Ory Agent Security for AWS Strands Agents — per-tool authorization, tracing, and identity propagation via tool-invocation hooks. Built on ory-argus.
Project description
ory-strands
Ory Agent Security for AWS Strands Agents.
Authorizes every tool call against Ory Permissions via Strands' tool-invocation hooks,
traces invocations, and propagates user → agent identity — built on
ory-argus.
pip install ory-strands
from strands import Agent
from ory_strands import OryHooks
agent = Agent(model=..., tools=[search, send_email], hooks=[OryHooks()])
OryHooks subscribes to BeforeToolCallEvent (authorize) and
AfterToolCallEvent (trace). In enforce mode (ORY_PERMISSION_MODE=enforce) a
denied tool is cancelled — Strands returns the denial as an error tool result and the
tool never runs. In observe mode (default) the tool runs and a permission.observe_deny
span is recorded.
Credentials come from the shared ~/.config/ory-agent-plugins/config.json, so a login from
any Ory harness or ory-argus login is reused automatically. See
docs/sdk-integrations.md.
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file ory_strands-0.12.1.tar.gz.
File metadata
- Download URL: ory_strands-0.12.1.tar.gz
- Upload date:
- Size: 4.3 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: uv/0.11.28 {"installer":{"name":"uv","version":"0.11.28","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"macOS","version":null,"id":null,"libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
d7e28b979d1e13d1f8383d77c68ce1d35c42d64b7fe9cdacf25646692be53d64
|
|
| MD5 |
44ad31c4362c77ae52918434a01a40e0
|
|
| BLAKE2b-256 |
dd4d6ceaf673be86ef83ac1b7876b4e42077c1a6eaedbf8e6613233a00adb24c
|
File details
Details for the file ory_strands-0.12.1-py3-none-any.whl.
File metadata
- Download URL: ory_strands-0.12.1-py3-none-any.whl
- Upload date:
- Size: 3.6 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: uv/0.11.28 {"installer":{"name":"uv","version":"0.11.28","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"macOS","version":null,"id":null,"libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
dbf05658044e5f69ddabd30dcce0d6f20b243e8aea1a24844359879aa96f1779
|
|
| MD5 |
dde814de877d57d59c2c0e5626a8ff50
|
|
| BLAKE2b-256 |
d7205914ddcd07c4ef35228bc64ca4c8de49d6a9ac3eb60084fab3a31fce14c7
|
