
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Vaul is a library designed to help developers create tool calls for AI systems, such as OpenAI's GPT models. It provides a simple and efficient way to define and manage these tool calls with built-in validation and schema generation.
Vaul is designed to simplify the process of creating tool calls that can be used by AI systems, such as OpenAI's GPT models. With Vaul, developers can easily define functions with validation, generate schemas, and integrate these tool calls with AI systems.
to_markdown()
to keep system prompts in sync with your toolkit.To install Vaul, you can use pip
:
pip install vaul
Vaul allows you to define tool calls using simple decorators. Here is an example of how to define a function that can be utilized by an AI system:
from vaul import tool_call
@tool_call
def add_numbers(a: int, b: int) -> int:
return a + b
Vaul provides a Toolkit
class that helps you organize and manage multiple tool calls efficiently:
from vaul import Toolkit, tool_call
# Create a toolkit to manage your tools
toolkit = Toolkit()
@tool_call
def add_numbers(a: int, b: int) -> int:
"""Add two numbers
Desc: Adds two numbers together.
Usage: When you need to calculate the sum of two numbers.
"""
return a + b
@tool_call
def multiply_numbers(a: int, b: int) -> int:
"""Multiply numbers
Desc: Multiplies two numbers together.
Usage: When you need to calculate the product of two numbers.
"""
return a * b
@tool_call
def subtract_numbers(a: int, b: int) -> int:
"""Subtract numbers
Desc: Subtracts the second number from the first.
Usage: When you need to calculate the difference between two numbers.
"""
return a - b
# Register a single tool
toolkit.add(add_numbers)
# Or register multiple tools at once
toolkit.add_tools(multiply_numbers, subtract_numbers)
# Generate schemas for all tools
tool_schemas = toolkit.tool_schemas()
# Execute a specific tool by name
result = toolkit.run_tool("add_numbers", {"a": 5, "b": 3})
print(result) # Output: 8
# Access all tool names
print(toolkit.tool_names) # Output: ['add_numbers', 'multiply_numbers', 'subtract_numbers']
# Generate a markdown table of all tools
markdown_table = toolkit.to_markdown()
print(markdown_table)
# Output:
# ### Tools
# | Tool | Description | When to Use |
# |------|-------------|-------------|
# | `add_numbers` | Adds two numbers together. | When you need to calculate the sum of two numbers. |
# | `multiply_numbers` | Multiplies two numbers together. | When you need to calculate the product of two numbers. |
# | `subtract_numbers` | Subtracts the second number from the first. | When you need to calculate the difference between two numbers. |
When creating tool calls, you can add structured documentation to your function docstrings that will be extracted by the to_markdown
method. This makes it easy to generate clear documentation tables for users.
The docstring format supports the following special tags:
Desc:
- A detailed description of what the tool doesUsage:
- Guidance on when to use this toolExample of a well-documented tool:
@tool_call
def search_database(query: str, limit: int = 10) -> List[Dict]:
"""Search Database
Desc: Performs a semantic search against the knowledge database.
Usage: Use this when you need to find information about a specific topic or question.
"""
# Implementation here
...
If no Desc:
tag is provided, the first line of the docstring will be used as the description.
You can then generate a nicely formatted markdown table of all your tools using:
markdown_table = toolkit.to_markdown()
This will produce a table like:
### Tools
| Tool | Description | When to Use |
| ----------------- | ---------------------------------------------------------- | ------------------------------------------------------------------------------ |
| `search_database` | Performs a semantic search against the knowledge database. | Use this when you need to find information about a specific topic or question. |
One of the most powerful features of to_markdown
is its ability to help maintain consistency between your code and AI system prompts. As your toolkit evolves with new tools or updated functionality, you can dynamically generate up-to-date documentation to include in your system prompts.
For example, when working with LLM agents that need to know about available tools:
# Register all your tools to the toolkit
toolkit.add_tools(search_database, create_document, update_settings)
# Generate the tools documentation table
tools_documentation = toolkit.to_markdown()
# Use this in your system prompt
system_prompt = f"""You are a helpful assistant with access to the following tools:
{tools_documentation}
When a user asks a question, use the most appropriate tool based on the 'When to Use' guidance.
Always prefer using tools over making up information.
"""
# Create your chat completion
response = openai_session.chat.completions.create(
model="gpt-4",
messages=[
{"role": "system", "content": system_prompt},
{"role": "user", "content": user_question}
],
tools=toolkit.tool_schemas()
)
This approach ensures that:
This synchronization is essential for maintaining consistency in agent behavior and preventing the confusion that happens when system prompts describe tools differently than they're actually implemented.
You can integrate Vaul with OpenAI to create, monitor, and deploy tool calls. Here is an example that demonstrates how to use a tool call with OpenAI's GPT-3.5-turbo:
import os
from openai import OpenAI
from vaul import tool_call
openai_session = OpenAI(
api_key=os.getenv('OPENAI_API_KEY'),
)
@tool_call
def add_numbers(a: int, b: int) -> int:
return a + b
response = openai_session.chat.completions.create(
model="gpt-3.5-turbo",
messages=[
{
"role": "system",
"content": "You are a helpful assistant."
},
{
"role": "user",
"content": "What is 2 + 2?"
}
],
temperature=0.7,
top_p=1,
stream=False,
seed=42,
tools=[{
"type": "function",
"function": add_numbers.tool_call_schema
}],
tool_choice={
"type": "function",
"function": {
"name": add_numbers.tool_call_schema["name"],
}
}
)
print(response.choices[0].message.model_dump(exclude_unset=True))
# Output:
# {'content': None, 'role': 'assistant', 'tool_calls': [{'id': 'call_xxxxxxxxxxxxxx', 'function': {'arguments': '{"a":2,"b":2}', 'name': 'add_numbers'}, 'type': 'function'}]}
# Run the function call
print(add_numbers.from_response(response))
# Output:
# 4
Let's take a look at how you might handle a more complex application, such as one that integrates multiple potential tool calls:
import os
from jira import JIRA
from openai import OpenAI
from vaul import tool_call, Toolkit
from dotenv import load_dotenv
load_dotenv('.env')
jira = JIRA(
server=os.environ.get("JIRA_URL"),
basic_auth=(
os.environ.get("JIRA_USER"),
os.environ.get("JIRA_API_TOKEN")
)
)
openai_session = OpenAI(
api_key=os.environ.get("OPENAI_API_KEY")
)
# Create a toolkit to manage all our Jira-related tools
toolkit = Toolkit()
@tool_call
def create_issue(summary: str, description: str, issue_type: str) -> dict:
"""
Creates a Jira issue.
:param summary: The issue summary
:param description: The issue description
:param issue_type: The issue type
:return: The created issue
"""
try:
new_issue = jira.create_issue(
fields={
"project": {"key": "KAN"},
"summary": summary,
"description": description,
"issuetype": {"name": issue_type}
}
)
except Exception as e:
return {
"error": str(e)
}
return {
"id": new_issue.id,
"key": new_issue.key,
"summary": new_issue.fields.summary,
"description": new_issue.fields.description,
"type": new_issue.fields.issuetype.name
}
@tool_call
def get_issue(issue_id: str) -> dict:
"""
Gets a Jira issue by ID.
:param issue_id: The issue ID
:return: The issue
"""
try:
issue = jira.issue(issue_id)
except Exception as e:
return {
"error": str(e)
}
return {
"id": issue.id,
"key": issue.key,
"summary": issue.fields.summary,
"description": issue.fields.description,
"type": issue.fields.issuetype.name
}
@tool_call
def get_issues(project: str) -> dict:
"""
Gets all issues in a project.
:param project: The project key
:return: The issues
"""
try:
issues = jira.search_issues(f"project={project}")
except Exception as e:
return {
"error": str(e)
}
return {
"issues": [
{
"id": issue.id,
"key": issue.key,
"summary": issue.fields.summary,
"description": issue.fields.description,
"type": issue.fields.issuetype.name
} for issue in issues
]
}
@tool_call
def update_issue(issue_id: str, summary: str, description: str, issue_type: str) -> dict:
"""
Updates a Jira issue.
:param issue_id: The issue ID
:param summary: The issue summary
:param description: The issue description
:param issue_type: The issue type
:return: The updated issue
"""
try:
issue = jira.issue(issue_id)
fields = {
"summary": summary if summary else issue.fields.summary,
"description": description if description else issue.fields.description,
"issuetype": {"name": issue_type if issue_type else issue.fields.issuetype.name}
}
issue.update(fields=fields)
except Exception as e:
return {
"error": str(e)
}
return {
"id": issue.id,
"key": issue.key,
"summary": issue.fields.summary,
"description": issue.fields.description,
"type": issue.fields.issuetype.name
}
@tool_call
def delete_issue(issue_id: str) -> dict:
"""
Deletes a Jira issue.
:param issue_id: The issue ID
"""
try:
jira.issue(issue_id).delete()
except Exception as e:
return {
"error": str(e)
}
return {
"message": "Issue deleted successfully"
}
# Register all tools with the toolkit using the bulk add method
toolkit.add_tools(
create_issue,
get_issue,
get_issues,
update_issue,
delete_issue
)
# Send a message to the OpenAI API to create a new issue
response = openai_session.chat.completions.create(
model="gpt-3.5-turbo",
messages=[
{
"role": "system",
"content": "You are a Jira bot that can create, update, and delete issues. You can also get issue details, transitions, and comments."
},
{
"role": "user",
"content": "Create a new issue with the summary 'Test Issue' and the description 'This is a test issue' of type 'Task'."
}
],
tools=toolkit.tool_schemas(), # Get schemas for all tools in the toolkit
)
# Identify the tool call, if any
try:
tool_name = response.choices[0].message.tool_calls[0].function.name
tool_arguments = response.choices[0].message.tool_calls[0].function.arguments
except (AttributeError, IndexError):
tool_name = None
# Run the tool if it exists
if tool_name:
# Get the tool from toolkit and run it
try:
import json
arguments = json.loads(tool_arguments)
result = toolkit.run_tool(tool_name, arguments)
print(result)
except ValueError as e:
print(f"Error running tool: {e}")
### OpenAPI Integration
Vaul supports importing tools from OpenAPI specifications, allowing you to easily integrate external APIs as tool calls. This feature enables you to convert any OpenAPI-compliant API into tools that can be used by AI systems.
#### Basic OpenAPI Usage
```python
from vaul import Toolkit
# Create a toolkit
toolkit = Toolkit()
# Add tools from an OpenAPI specification URL
toolkit.add_openapi("https://api.example.com/openapi.json")
# Or add from a local OpenAPI file
toolkit.add_openapi("path/to/openapi.yaml")
# The toolkit now contains all operations from the OpenAPI spec as tools
print(toolkit.tool_names) # Lists all imported API operations
# Use the tools as normal
result = toolkit.run_tool("getUserById", {"userId": "123"})
Many APIs require authentication. You can provide headers, query parameters, or use a custom session:
# With API key in headers
toolkit.add_openapi(
"https://api.example.com/openapi.json",
headers={"X-API-Key": "your-api-key"}
)
# With query parameters
toolkit.add_openapi(
"https://api.example.com/openapi.json",
params={"api_key": "your-api-key"}
)
# With custom session for complex auth
import requests
session = requests.Session()
session.headers.update({"Authorization": "Bearer your-token"})
toolkit.add_openapi(
"https://api.example.com/openapi.json",
session=session
)
Large OpenAPI specifications might contain many operations. You can filter which operations to import:
# Only import specific operations by ID
toolkit.add_openapi(
"https://api.example.com/openapi.json",
operation_ids=["getUserById", "createUser", "updateUser"]
)
# The toolkit will only contain the specified operations
Tools imported from OpenAPI specs are named using their operationId
. If an operation doesn't have an operationId
, a name is generated from the HTTP method and path:
GET /users/{id}
→ get_users_id
POST /users
→ post_users
DELETE /users/{id}
→ delete_users_id
Vaul supports the Model Context Protocol (MCP), allowing you to integrate tools from MCP servers. MCP is an open protocol that enables seamless integration between AI applications and external data sources or tools.
MCP (Model Context Protocol) is a protocol designed to provide context and tools to AI models. MCP servers can expose various tools that AI systems can use, similar to function calling but with a standardized protocol for tool discovery and execution.
from vaul import Toolkit
# Create a toolkit
toolkit = Toolkit()
# Add tools from an MCP server via HTTP/SSE endpoint
toolkit.add_mcp("http://localhost:3000/sse")
# Add tools from an MCP server via stdio (subprocess)
toolkit.add_mcp({
"command": "node",
"args": ["path/to/mcp-server.js"],
"env": {"API_KEY": "your-key"} # Optional environment variables
})
# List all available tools from the MCP server
print(toolkit.tool_names)
# Execute MCP tools just like any other tool
result = toolkit.run_tool("search_documents", {"query": "python tutorials"})
Vaul supports two types of MCP server connections:
HTTP/SSE Servers: Connect to MCP servers running as HTTP endpoints
toolkit.add_mcp("http://localhost:3000/sse")
Stdio Servers: Launch MCP servers as subprocesses
toolkit.add_mcp({
"command": "python",
"args": ["-m", "my_mcp_server"],
"env": {"CONFIG_PATH": "/path/to/config.json"}
})
You can also work directly with MCP client sessions for more control:
from mcp import ClientSession
from vaul import Toolkit
# Create your own MCP client session
async def setup_mcp_session():
session = ClientSession()
# Configure your session as needed
await session.initialize()
return session
# Add the session to your toolkit
session = await setup_mcp_session()
toolkit.add_mcp(session)
Tools imported from MCP servers include their full metadata:
# After adding MCP tools
for tool_name in toolkit.tool_names:
tool = toolkit.get_tool(tool_name)
if hasattr(tool, 'mcp_tool'):
print(f"Tool: {tool_name}")
print(f"Description: {tool.mcp_tool.description}")
print(f"Parameters: {tool.mcp_tool.inputSchema}")
One of Vaul's strengths is the ability to combine tools from different sources:
from vaul import Toolkit, tool_call
toolkit = Toolkit()
# Add local tools
@tool_call
def calculate_discount(price: float, discount_percent: float) -> float:
"""Calculate discounted price"""
return price * (1 - discount_percent / 100)
toolkit.add(calculate_discount)
# Add tools from OpenAPI
toolkit.add_openapi("https://api.store.com/openapi.json")
# Add tools from MCP servers
toolkit.add_mcp("http://localhost:3000/sse") # Analytics MCP server
toolkit.add_mcp({
"command": "node",
"args": ["./inventory-mcp-server.js"]
}) # Inventory MCP server
# Now you have a unified toolkit with tools from all sources
print(f"Total tools available: {len(toolkit.tool_names)}")
# Use with OpenAI
response = openai_session.chat.completions.create(
model="gpt-4",
messages=[
{"role": "system", "content": "You are a helpful store assistant."},
{"role": "user", "content": "What's the discounted price for item SKU-123 with a 20% discount?"}
],
tools=toolkit.tool_schemas()
)
# The AI can now use tools from any source to answer the question
We welcome contributions from the community! If you would like to contribute to Vaul, please follow these steps:
Vaul is licensed under the MIT License. See the LICENSE file for more information.
Vaul was created as a way to build on the simplicity and developer experience provided by Jason Liu's excellent Instructor
package (formerly openai-function-call
), after the decorator functionality was removed in newer versions. The goal is to maintain the ease of defining and using tool calls for AI systems, ensuring a smooth developer experience.
If you haven't seen Instructor
before, I highly recommend checking it out if you're working with structured outputs for AI systems:
FAQs
A lightweight Python library for building agentic actions and workflows.
We found that vaul demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.