ory-openai-agents 0.11.1

Ory Agent Security for the OpenAI Agents SDK — per-tool authorization, tracing, and identity propagation via a tool-input guardrail. Built on ory-argus.

ory-openai-agents

Ory Agent Security for the OpenAI Agents SDK.

Authorizes every tool call against Ory Permissions via a tool-input guardrail, traces invocations, and propagates user → agent identity — built on ory-argus.

pip install ory-openai-agents

from agents import Agent, Runner
from ory_openai_agents import ory_tool_input_guardrail, ory_run_hooks

agent = Agent(
    name="assistant",
    tools=[search, send_email],
    tool_input_guardrails=[ory_tool_input_guardrail()],  # gate every tool call
)
Runner.run(agent, "…", hooks=ory_run_hooks())  # trace completed calls

• observe (default): denied tools still run; a permission.observe_deny span is recorded.
• enforce (ORY_PERMISSION_MODE=enforce): denied tools are rejected — the model receives the denial and the tool never executes.

Credentials are read from the shared ~/.config/ory-agent-plugins/config.json, so a login from any Ory harness or ory-argus login is reused automatically.