xmagic-sdk
Python SDK and CLI for xMagic, Stochastic's AI agent platform.
Status: alpha scaffold. Parts of the surface below are still stubs that raise
NotImplementedError— each is marked with the roadmap phase that implements it. See DESIGN.md for the design plan and TODO.md for current work.
What it does
Working today:
- MCP servers — scaffold containerized (Dockerfile included) MCP servers you can register as xMagic custom tools.
- xMagic API — chat (sync + streaming), file uploads, Drive (knowledge base), skills packaging. The client is implemented but its request/response shapes have not yet been verified against the live API (#2).
Planned:
- Multi-provider (Phase 3) — one interface across xMagic, OpenAI, Anthropic, Google, and (via LiteLLM) 100+ more. Only the xMagic provider is implemented so far; the others are stubs.
- Bring your own model (Phase 3) —
provider:modelrefs with your own API keys. - Async client (Phase 1) —
AsyncXMagicClient, a 1:1 mirror of the sync client. - Local web app (Phase 5) —
xmagic serveruns the xMagic web app locally via proxy.
Install
Requires Python 3.11–3.14.
uv pip install xmagic-sdk # core
uv pip install "xmagic-sdk[all]" # + all provider/serve/mcp extras
Extras are granular if you don't want everything — [mcp] for the server
scaffold, [serve] for the local web app, and [openai] / [anthropic] /
[google] / [litellm] per provider. pip works too if you don't use uv.
From a checkout:
uv pip install -e . # core
uv pip install -e ".[all]" # + all provider/serve/mcp extras
Verify it landed:
xmagic version
Getting started
1. Get an API key
In xmagic.ai: profile → API keys. You'll also want an agent id — create an agent in Studio, and its id appears in the agent's URL.
2. Configure
xmagic configure # prompts for the key, hidden input
This writes ~/.config/xmagic/config.toml with mode 600. Pass
--agent <agent_id> to set a default agent, or --api-key to skip the prompt
in a script.
Prefer environment variables? XMAGIC_API_KEY and XMAGIC_BASE_URL both work
and take precedence over the file:
export XMAGIC_API_KEY="xm-..."
Full precedence is explicit arguments → environment → config file →
defaults, so you can keep a config file for everyday use and override it
per-command. XMAGIC_CONFIG_PATH relocates the file itself.
The config file looks like this, and you can edit it directly:
[xmagic]
api_key = "xm-..."
base_url = "https://api.xmagic.ai/xmagic-backend/v1"
default_agent_id = "..."
[providers.openai] # provider keys, once Phase 3 lands
api_key = "sk-..."
Provider keys are also read from the usual OPENAI_API_KEY,
ANTHROPIC_API_KEY, and GOOGLE_API_KEY variables. Keys are only ever
written to your user config directory, never into a project folder.
3. Talk to your agent
xmagic chat --agent <agent_id> "Summarize our Q3 goals" # one-shot
xmagic chat --agent <agent_id> # interactive session
Responses stream by default; --no-stream waits for the full reply instead.
If you set default_agent_id during configure, drop the --agent flag.
4. Use it from Python
from xmagic import XMagicClient
client = XMagicClient() # reads env/config; or XMagicClient(api_key="xm-...")
chat = client.chats.create("<agent_id>", title="demo")
# Streaming
for event in client.chats.stream("<agent_id>", chat.id, "Explain xMagic skills"):
if event.type == "response":
print(event.text, end="")
# Blocking
resp = client.chats.query("<agent_id>", chat.id, "One-sentence summary?")
XMagicClient is a context manager, so with XMagicClient() as client: closes
the underlying HTTP connection for you. It retries 429 and 5xx with
exponential backoff, honoring Retry-After.
5. Build a custom tool (MCP server)
xmagic mcp init my-tool # scaffold: Dockerfile, compose, FastMCP server
cd my-tool && docker compose up --build
That serves MCP over streamable HTTP at http://localhost:8000/mcp. xMagic
needs a public HTTPS URL to reach it, so for development expose it with a
tunnel:
cloudflared tunnel --url http://localhost:8000
Then register the resulting https://.../mcp URL in the dashboard under
Custom tools → Create tool. xmagic tools register --name ... --url ...
prints the full checklist. Set TOOL_API_KEY in your .env to require a
shared secret — the generated server rejects unauthenticated calls with 401.
6. Package a skill
xmagic skills new my-skill # scaffold SKILL.md
xmagic skills validate my-skill # check frontmatter and layout
xmagic skills pack my-skill # -> my-skill.zip, ready to upload
Upload the zip in the dashboard under Skills.
Next steps
xmagic --help lists every command, and each subcommand takes --help too.
See DESIGN.md for how the pieces fit together.
Once the provider adapters land (Phase 3), chat will accept a
provider:model ref backed by your own key:
xmagic chat -m anthropic:claude-sonnet-5 "Hello!" # not yet implemented
Today that path exits with a NotImplementedError pointing at the roadmap.
Troubleshooting
No API key configured — run xmagic configure, or export
XMAGIC_API_KEY. Check what's actually being picked up with
xmagic configure --help and remember env vars override the config file.
A command prints ... lands in Phase N (see DESIGN.md) — that feature is
scaffolded but not implemented yet. See the status note at the top of this
README.
401 from your MCP server — the generated server requires TOOL_API_KEY
when set. Send it as either x-api-key or Authorization: Bearer <key>.
xMagic can't reach your MCP server — it must be public HTTPS. localhost
won't work; use a tunnel for development.
Development
uv sync --all-extras
uv run pytest
uv run ruff check .
uv run ruff format --check .
CI runs all four across Python 3.11–3.14, and gates on formatting as well as
linting — run uv run ruff format . before pushing.
Commit messages follow Conventional Commits
(feat:, fix:, docs:, test:, chore:, ...; optional scope, e.g. feat(mcp): ...).
Contributing
Contributions are welcome — see CONTRIBUTING.md for setup and the PR workflow, and ISSUES.md for filing bugs, feature requests, and security reports. All participants are expected to follow our Code of Conduct.
License
Apache-2.0 © Stochastic
Metadata
Release files for xmagic-sdk 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| xmagic_sdk-0.1.0.tar.gz | 52.8 kB | With provenance | Details for xmagic_sdk-0.1.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| xmagic_sdk-0.1.0-py3-none-any.whl | Python 3 | none | any | Details for xmagic_sdk-0.1.0-py3-none-any.whl |
Total release size: 93.0 kB
Release files / xmagic_sdk-0.1.0.tar.gz
| Download URL | xmagic_sdk-0.1.0.tar.gz |
|---|---|
| Size | 52.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
a0b656b14ceb1248ac26fe1f509109846b8458652c1224ed35c20e5341bd6a7f
|
|
BLAKE2b-256 checksum How to use checksums |
2de4c14d8de1ebf513a05405278da759fe2081d3327d716810f3f73db072aa56
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 3, 2026.
Transparency logRelease files / xmagic_sdk-0.1.0-py3-none-any.whl
| Download URL | xmagic_sdk-0.1.0-py3-none-any.whl |
|---|---|
| Size | 40.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
fdcab2b0c1e52dc050c3eb218f053eae1a43a8dd1e5101a72039d6a376229134
|
|
BLAKE2b-256 checksum How to use checksums |
4ad18dc582a6a314aebfeb11ffc7aa5a1a11c6b45f28d6e0b1222290a2e5d95b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 3, 2026.
Transparency logSecurity for xmagic-sdk 0.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for xmagic_sdk-0.1.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 3, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.