OpenAI Python SDK 3.20.0 adds Agents vault credential metadata and metadata-only updates, an `ultrafast` Agents session tier, a session-turn policy-violation result and opt-in incremental WebSocket text and tool snapshots. It also fixes uncertain WebSocket replay and several Live and Realtime hangs. The release turns hosted-agent credentials, policy outcomes and session transport into concrete SDK contracts, but the corresponding API support guarantees are not yet clear from a dated platform announcement.
OpenAI Python SDK 3.20 exposes agent credential and session controls
2026-09-29Verified announcementTRIAL
OpenAI Python SDK 3.20 exposes Agents vault credential metadata, policy-violation results and session transport controls. OpenAI now documents the Vault API: sandboxes receive placeholders rather than raw credentials, and a network proxy injects secrets only for allowed hosts. The public API documentation clears the prior availability gate for a controlled trial.
What this means for you
For hosted-agent teams, vaults reduce direct secret exposure while keeping network use policy-bound. A trial should still verify allowed-host enforcement, rotation, revocation and whether logs remain secret-free.
Evidence & related material
OpenAI publishes Agents Vault API docs, clearing the trial gate
Subsequent changes
OpenAI publishes Agents Vault API docs, clearing the trial gate
Technical details & scores
| Version | 3.20.0 |
|---|---|
| Agent Controls | vault credential metadata and metadata-only updates; ultrafast session tier; policy-violation turn result |
| Streaming | opt-in incremental WebSocket text and tool snapshots |
| Fixes | uncertain replay plus Live/Realtime hang and URL handling fixes |
| Caveat | dated API availability and support guarantees not independently confirmed |
Technical impact 3
Engineering value 4
Adoption signal 3
Maturity 3
Verification cost 3
Risk 3