Multi Tenant Python Packages

django-organizations

:couple: Multi-user accounts for Django projects

containarium-telemetry

Open-source agent runtime — SSH-native isolation, eBPF egress policy, Kubernetes + LXC backends, GPU passthrough, MCP-native CLI

pgrls

Static analyzer for Postgres Row-Level Security — 67 lint rules covering tenant and per-user row-scoping bugs, performance traps, and hygiene; 20 mechanically auto-fixable; semantic policy-diff command for CI gating; pytest plugin for RLS isolation tests.

custom-domain-sdk

Self-hosted custom domains for multi-tenant SaaS: customers bring their own hostnames, get exact DNS records and automatic HTTPS (Caddy on-demand TLS), and every request reaches your app with a signed workspace assertion. API, Python SDK, webhooks, operator portal.

logto

🐍 Logto Python SDK.

storepy

Multi-backend data layer for Python asyncio: pure JSON schemas + MongoDB-style GQL tree queries on MongoDB, MySQL, SQLite and PostgreSQL, with RBAC, computed columns and soft-delete.

supero

19 multi-tenant SaaS reference apps in Python. One schema file gives you a REST API, an admin panel and role-based access. No build step. All 19 run live.

pubmed-search-mcp

MCP SDK v2 server for PubMed and multi-source biomedical research, with resilient search, full text, citations, and tenant-safe deployment.

django-asklens

Safe natural-language querying for Django models with validated LLM query plans and read-only ORM execution.

aegis-openai

Runtime security & governance control plane for AI agents. Enforces per-tool authorization, OPA policy, behavioral risk scoring, blast-radius analysis, autonomy contracts, and tenant kill-switch. Every decision is ed25519-signed and Merkle-anchored for tamper-evident audit. 12 microservices, sub-30ms p95, OWASP LLM Top-10 coverage.

tripaulx-sdk

Multi-tenant Django foundation (tripaulx-sdk + Copier template): workspaces per subdomain, mandatory 2FA, passkeys, AI providers. CapRover-ready.

django-tenant-apikeys

Pluggable multi-tenant API key authentication for Django, with SHA-256 prefix hashing, scope-based permissions, and first-class DRF + Django Ninja support.

aegis-anthropic

Runtime security & governance control plane for AI agents. Enforces per-tool authorization, OPA policy, behavioral risk scoring, blast-radius analysis, autonomy contracts, and tenant kill-switch. Every decision is ed25519-signed and Merkle-anchored for tamper-evident audit. 12 microservices, sub-30ms p95, OWASP LLM Top-10 coverage.

rlsgrid

Schema-driven Row-Level Security test matrix generator and cross-tenant fuzzer for Postgres/Supabase.

seo-autopilot

Multi-tenant SEO automation — 11 analyzers, 60+ documented checks, Auto-Fix-Loop, Google-Trends-Feed, Playwright JS rendering, llms.txt/ai.txt validation, IndexNow, GEO audit. Real crawler, GSC, PageSpeed, AI-powered fixes.

miu-bot

Durable, scalable AI assistant framework — fork of HKUDS/nanobot with Postgres backend and Temporal workflows

tencent-weknora-mcp

Open-source LLM knowledge platform: turn raw documents into a queryable RAG, an autonomous reasoning agent, and a self-maintaining Wiki.

aegis-langchain

Runtime security & governance control plane for AI agents. Enforces per-tool authorization, OPA policy, behavioral risk scoring, blast-radius analysis, autonomy contracts, and tenant kill-switch. Every decision is ed25519-signed and Merkle-anchored for tamper-evident audit. 12 microservices, sub-30ms p95, OWASP LLM Top-10 coverage.

workspaceguard-cli

Per-workspace usage metering and fail-closed quota caps for self-hosted AI deployments. CLI + library, npm & PyPI.

tenantguard-cli

Tenant-isolation security scanner for self-hosted multi-tenant AI-agent platforms. SARIF, JSON, and MCP output.

aegis-bedrock

Runtime security & governance control plane for AI agents. Enforces per-tool authorization, OPA policy, behavioral risk scoring, blast-radius analysis, autonomy contracts, and tenant kill-switch. Every decision is ed25519-signed and Merkle-anchored for tamper-evident audit. 12 microservices, sub-30ms p95, OWASP LLM Top-10 coverage.

boundedllm

Bound what a compromised LLM agent can reach and do. Tenant isolation, retrieval ACLs, tool authorization, human-approved actions, and a tamper-evident audit ledger — enforced in deterministic code that never asks the model anything.

longtrainer

Production-ready RAG framework for Python — multi-tenant chatbots with streaming, tool calling, agent mode (LangGraph), vector search (FAISS), and persistent MongoDB memory. Built on LangChain.

custom-domain-mcp

Self-hosted custom domains for multi-tenant SaaS: customers bring their own hostnames, get exact DNS records and automatic HTTPS (Caddy on-demand TLS), and every request reaches your app with a signed workspace assertion. API, Python SDK, webhooks, operator portal.