Multi Tenant Python Packages

django-organizations

:couple: Multi-user accounts for Django projects

containarium-telemetry

Open-source agent runtime — SSH-native isolation, eBPF egress policy, Kubernetes + LXC backends, GPU passthrough, MCP-native CLI

pgrls

Static analyzer for Postgres Row-Level Security — 47 lint rules covering tenant and per-user row-scoping bugs, performance traps, and hygiene; 17 mechanically auto-fixable; semantic policy-diff command for CI gating; pytest plugin for RLS isolation tests.

logto

🐍 Logto Python SDK.

aegis-langchain

Runtime security & governance control plane for AI agents. Enforces per-tool authorization, OPA policy, behavioral risk scoring, blast-radius analysis, autonomy contracts, and tenant kill-switch. Every decision is ed25519-signed and Merkle-anchored for tamper-evident audit. 12 microservices, sub-30ms p95, OWASP LLM Top-10 coverage.

miu-bot

Durable, scalable AI assistant framework — fork of HKUDS/nanobot with Postgres backend and Temporal workflows

aegis-openai

Runtime security & governance control plane for AI agents. Enforces per-tool authorization, OPA policy, behavioral risk scoring, blast-radius analysis, autonomy contracts, and tenant kill-switch. Every decision is ed25519-signed and Merkle-anchored for tamper-evident audit. 12 microservices, sub-30ms p95, OWASP LLM Top-10 coverage.

aegis-bedrock

Runtime security & governance control plane for AI agents. Enforces per-tool authorization, OPA policy, behavioral risk scoring, blast-radius analysis, autonomy contracts, and tenant kill-switch. Every decision is ed25519-signed and Merkle-anchored for tamper-evident audit. 12 microservices, sub-30ms p95, OWASP LLM Top-10 coverage.

aegis-anthropic

Runtime security & governance control plane for AI agents. Enforces per-tool authorization, OPA policy, behavioral risk scoring, blast-radius analysis, autonomy contracts, and tenant kill-switch. Every decision is ed25519-signed and Merkle-anchored for tamper-evident audit. 12 microservices, sub-30ms p95, OWASP LLM Top-10 coverage.

milu

Production-ready multi-user AI agent framework — 9 LLM providers with Chinese models (Qwen, DeepSeek, Kimi, GLM) first-class. Built-in tools, MCP, RAG, sub-agents, skills, scheduler and an agent pool. Run it as a CLI/service, or embed it as a library.

artifact-gateway

Secure API gateway for AI-generated artifact apps — external proxy, internal API forwarding, and user-isolated database access with JWT-scoped auth tokens.

rlsgrid

Schema-driven Row-Level Security test matrix generator and cross-tenant fuzzer for Postgres/Supabase.

aegis-aevf

Runtime security & governance control plane for AI agents. Enforces per-tool authorization, OPA policy, behavioral risk scoring, blast-radius analysis, autonomy contracts, and tenant kill-switch. Every decision is ed25519-signed and Merkle-anchored for tamper-evident audit. 12 microservices, sub-30ms p95, OWASP LLM Top-10 coverage.

longtrainer

Production-ready RAG framework for Python — multi-tenant chatbots with streaming, tool calling, agent mode (LangGraph), vector search (FAISS), and persistent MongoDB memory. Built on LangChain.

postkit

Postgres-native identity, configuration, metering, and job queues.

spendguard-sdk

Agentic SpendGuard — audit-chain spend control for LLM agents. KMS-signed decisions, Stripe-style auth/capture ledger, operator approval, multi-tenant. Adapters for Pydantic-AI, LangChain, LangGraph, OpenAI Agents SDK, Microsoft AGT.

langgraph-tenancy

Tenant isolation and per-tenant usage metering for LangGraph checkpointers and stores

tenantshield

Multi-tenant enforcement engine for Python. Prevents cross-tenant data leaks by construction.

langchain-runcycles

LangChain agent middleware for Cycles — pre-tool-call authorization and per-tenant budget enforcement for Python agents using create_agent

runcycles

Python AI agent budget control — enforce LLM cost limits, tool permissions, and multi-tenant policies before agent actions execute.

pcmi

PCMI Python SDK — async HTTP client for the Persistent Cognitive Memory Infrastructure API

cacheado

Advanced Python cache package with multi-tenant support, scope hierarchies, and configurable eviction policies.

supabase-schemas

Per-tenant PostgreSQL schema manager for Supabase. Manages isolated schemas within a single Supabase instance.

sillok

Productized LLM Wiki pattern + typed pack registry + proposal-only governance — placeholder reserve, real alpha lands as 0.1.0a1