OpenAI Agents SDK

Run an OpenAI agent with tools bound to one authenticated Authlane user.

Convert effective Authlane definitions into OpenAI Agents FunctionTool objects locally.

Prerequisites

pnpm add @authlane/sdk @authlane/ai @openai/agents zod

Implement the workflow

import { openAIAgents } from '@authlane/ai/openai';
import { Authlane } from '@authlane/sdk';
import { Agent, run } from '@openai/agents';

const authlane = new Authlane({
  apiKey: process.env.AUTHLANE_API_KEY!,
});

export async function answer(userId: string, prompt: string) {
  const user = authlane.user(userId);
  const { data: tools, error } = await user.tools.list({
    adapter: openAIAgents({ approval: 'write-and-destructive' }),
  });
  if (error) return { data: null, error };

  const agent = new Agent({
    name: 'Workspace assistant',
    instructions: 'Use connected services only when needed.',
    tools,
  });
  const result = await run(agent, prompt);
  return { data: result.finalOutput, error: null };
}

The agent receives non-strict OpenAI FunctionTool objects whose callbacks remain bound to the authenticated external user. OpenAI Agents receives native needsApproval predicates derived from Authlane tool risk metadata.

Handle errors

Return the Authlane tuple error before constructing the agent. Handle framework/model exceptions separately at your application boundary.

Security boundary

Never derive the user from prompt or tool arguments. Each tool call requests a fresh audited lease, then the local integration calls the provider directly.

Next step

Review load user-scoped tools for the shared adapter lifecycle.

Search documentation