keystoneauth1
Authentication Library for OpenStack Identity
Decision gist · record as of 2026-08-14
Yes, if you are building tools or applications that interact with OpenStack clouds. keystoneauth1 is the standard authentication library for the OpenStack ecosystem, actively maintained, well-integrated with the broader OpenStack Python tooling, and carries no known vulnerabilities. Install it as a dependency of higher-level OpenStack clients or directly if you are writing custom OpenStack integrations.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Python 3.11 or later; OpenStack Keystone endpoint URL and valid credentials.
- Active maintenance with a recent release (42 days ago).
- Low install friction with five runtime dependencies, all common libraries (iso8601, requests, stevedore, os-service-types, typing-extensions).
License · maintenance · safety
Apache-2.0 (permissive) — Apache-2.0 permissive license allows use in most commercial and open-source projects with minimal restrictions; attribution required.
last release 2026-07-03 (42 days)
0 known vulnerabilities (OSV.dev, 2026-08-14) · 1,978,525 downloads/mo, #3,389 on PyPI
Alternatives
Verify before relying
pip install keystoneauth1
from keystoneauth1 import loading
loader = loading.get_plugin_loader('password')
auth = loader.load_from_options(
auth_url='https://keystone.example.com:5000/v3',
username='user', password='pass', project_name='project',
user_domain_name='Default', project_domain_name='Default'
)
session = loading.load_session_from_options(
conf={}, auth=auth, interface='public'
)- Whether the package's federation authentication methods cover all major OpenStack identity providers
- Performance characteristics under high-volume authentication scenarios
- Compatibility with non-standard or custom OpenStack deployments
What it is and what it does
keystoneauth1 is the authentication layer for OpenStack cloud clients. It abstracts the complexity of connecting to OpenStack Identity (Keystone) services by providing ready-made authentication plugins for common credential types—passwords, tokens, and federated identity—plus automatic API version discovery and a session wrapper around the requests library to manage credentials across multiple API calls.
Developers use keystoneauth1 when building tools that interact with OpenStack clouds: it handles credential exchange, token refresh, and endpoint discovery so that higher-level clients (like the OpenStack SDK or individual service clients) can focus on API logic rather than authentication plumbing. The package is maintained as part of the OpenStack project and is a foundational dependency for most OpenStack Python tooling.
Use it for
- Authenticate to OpenStack clouds from Python scripts or applications using password, token, or federated credentials.
- Build custom OpenStack service clients that need automatic token refresh and endpoint discovery.
- Integrate OpenStack cloud access into CI/CD pipelines or infrastructure-as-code tools.
- Query OpenStack API version support and available endpoints before making service calls.
- Manage multi-cloud authentication when some clouds are OpenStack-based.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes, if you are building tools or applications that interact with OpenStack clouds.
keystoneauth1 is the standard authentication library for the OpenStack ecosystem, actively maintained, well-integrated with the broader OpenStack Python tooling, and carries no known vulnerabilities. Install it as a dependency of higher-level OpenStack clients or directly if you are writing custom OpenStack integrations.
Install
keystoneauth1 on PyPI
Before you install
Active maintenance with a recent release (42 days ago). Low install friction with five runtime dependencies, all common libraries (iso8601, requests, stevedore, os-service-types, typing-extensions). Supports current Python versions (3.11–3.14).
Requires Python 3.11 or later; OpenStack Keystone endpoint URL and valid credentials.
License in practice
Apache-2.0 permissive license allows use in most commercial and open-source projects with minimal restrictions; attribution required.
Quickstart
pip install keystoneauth1
from keystoneauth1 import loading
loader = loading.get_plugin_loader('password')
auth = loader.load_from_options(
auth_url='https://keystone.example.com:5000/v3',
username='user', password='pass', project_name='project',
user_domain_name='Default', project_domain_name='Default'
)
session = loading.load_session_from_options(
conf={}, auth=auth, interface='public'
)Verify before relying
- Whether the package's federation authentication methods cover all major OpenStack identity providers
- Performance characteristics under high-volume authentication scenarios
- Compatibility with non-standard or custom OpenStack deployments
Package facts
| License | Apache-2.0 permissive |
| Python support | Supports the current Python release >=3.11 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 5 packagesiso8601requestsstevedoreos-service-typestyping-extensions |
| Maintenance | Actively maintained 42 days since the last release |
| First released | |
| Downloads | 1,978,525 / month, #3,389 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Environment :: OpenStackIntended Audience :: Information TechnologyIntended Audience :: System AdministratorsOperating System :: POSIX :: LinuxProgramming Language :: PythonProgramming Language :: Python :: 3Programming Language :: Python :: 3 :: OnlyProgramming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.14Programming Language :: Python :: Implementation :: CPython |
Evidence: keystoneauth1-5.15.0-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “openstack authentication”
- keystoneauth1Provides authentication plugins, API discovery, and session…
- keystonemiddlewareProvides authentication and authorization middleware for OpenStack…
- keystoneOpenStack Keystone provides authentication, authorization, and…
Give your agent the search over MCP, or paste the wish link into any chat.
More Internet packages
Botocore provides low-level, data-driven access to Amazon Web Services APIs, serving as the foundation for the AWS CLI and boto3 libraries.
Install it if you need programmatic access to AWS services.
Provides an async client for AWS services using botocore and aiohttp, allowing you to call AWS APIs asynchronously within asyncio-based applications.
Install it if you need to call AWS services from async Python code; it is the standard way to do so.
Pydantic validates Python data structures against type hints, coercing and checking input at runtime to ensure it matches a declared schema.
Provides a platform-independent file locking mechanism to coordinate access to files across processes and threads.
FastAPI is a Python web framework for building REST APIs using type hints, with automatic request validation, serialization, and interactive API documentation.
Provides common Protocol Buffer message definitions used across Google Cloud APIs, enabling Python clients to interact with Google services.
See also keystone · keystonemiddleware · pycadf · python-keystoneclient · cursive · castellan · os-brick · openstacksdk · os-client-config · python-openstackclient