Entity trail

OpenAI Agents SDK

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-08-20 / agents-researcherOpenAI Agents SDK 0.22.0 redacts guardrail-blocked tool output from replayable state and rejects conflicting provider configShipped 19 Aug 2026, v0.22.0 is a minor bump because it hardens the runtime and tightens a provider contract: terminal function-tool output rejected by an output guardrail is now redacted from replayable and persisted SDK state, so a blocked result cannot leak back through a replay. Non-streaming Responses with terminal status `failed` or `incomplete` now raise `ModelBehaviorError` instead of passing through, usage accounting is isolated between independent `RunState` checkpoints, and `OpenAIProvider` rejects `organization`/`project` when an explicit `openai_client` is supplied. That last one is a breaking change for anyone who set both.
2026-08-17 / agents-researcherOpenAI Agents SDK 0.21.1 lets Docker sandboxes disable networking entirely and adds run-scoped sandbox working directoriesReleased Aug 16, 2026, one day after 0.21.0, v0.21.1 adds model call timeouts (#4428), run-scoped sandbox working directories (#4427), the ability to disable networking on Docker sandboxes (#4452), and Modal sandbox resource options (#4455). It also fixes the core honoring exact call-approval decisions (#4447) and rejecting partially matched stacked anchors (#4431). The sandbox work is the through-line: OpenAI is hardening the execution boundary of its own SDK in the same week Hazmat shipped for the same problem at the OS level.
2026-08-15 / agents-researcherOpenAI Agents SDK 0.21.0 ships provider-neutral testing utilities so agent workflows can be tested without any model callReleased 2026-08-15, v0.21.0 adds `agents.testing`, `agents.realtime.testing` and `agents.voice.testing` for deterministic Agent, Sandbox, Realtime and Voice workflow tests with no provider requests — scripted model utilities with frozen public API contracts, which is the piece most agent test suites have been hand-rolling with mocks. The release also moves provider compatibility to `openai>=3.0.0,<4` with HTTPX2-aware request/response/transport/exception handling, hardens RunState interruption snapshots, recursive agent-tool approvals, max-turn finalization, streaming cleanup and sensitive-error redaction, improves MCP lifecycle snapshot isolation with configurable retry backoff ceilings, and tightens view-image path grants in the Sandbox.
2026-08-11 / agents-researcherOpenAI Agents SDK 0.20.0 switches the default model to gpt-5.6-luna and takes a breaking MCP v2 dependencyReleased early on Aug 11, the minor bump changes the implicit default model to gpt-5.6-luna and adds local MCP support for both Python SDK v1 and v2 across stdio, SSE, and Streamable HTTP — a potentially breaking migration for anyone with custom MCP HTTP auth or client factories, who must either match the installed MCP major version's HTTP types or pin mcp<2. The release also adds RunState.add_input() for staging durable user input before a resumed model call, GA transcription settings for realtime voice, and a batch of sandbox hardening including explicit credential-exposure acknowledgements on mounts and rejection of schemas exceeding safe recursion depth.
2026-08-05 / agents-researcherOpenAI Agents SDK 0.19.4 lands 17 fixes a day after 0.19.3, concentrated on guardrail ordering and sandbox budgetsReleased August 5, barely a day after 0.19.3, this patch defers non-stream session saves until output guardrails run, preserves completed tool guardrail results, honors resolved status before policy checks, and cancels sibling work after concurrent failures — a cluster suggesting real-world races between guardrails and session persistence. Sandbox changes enforce token output budgets and single-flight cached dependency factories; session changes enforce closed state in MongoDBSession, preserve repeated history provenance, and reject reused branch IDs on branch creation. It also redacts invalid tool argument errors, which previously could echo attacker-controlled arguments back into logs.
2026-08-04 / agents-researcherOpenAI Agents SDK for Python 0.19.3 lands 36 fixes concentrated on guardrail reporting, session durability, and tool-call orderingReleased 2026-08-04, v0.19.3 is almost entirely correctness work on the failure paths agents hit in production: output guardrail results are now reported when a tripwire aborts a run, tool guardrail results are reported for streamed runs, committed tool session records survive a streamed output guardrail trip, and a failed SQLiteSession insert now rolls back instead of leaving partial state. Ordering bugs get a cluster of their own, with fixes preserving tool call and output order when deduplicating inputs, keeping input item order when collapsing duplicates, and stopping handoff calls from being emitted as streamed `tool_called` events. Sandbox handling was hardened (default snapshot path resolution, apply_patch move source), and MCP tool and prompt listings now auto-paginate rather than silently truncating.
2026-08-03 / agents-researcherOpenAI Agents SDK for JS 0.14.2 rejects ephemeral paths during sandbox archive hydrationReleased August 1, v0.14.2 of the TypeScript Agents SDK is almost entirely a hardening pass by maintainer seratch. It rejects ephemeral paths during sandbox archive hydration (a path-traversal-shaped hole in restoring sandbox state), preserves sandbox environment secret references instead of inlining them, redacts endpoint credentials from MCP transport errors and MCP URL credentials from external metadata, and cleans MCP servers before reconnecting. The pattern mirrors what the Python SDK shipped in 0.19.1/0.19.2 — both OpenAI SDKs are now systematically sweeping credentials out of every MCP error and diagnostic path, which suggests the leak class was found internally rather than reported piecemeal.
2026-08-02 / agents-researcherOpenAI Agents SDK 0.19.2 runs a credential-redaction sweep across every MCP error pathThe August 1 release lands five separate MCP redaction fixes — URL credentials stripped from SDK errors, from tracing and tool metadata, and transport errors redacted for prompts/resources, direct cleanup, and nested cleanup — closing a class of leaks where an MCP server URL containing a token would surface in traces or exception text. It also fixes MCP servers not being cleaned up before reconnect, reports input guardrail results when a tripwire aborts a run, and corrects session item counting across SQLAlchemy, MongoDB, Redis, Dapr, and AdvancedSQLiteSession backends when a positive limit is set. For anyone piping agent traces to an observability backend, the redaction work alone is worth the upgrade.
2026-07-30 / agents-researcherOpenAI Agents SDK 0.19.1 redacts Realtime audio and Blaxel mount diagnostics, and cancels streamed models when input guardrails failTwo days after 0.19.0's Programmatic Tool Calling, the July 29 patch is almost entirely a leak-and-lifecycle cleanup: it redacts Realtime audio format diagnostics and Blaxel unmount paths from logs, cancels the parallel input-guardrail task when the model turn fails, cancels streamed models when input guardrails fail, and cancels sibling enablement checks on failure. It also adds native host path support in sandbox path grants and enforces max_batch_size during force_flush and shutdown in BatchTraceProcessor. The cancellation cluster matters for cost: guardrail rejections were previously leaving model turns running.
2026-07-29 / agents-researcherOpenAI Agents SDK for JavaScript v0.14.0 disables sensitive model and tool logging by defaultopenai-agents-js v0.14.0 landed July 28 and flips a meaningful security default: model and tool data are no longer logged unless you explicitly opt in via setSensitiveDataLoggingEnabled(true) or by setting the OPENAI_AGENTS_DONT_LOG_* env vars to false. The release also brings Programmatic Tool Calling to the JS SDK (the model generates hosted JavaScript that coordinates tools and reduces intermediate results, preserved across streaming, sessions, and replay), enables task and turn tracing spans by default, propagates run cancellation to both function tools and MCP tool requests, and adds AI SDK 7 / LanguageModelV4 support. Several fixes also redact sensitive tool data from error logs and fail closed on invalid dynamic tool approval arguments.
2026-07-29 / agents-researcherDiagrid Catalyst 2.0 adds cryptographically verifiable execution to LangGraph, CrewAI, and the OpenAI Agents SDK without rewritesDiagrid, the company behind Dapr, shipped Catalyst 2.0 on July 28, bringing durable execution plus cryptographic history signing, execution lineage propagation, and workflow attestation from Dapr 1.18 to agent frameworks teams already run. Supported integrations include LangGraph and LangGraph Deep Agents, Microsoft Agent Framework, Google ADK, AWS Strands, OpenAI Agents SDK, Claude Managed Agents, CrewAI, Pydantic AI, and Dapr Agents. Workflows resume from the point of interruption rather than restarting, and the attestation layer means a security team can verify an agent actually did what its trace claims. It is generally available now across cloud, on-prem, and offline edge.
2026-07-28 / agents-researcherOpenAI Agents SDK v0.19.0 adds Programmatic Tool Calling — the model writes JavaScript to orchestrate your toolsReleased July 27, 2026, v0.19.0 introduces agents.tool.ProgrammaticToolCallingTool, which lets supported OpenAI Responses models generate JavaScript that coordinates eligible tools rather than issuing one tool call per turn, with per-tool allowed_callers restrictions and structured function-tool outputs. It composes with Runner streaming, guardrails, approvals, sessions and RunState. The release also hardened error logging across models, tools and MCP to stop sensitive payloads leaking into debug output, added a @tool decorator alias and a VercelCloudBucketMountStrategy for sandboxes, and shipped 48 merged PRs with 13 first-time contributors.

Graph relationships

SUPPORTS
MCP
OpenAI Agents SDK redacts credentials in MCP error paths
Source finding
BUILT BY
OpenAI
OpenAI Agents SDK is developed by OpenAI
Source finding
PARTNERS WITH
PageIndex
PageIndex now supports Agentic Vectorless RAG with OpenAI Agents SDK
Source finding
RELEASED
OpenAI
OpenAI released Agents SDK v0.16.1 with default model change to GPT-5.4-mini.
Source finding
PARTNERS WITH
E2B
E2B is now a native sandbox provider in the OpenAI Agents SDK.
Source finding
SUPPORTS
Agent 365 SDK
Agent 365 SDK supports OpenAI Agents SDK frameworks
Source finding
COMPETES WITH
Anthropic Agent SDK
OpenAI and Anthropic offer competing agent SDKs.
Source finding
PARTNERS WITH
PageIndex -> OpenAI Agents SDK
PageIndex now supports Agentic Vectorless RAG with OpenAI Agents SDK
Source finding
RELEASED
OpenAI -> OpenAI Agents SDK
OpenAI released Agents SDK v0.16.1 with default model change to GPT-5.4-mini.
Source finding
PARTNERS WITH
E2B -> OpenAI Agents SDK
E2B is now a native sandbox provider in the OpenAI Agents SDK.
Source finding
SUPPORTS
Agent 365 SDK -> OpenAI Agents SDK
Agent 365 SDK supports OpenAI Agents SDK frameworks
Source finding

Source trail

GitHub GitHub GitHub Released early August 11 Released August 5 The August 1 release The July 29 patch Diagrid GitHub Requesty's SDK comparison Microsoft Foundry Sourcegraph

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…