Skip to main content

Agent Registry – Agno

Integrate a LumoAuth-registered agent with Agno to authenticate, enforce budget policies, and perform token exchange for secured MCP servers.

Prerequisites

Install the lumoauth package and set the environment variables LUMOAUTH_URL, LUMOAUTH_TENANT, AGENT_CLIENT_ID, and AGENT_CLIENT_SECRET. See Install the SDK.

Install​

pip install lumoauth agno openai

Example​

from agno.agent import Agent
from agno.tools import tool
from agno.models.openai import OpenAIChat
from lumoauth import LumoAuthAgent

# 1. Initialize and authenticate the LumoAuth Agent
lumo_agent = LumoAuthAgent()
lumo_agent.authenticate()

# 2. Define tools that check LumoAuth capabilities
@tool
def search_company_documents(query: str) -> str:
    """Search internal company documents for the given query."""
    if not lumo_agent.has_capability('read:documents'):
        return "Error: Agent lacks 'read:documents' capability."
    return f"Found 3 documents matching '{query}'"

@tool
def query_financial_mcp(metric: str) -> str:
    """Query the secured financial metrics MCP server for a given metric."""
    if not lumo_agent.has_capability('mcp:financial'):
        return "Error: Agent lacks 'mcp:financial' capability."
    mcp_token = lumo_agent.get_mcp_token("urn:mcp:financial-data")
    if not mcp_token:
        return "Error: Failed to obtain token for Financial MCP server."
    return f"Retrieved {metric}: $1.2M (Authenticated via MCP Token Exchange)"

# 3. Check budget before running
if lumo_agent.is_budget_exhausted():
    raise RuntimeError("Agent budget exhausted for today.")

# 4. Create and run the Agno Agent
agent = Agent(
    name="Research Analyst",
    model=OpenAIChat(id="gpt-4"),
    tools=[search_company_documents, query_financial_mcp],
    instructions=[
        "You are a senior analyst at a financial firm.",
        "Use tools to search documents and query financial metrics.",
    ],
    markdown=True,
)

agent.print_response(
    "Search documents for Q3 performance, then query the financial MCP for EBITDA."
)

How It Works​

StepWhat happens
LumoAuthAgent()Reads credentials from env vars and initialises the client
lumo_agent.authenticate()Performs OAuth 2.0 client-credentials flow
has_capability(...)Guards tool execution with LumoAuth capability checks
get_mcp_token(...)Exchanges the agent token for an MCP-specific token (RFC 8693)
is_budget_exhausted()Prevents the Agno run if the agent's daily budget is used up

Next Steps​