
Security News
Security Community Slams MIT-linked Report Claiming AI Powers 80% of Ransomware
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.
@inkeep/ai-sdk-provider
Advanced tools
AI SDK provider for Inkeep Agent Framework. This package allows you to use Inkeep agents through the Vercel AI SDK.
npm install @inkeep/ai-sdk-provider
import { generateText } from 'ai';
import { createInkeep } from '@inkeep/ai-sdk-provider';
const inkeep = createInkeep({
  baseURL: proccess.env.INKEEP_AGENTS_RUN_API_URL, // Required
  apiKey: <your-agent-api-key>, // Created in the Agents Dashboard
  headers: { // Optional if you are developing locally and dont want to use an api key
    'x-inkeep-agent-id': 'your-agent-id',
    'x-inkeep-tenant-id': 'your-tenant-id',
    'x-inkeep-project-id': 'your-project-id',
  },
});
const { text } = await generateText({
  model: inkeep('agent-123'),
  prompt: 'What is the weather in NYC?',
});
console.log(text);
import { streamText } from 'ai';
import { createInkeep } from '@inkeep/ai-sdk-provider';
const inkeep = createInkeep({
  baseURL: proccess.env.INKEEP_AGENTS_RUN_API_URL,
  headers: {
    'x-emit-operations': 'true', // Enable tool event streaming
  },
});
const result = await streamText({
  model: inkeep('agent-123'),
  prompt: 'Plan an event in NYC',
});
for await (const chunk of result.textStream) {
  process.stdout.write(chunk);
}
createInkeep({
  baseURL: string,        // Required. Your agents-run-api URL
  apiKey?: string,        // Optional. Bearer token for authentication
  headers?: Record<string, string>, // Optional. Additional headers
})
Pass options when creating a provider instance:
const provider = inkeep({
  conversationId: 'conv-456',
  headers: { 'user-id': 'user-789' },
});
import { inkeep } from '@inkeep/ai-sdk-provider';
import { generateText } from 'ai';
const result = await generateText({
  model: inkeep('agent-123', {
    conversationId: 'conv-123',
    headers: {
      'user-id': 'user-456',
    },
  }),
  prompt: 'Hello!',
});
When creating a custom provider with createInkeep(), you can configure:
baseURL - Required. The base URL of your Inkeep agents API (can also be set via INKEEP_AGENTS_RUN_API_URL environment variable)apiKey - Your Inkeep API key (can also be set via INKEEP_API_KEY environment variable)headers - Additional headers to include in requestsWhen creating a model instance, you can configure:
conversationId - Conversation ID for multi-turn conversationsheaders - Additional headers for context (validated against agent's context config)INKEEP_AGENTS_RUN_API_URL - Base URL for the Inkeep agents API (unless provided via baseURL option)generateText)streamText)x-emit-operations header)This provider communicates with the /api/chat endpoint of your Inkeep Agents Run API.
generateText): Sends stream: false parameter - returns complete JSON responsestreamText): Sends stream: true parameter - returns Vercel AI SDK data streamThe endpoint supports both streaming and non-streaming modes and uses Bearer token authentication.
To receive tool call and tool result events in your stream, include the x-emit-operations: true header:
import { streamText } from 'ai';
import { createInkeep } from '@inkeep/ai-sdk-provider';
const inkeep = createInkeep({
  baseURL: 'https://your-api.example.com',
  apiKey: process.env.INKEEP_API_KEY,
  headers: {
    'x-emit-operations': 'true', // Enable tool event streaming
  },
});
const result = await streamText({
  model: inkeep('agent-123'),
  prompt: 'Search for recent papers on AI',
});
// Listen for all stream events
for await (const event of result.fullStream) {
  switch (event.type) {
    case 'text-start':
      console.log('📝 Text streaming started');
      break;
    case 'text-delta':
      process.stdout.write(event.delta);
      break;
    case 'text-end':
      console.log('\n📝 Text streaming ended');
      break;
    case 'tool-call':
      console.log(`đź”§ Calling tool: ${event.toolName}`);
      console.log(`   Input: ${event.input}`);
      break;
    case 'tool-result':
      console.log(`âś… Tool result from: ${event.toolName}`);
      console.log(`   Output:`, event.result);
      break;
  }
}
Note: Tool events are only emitted when the x-emit-operations: true header is set. Without this header, you'll only receive text lifecycle events (text-start, text-delta, text-end) and the final response.
The provider emits the following AI SDK v2 stream events:
Text Events (always emitted):
text-start - Marks the beginning of a text streamtext-delta - Text content chunks as they arrivetext-end - Marks the end of a text streamTool Events (requires x-emit-operations: true header):
tool-call - Agent is calling a tooltool-result - Tool execution completedControl Events (always emitted):
finish - Stream completion with usage statisticserror - Stream error occurredModels are identified by agent ID in the format:
agent-123 - Direct agent IDinkeep/agent-123 - With provider prefix (when used with custom factories)FAQs
AI SDK provider for Inkeep Agent Framework
The npm package @inkeep/ai-sdk-provider receives a total of 94 weekly downloads. As such, @inkeep/ai-sdk-provider popularity was classified as not popular.
We found that @inkeep/ai-sdk-provider demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.

Security News
Ruby's creator Matz assumes control of RubyGems and Bundler repositories while former maintainers agree to step back and transfer all rights to end the dispute.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.