python-tss-sdk
The Delinea Secret Server Python SDK
What it is and what it does
This SDK is a REST client that connects to Delinea Secret Server or Platform to fetch secrets programmatically. It abstracts away HTTP details and provides classes for authentication (password-based, domain-based, or token-based) and secret retrieval, returning secrets as JSON objects or dataclass instances. The library depends only on requests and supports Python 3.8 through 3.11.
You use it by instantiating an authorizer with your credentials, creating a client, and calling get_secret() with a secret ID or path. It handles OAuth2 token exchange internally and can work with self-signed certificates via the REQUESTS_CA_BUNDLE environment variable. The SDK has not been updated in 284 days, so verify compatibility with your Secret Server version.
Use it for:
- Retrieve database credentials at application startup to connect to production databases securely.
- Fetch API keys or tokens within a CI/CD pipeline for deployment automation.
- Access domain credentials for Windows authentication in hybrid environments.
- Integrate as a centralized credential store for microservices running on Kubernetes.
- Query secret paths programmatically in compliance and audit workflows.
Worth the install?
AI-flagged interpretation of the facts on this page — verify before relying
A Python client library for retrieving secrets from Delinea Secret Server and Platform via REST APIs, supporting multiple authentication methods.
Yes, if you use Delinea Secret Server or Platform and need a Python client to retrieve secrets. The library is straightforward, has low install friction, and carries no known vulnerabilities. However, maintenance is aging (284 days since last release), so verify compatibility with your Secret Server version and check for any API changes.
Install
python-tss-sdk on PyPI
pip
pip install python-tss-sdkuv
uv add python-tss-sdkpoetry
poetry add python-tss-sdkInstalling python-tss-sdk
Before you install
Low install friction with a single pure-Python wheel dependency on requests. Maintenance status is aging—last release was 284 days ago—so updates may lag behind upstream changes.
License in practice
Licensed under Apache Software License (permissive), allowing use in most commercial and open-source projects without significant legal constraints.
Quickstart
pip install python-tss-sdk
from python_tss_sdk import SecretServerCloud, PasswordGrantAuthorizer
authorizer = PasswordGrantAuthorizer("https://hostname/SecretServer", username, password)
secret_server = SecretServerCloud(tenant="mytenant", authorizer=authorizer)
secret = secret_server.get_secret(secret_id)
Requires Python 3.8 or higher. Valid Secret Server or Platform credentials and network access to the server instance are required.
Verify before relying
- Whether the SDK handles token refresh automatically or requires manual re-authentication after expiry.
- Performance characteristics when retrieving large numbers of secrets or working with large payloads.
- Compatibility with recent Secret Server or Platform API versions beyond the last release date.
Package facts
| License | not declared (permissive) |
| Python support | supports the current Python release (>=3.8) |
| Install friction | low — pure-Python wheel |
| Runtime dependencies | 1 — requests |
| Maintenance | aging — 284 days since the last release |
| First released | |
| Downloads | 450,293/month — #6,592 on PyPI (30-day window, as of 2026-08-14) |
| Known vulnerabilities | none known (OSV.dev, checked 2026-08-14) |
Evidence: python_tss_sdk-2.0.1-py3-none-any.whl
Tags
More Security packages
Provides Python bindings to the FreeDesktop.org…
permissive · top 1,000 on PyPI
msalMSAL for Python handles OAuth2 and OpenID…
permissive · top 1,000 on PyPI
joserfcjoserfc implements JOSE standards (JWS, JWE,…
permissive · top 1,000 on PyPI
AuthlibAuthlib provides a complete implementation of…
permissive · top 1,000 on PyPI
argon2-cffi-bindingsProvides low-level CFFI bindings to the…
permissive · top 1,000 on PyPI
adalADAL for Python authenticates applications with…
permissive · top 1,000 on PyPI
onepasswordWrapper around the 1Password CLI that lets you…
permissive · top 15,000 on PyPI
bitwarden-sdkProvides a Python client library to interact…
unclear · top 15,000 on PyPI
onepassword-sdkProgrammatic Python interface to read and…
permissive · top 5,000 on PyPI
azure-keyvault-secretsSecurely store, retrieve, and manage secrets…
permissive · top 1,000 on PyPI
looker-sdkProvides a Python client library for…
permissive · top 5,000 on PyPI
azure-keyvault-certificatesManages SSL/TLS certificates stored in Azure…
permissive · top 5,000 on PyPI
robocorp-vaultProvides read and write access to secrets…
permissive · top 15,000 on PyPI
oauth2-clientHandles OAuth2 authentication flows…
unclear · top 15,000 on PyPI
onepasswordconnectsdkProvides Python access to 1Password vaults…
permissive · top 15,000 on PyPI
infisicalsdkFetch and manage secrets from Infisical, an…
unclear · top 5,000 on PyPI