The Python SDK for building Dify plugins: tools, model providers, agent strategies, HTTP extensions, datasources, and triggers.
Plugin development guide · Schema reference · Releases
Python 3.12 or later is required. Install the SDK in your plugin's Python environment:
python -m pip install dify-pluginThe package name is dify-plugin; Python imports use dify_plugin.
For a new plugin, use the Dify Plugin CLI to generate the project, then follow the guide to configure, run, and package it.
Install uv and just.
You can install just with uv tool install rust-just.
Run these commands from this repository:
just dev # Sync dependencies and install Git hooks
just fmt # Format code
just lint # Format code and apply lint fixes
just check # Check the lockfile, formatting, and linting
just test # Run SDK tests
just build # Build source and wheel distributions
just docs # Generate schema documentationCI tests Python 3.12 and 3.13. See CONTRIBUTING.md for setup details, integration test requirements, and contribution guidelines.
See langgenius/dify-official-plugins for production plugin implementations published and used by Dify.
Starting in SDK 0.11.0 (unreleased), OAICompatEmbeddingModel validates each response batch before sending the next request.
Each input must have one nonempty vector of finite numbers, with consistent dimensions across all batches.
Responses with index fields must cover every input in that batch exactly once using integer indices starting at zero; the SDK restores input order.
Responses without indices retain response order.
Malformed responses, including mixed index metadata, numeric strings, and booleans, raise an SDK invocation error.
This applies to plugins using the shared implementation, including GiteeAI and SiliconFlow.
Since SDK 0.9.0, model plugins can declare the polling feature and implement _start_polling() and _check_polling() to handle long-running provider jobs through separate requests.
Both methods return LLMPollingResult with one of three states:
running: returnplugin_statefor the next check.succeeded: return the final LLMresult.failed: return a terminalerror.
In SDK 0.11.0 (unreleased), blocking session.model.llm.invoke and session.model.llm_structured_output.invoke calls preserve the last non-None opaque_body snapshot.
Empty objects, arrays, strings, zero, and false are valid snapshots; trailing chunks without a snapshot do not erase them.
String chunks are concatenated, while nonempty content arrays retain their blocks and metadata in order, including when mixed with strings.
Providers must assemble complete tool calls before emitting them, once per call, with nonempty IDs unique within the response.
Calls may arrive in separate batches or together; collectors preserve their order and the original argument strings, and reject missing or duplicate IDs.
Each usage update is a cumulative snapshot for the current model response; collectors retain the last non-None snapshot, including zero values, and Agents add usage across model responses.
Use message.get_text_content() when a consumer needs plain text, and retain the complete message when replaying a tool turn.
AssistantPromptMessage.is_empty() treats tool calls and any non-None snapshot as content.
ToolPromptMessage.is_empty() treats a tool call ID as content, including when the tool result is empty.
The invoking Agent/plugin, provider, daemon, and host must all preserve these fields for replay across tool turns.
In SDK 0.11.0 (unreleased), the shared OAICompatLargeLanguageModel completion mode accepts text from the first prompt message.
Text content blocks are concatenated in order into one prompt string, including empty lists as an empty string.
Image, audio, video, or document blocks in that prompt raise an SDK invocation error before sending a request, including when mixed with text.
For multimodal input, use chat mode with a model that supports the input modality and message role.
In SDK 0.11.0 (unreleased), streaming and non-streaming responses estimate missing usage fields with the same counters.
Provider counts, including zero, take precedence; a missing or null count is estimated independently.
Completion counts the text sent from the first prompt message, while chat counts the complete message history and the tool definitions sent with the request.
Output estimates include text and tool calls, including responses with no text content.
Tool parameter estimates include the complete JSON schema, including optional and nested fields.
Long inputs use tokenizer chunks of at most 100,000 characters instead of switching to character counts; this shared estimator also serves embedding input budgets.
Token merges across chunk boundaries remain approximate.
Embedding inputs that exceed the configured context are shortened to a measured text prefix within the estimated token budget.
Non-streaming chat replies use an empty string for absent or null text so the daemon can decode the result.
Replies without a content field must contain a parsed tool call; an unrecognized tool entry does not make an empty reply valid.
These local estimates use the SDK tokenizer and pricing configuration; they do not represent the provider's billing record.
The public get_num_tokens() budget for completion also counts only the first prompt message and any supplied tool definitions.
Provider overrides of _handle_generate_response(), _handle_generate_stream_response(), and _create_final_llm_result_chunk() must accept and forward the optional tools parameter in SDK 0.11.0.
Overrides of _num_tokens_from_string() must follow the SDK signature (text, tools=None); the method does not take a model name.
In SDK 0.11.0 (unreleased), OAICompatLargeLanguageModel preserves SSE data alongside comments and unknown fields.
Responses marked text/event-stream ignore events without data; invalid JSON in data fields still raises an invocation error.
The parser handles LF, CRLF, and CR line endings within events, including with custom delimiters.
A single leading UTF-8 BOM is ignored for both default and custom delimiters.
Raw JSON objects, single-prefix multiline JSON, and final payloads without a blank-line terminator remain supported.
Explicit response charsets are respected; responses without a charset default to UTF-8.
Streams must include a non-empty finish_reason for the selected choice or a [DONE] event.
EOF without either raises an invocation error instead of returning a successful final chunk with partial text or tool calls.
SDK versions use MAJOR.MINOR.PATCH:
- Major: incompatible API or architectural changes.
- Minor: new features.
- Patch: bug fixes.
Before SDK 1.0, minor releases may include breaking changes. Review the release notes before upgrading.
Constrain your SDK dependency to the minor version you have tested while allowing patch updates.
For example, dify-plugin~=0.10.2 allows patches in the 0.10 series.
Review and test a new minor release before updating the constraint.
The SDK dependency version and your plugin's top-level version in manifest.yaml are separate from these compatibility fields:
meta.version: the manifest schema version, used by Dify to determine supported plugin capabilities.meta.minimum_dify_version: the earliest Dify version your plugin supports.
Set meta.minimum_dify_version for the features your plugin uses and test against that version.
Feature availability depends on the SDK, Dify, and the plugin daemon.
See the manifest schema for field definitions.
| Manifest Version | Description |
|---|---|
| 0.0.2 | Adds the mcp tool provider type; use this schema version for plugins that accept MCP tools. |
| 0.0.1 | Initial manifest specification. |
Minimum versions apply to the listed features.
| Minimum Dify Version | SDK Version | Description |
|---|---|---|
| 1.2.0 | 0.2.0 | Fetch application information. |
| 1.4.0 | 0.0.1-beta.49 | LLM multimodal output. |
| 1.4.0 | 0.3.1 | OAuth authorization URL and credential retrieval. |
| 1.5.1 | 0.4.0 | dynamic-select parameters. |
| 1.5.1 | 0.4.0 | LLM structured output. |
| 1.6.0 | 0.4.1 | icon_dark field in the manifest. |
| 1.7.0 | 0.4.2 | Tool OAuth. |
| 1.8.1 | 0.4.4 | Filename in MultiModalPromptMessageContent. |
| 1.9.0 | 0.5.0 | Datasource plugins. |
| 1.10.0 | 0.6.0 | Trigger plugins. |
| 1.11.0 | 0.7.0 | Multimodal reranking and embeddings. |
| 1.14.0 | 0.8.1 | Dependency and project structure cleanup. |
| 1.14.2 | 0.9.0 | LLM polling invocations. |
| 1.16.0 | 0.10.0 | Read app_id through get_current_session() during app LLM invocations. |
| 1.16.1 | 0.10.0 | multiple: true for tool select and dynamic-select parameters; requires plugin daemon 0.5.0 or later. |
| Pending | 0.11.0 (unreleased) | Tool parameter reset_on_change declarations; requires plugin daemon 0.6.11 or later and the pending Dify integration. |
| Pending | 0.11.0 (unreleased) | Optional OnlineDriveFile.remote_metadata; requires plugin daemon 0.6.11 or later, with Dify browse and change-detection support still pending. |
Starting in SDK 0.11.0 (unreleased), LargeLanguageModel.enforce_stop_tokens stops at the earliest literal sequence, including punctuation and backslashes.
An empty stop list or no matching sequence returns the full input.
Callers that used regex patterns must supply literal stop strings: for example, replace r"\." with "." to stop at a period.
An empty string inside the stop list still matches at the start of the input.