Skip to main content
Pre-release

This release is a pre-release and may not be stable for production use.

xah

What does it stand for?

eXtensible Agent Harness—or perhaps “Not Another Harness!”

How is it pronounced?

The a is silent.

Should I use xah?

xah is for people comfortable with Python development—directly or via agents—who want fine-grained control over how their agents behave.

Who might find it useful?

xah may be useful if you want to:

  • Work with locally hosted models, whose tool discipline may not always be reliable.
  • Add custom tools—for example, ensure the agent can only run the right version of Python.
  • Add validation that blocks misbehavior even when prompts asking the agent not to do something have failed.
  • Add tools that aren't typically available in existing harnesses.
  • Subclass or extend existing tools, validation workflows, or subagents.
  • Extend agents to non-coding workflows.

Who is xah not for?

  • If you use frontier models exclusively and they already behave roughly how you want, a mainstream off-the-shelf agent may be a better fit.
  • If you do not want to work in Python or maintain code-level customizations, xah's main strength—extending the harness in Python—may not be useful to you.

Why does xah exist?

There are two main motivations for xah: extensibility, and adapting ACP for agents beyond coding.

Extensibility

Existing harnesses can be limiting when a developer—or an agent working with them—needs to develop tools in a fine-grained, debuggable way. Common approaches tend to fall into a few groups:

  • Instructions: add more context in files such as AGENTS.md or skills, then hope the agent follows it.
  • Configuration: set coarse-grained options for behavior and permissions.
  • Plugin systems: gain more power, but learn a separate workflow; plugins can also be difficult to debug when they run through the agent.

These approaches have their place, but they aren't a substitute for being able to change the harness directly. xah makes it straightforward to develop and debug custom tools and validation as Python code. A prompt can ask an agent not to misbehave; code can block it from doing so.

xah is built on Pydantic AI and Pydantic Deep Agents.

Adapting ACP for non-coding agents

The Agent Client Protocol (ACP) is designed to connect coding agents with clients such as editors and IDEs. It provides a standard communication interface, rather than a bespoke integration for every agent and client. ACP is not an agent-to-agent coordination protocol.

xah begins with the familiar coding-agent use case—an IDE, terminal UI, or similar client—and explores using that client experience with agents for other kinds of work, too.

Get started

Install xah from PyPI and start the server:

pip install xah
xah

For an ephemeral run, use uvx xah. The server needs an ACP client for the interactive interface. See the quick start and PyCharm or Zed setup instructions, then work through the tutorials to extend xah.

Documentation

Visit the xah documentation for setup, ACP client configuration, tutorials, and agent data and skills.

Metadata

Release files for xah 0.0.1a3

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for xah 0.0.1a3
File Size Uploaded Provenance Actions
xah-0.0.1a3.tar.gz 57.1 kB Without provenance Details for xah-0.0.1a3.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for xah 0.0.1a3
File Interpreter ABI Platform Actions
xah-0.0.1a3-py3-none-any.whl Python 3 none any Details for xah-0.0.1a3-py3-none-any.whl

Total release size: 139.8 kB

Release files / xah-0.0.1a3.tar.gz

Download URL xah-0.0.1a3.tar.gz
Size 57.1 kB
Tags Source
SHA-256 checksum
How to use checksums
ed25b41a683e2bc331fbf5b4898aca5cc06c465d45840951b318e7c9fdcf2226
BLAKE2b-256 checksum
How to use checksums
b6ade8da286fd59a2f53a92e565464666098a265dd8fb9de611377a811af7290
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.14.6

Release files / xah-0.0.1a3-py3-none-any.whl

Download URL xah-0.0.1a3-py3-none-any.whl
Size 82.7 kB
Tags Python 3
SHA-256 checksum
How to use checksums
debc6bd829ea2e84cc3dbd1aa3f39a750a2ac9765bf72593b81918441db55c5b
BLAKE2b-256 checksum
How to use checksums
67b8e222e6ed9df61b2f49ea137745a47bf60942976a2ebd62d3e483fe193a28
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.14.6

Security for xah 0.0.1a3

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page