionAgent
from ory_llamaindex import guard_tools

agent = FunctionAgent(tools=guard_tools([search_tool, email_tool]), llm=llm)

In enforce mode (ORY_PERMISSION_MODE=enforce) a denied tool raises an error surfaced to the agent; the tool never runs. In observe mode (default) it runs and a permission.observe_deny span is recorded.

For tracing across paths that bypass the wrapped tools, register the instrumentation handler:

from llama_index.core.instrumentation import get_dispatcher
from ory_llamaindex import ory_event_handler
get_dispatcher().add_event_handler(ory_event_handler())

Credentials come from the shared ~/.config/ory-agent-plugins/config.json.