openai/openai-node
OpenAI TypeScript and JavaScript API Library
This library provides convenient access to the OpenAI REST API from TypeScript or JavaScript.
It is generated from our OpenAPI specification with Stainless.
To learn how to use the OpenAI API, check out our API Reference and Documentation.
Installation
|
|
Installation from JSR
|
|
These commands will make the module importable from the @openai/openai scope. You can also import directly from JSR without an install step if you’re using the Deno JavaScript runtime:
|
|
Usage
The full API of this library can be found in api.md file along with many code examples.
The primary API for interacting with OpenAI models is the Responses API. You can generate text from the model with the code below.
|
|
The previous standard (supported indefinitely) for generating text is the Chat Completions API. You can use that API to generate text from the model with the code below.
|
|
Streaming responses
We provide support for streaming responses using Server Sent Events (SSE).
|
|
File uploads
Request parameters that correspond to file uploads can be passed in many different forms:
File(or an object with the same structure)- a
fetchResponse(or an object with the same structure) - an
fs.ReadStream - the return value of our
toFilehelper
|
|
Webhook Verification
Verifying webhook signatures is optional but encouraged.
For more information about webhooks, see the API docs.
Parsing webhook payloads
For most use cases, you will likely want to verify the webhook and parse the payload at the same time. To achieve this, we provide the method client.webhooks.unwrap(), which parses a webhook request and verifies that it was sent by OpenAI. This method will throw an error if the signature is invalid.
Note that the body parameter must be the raw JSON string sent from the server (do not parse it first). The .unwrap() method will parse this JSON for you into an event object after verifying the webhook was sent from OpenAI.
|
|
Verifying webhook payloads directly
In some cases, you may want to verify the webhook separately from parsing the payload. If you prefer to handle these steps separately, we provide the method client.webhooks.verifySignature() to only verify the signature of a webhook request. Like .unwrap(), this method will throw an error if the signature is invalid.
Note that the body parameter must be the raw JSON string sent from the server (do not parse it first). You will then need to parse the body after verifying the signature.
|
|
Handling errors
When the library is unable to connect to the API,
or if the API returns a non-success status code (i.e., 4xx or 5xx response),
a subclass of APIError will be thrown:
|
|
Error codes are as follows:
| Status Code | Error Type |
|---|---|
| 400 | BadRequestError |
| 401 | AuthenticationError |
| 403 | PermissionDeniedError |
| 404 | NotFoundError |
| 422 | UnprocessableEntityError |
| 429 | RateLimitError |
| >=500 | InternalServerError |
| N/A | APIConnectionError |
Request IDs
For more information on debugging requests, see these docs
All object responses in the SDK provide a _request_id property which is added from the x-request-id response header so that you can quickly log failing requests and report them back to OpenAI.
|
|
You can also access the Request ID using the .withResponse() method:
|
|
Realtime API Beta
The Realtime API enables you to build low-latency, multi-modal conversational experiences. It currently supports text and audio as both input and output, as well as function calling through a WebSocket connection.
|
|
For more information see realtime.md.
Microsoft Azure OpenAI
To use this library with Azure OpenAI, use the AzureOpenAI
class instead of the OpenAI class.
[!IMPORTANT] The Azure API shape slightly differs from the core API shape which means that the static types for responses / params won’t always be correct.
|
|
Retries
Certain errors will be automatically retried 2 times by default, with a short exponential backoff. Connection errors (for example, due to a network connectivity problem), 408 Request Timeout, 409 Conflict, 429 Rate Limit, and >=500 Internal errors will all be retried by default.
You can use the maxRetries option to configure or disable this:
|
|
Timeouts
Requests time out after 10 minutes by default. You can configure this with a timeout option:
|
|
On timeout, an APIConnectionTimeoutError is thrown.
Note that requests which time out will be retried twice by default.
Request IDs
For more information on debugging requests, see these docs
All object responses in the SDK provide a _request_id property which is added from the x-request-id response header so that you can quickly log failing requests and report them back to OpenAI.
|
|
You can also access the Request ID using the .withResponse() method:
|
|
Auto-pagination
List methods in the OpenAI API are paginated.
You can use the for await … of syntax to iterate through items across all pages:
|
|
Alternatively, you can request a single page at a time:
|
|
Realtime API Beta
The Realtime API enables you to build low-latency, multi-modal conversational experiences. It currently supports text and audio as both input and output, as well as function calling through a WebSocket connection.
|
|
For more information see realtime.md.
Microsoft Azure OpenAI
To use this library with Azure OpenAI, use the AzureOpenAI
class instead of the OpenAI class.
[!IMPORTANT] The Azure API shape slightly differs from the core API shape which means that the static types for responses / params won’t always be correct.
|
|
For more information on support for the Azure API, see azure.md.
Advanced Usage
Accessing raw Response data (e.g., headers)
The “raw” Response returned by fetch() can be accessed through the .asResponse() method on the APIPromise type that all methods return.
This method returns as soon as the headers for a successful response are received and does not consume the response body, so you are free to write custom parsing or streaming logic.
You can also use the .withResponse() method to get the raw Response along with the parsed data.
Unlike .asResponse() this method consumes the body, returning once it is parsed.
|
|
Logging
[!IMPORTANT] All log messages are intended for debugging only. The format and content of log messages may change between releases.
Log levels
The log level can be configured in two ways:
- Via the
OPENAI_LOGenvironment variable - Using the
logLevelclient option (overrides the environment variable if set)
|
|
Available log levels, from most to least verbose:
'debug'- Show debug messages, info, warnings, and errors'info'- Show info messages, warnings, and errors'warn'- Show warnings and errors (default)'error'- Show only errors'off'- Disable all logging
At the 'debug' level, all HTTP requests and responses are logged, including headers and bodies.
Some authentication-related headers are redacted, but sensitive data in request and response bodies
may still be visible.
Custom logger
By default, this library logs to globalThis.console. You can also provide a custom logger.
Most logging libraries are supported, including pino, winston, bunyan, consola, signale, and @std/log. If your logger doesn’t work, please open an issue.
When providing a custom logger, the logLevel option still controls which messages are emitted, messages
below the configured level will not be sent to your logger.
|
|
Making custom/undocumented requests
This library is typed for convenient access to the documented API. If you need to access undocumented endpoints, params, or response properties, the library can still be used.
Undocumented endpoints
To make requests to undocumented endpoints, you can use client.get, client.post, and other HTTP verbs.
Options on the client, such as retries, will be respected when making these requests.
|
|
Undocumented request params
To make requests using undocumented parameters, you may use // @ts-expect-error on the undocumented
parameter. This library doesn’t validate at runtime that the request matches the type, so any extra values you
send will be sent as-is.
|
|
For requests with the GET verb, any extra params will be in the query, all other requests will send the
extra param in the body.
If you want to explicitly send an extra argument, you can do so with the query, body, and headers request
options.
Undocumented response properties
To access undocumented response properties, you may access the response object with // @ts-expect-error on
the response object, or cast the response object to the requisite type. Like the request params, we do not
validate or strip extra properties from the response from the API.
Customizing the fetch client
If you want to use a different fetch function, you can either polyfill the global:
|
|
Or pass it to the client:
|
|
Fetch options
If you want to set custom fetch options without overriding the fetch function, you can provide a fetchOptions object when instantiating the client or making a request. (Request-specific options override client options.)
|
|
Configuring proxies
To modify proxy behavior, you can provide custom fetchOptions that add runtime-specific proxy
options to requests:
Node [docs]
|
|
Bun [docs]
|
|
Deno [docs]
|
|
Frequently Asked Questions
Semantic versioning
This package generally follows SemVer conventions, though certain backwards-incompatible changes may be released as minor versions:
- Changes that only affect static types, without breaking runtime behavior.
- Changes to library internals which are technically public but not intended or documented for external use. (Please open a GitHub issue to let us know if you are relying on such internals.)
- Changes that we do not expect to impact the vast majority of users in practice.
We take backwards-compatibility seriously and work hard to ensure you can rely on a smooth upgrade experience.
We are keen for your feedback; please open an issue with questions, bugs, or suggestions.
Requirements
TypeScript >= 4.9 is supported.
The following runtimes are supported:
-
Node.js 20 LTS or later (non-EOL) versions.
-
Deno v1.28.0 or higher.
-
Bun 1.0 or later.
-
Cloudflare Workers.
-
Vercel Edge Runtime.
-
Jest 28 or greater with the
"node"environment ("jsdom"is not supported at this time). -
Nitro v2.6 or greater.
-
Web browsers: disabled by default to avoid exposing your secret API credentials. Enable browser support by explicitly setting
dangerouslyAllowBrowserto true'.More explanation
Why is this dangerous?
Enabling the
dangerouslyAllowBrowseroption can be dangerous because it exposes your secret API credentials in the client-side code. Web browsers are inherently less secure than server environments, any user with access to the browser can potentially inspect, extract, and misuse these credentials. This could lead to unauthorized access using your credentials and potentially compromise sensitive data or functionality.When might this not be dangerous?
In certain scenarios where enabling browser support might not pose significant risks:
- Internal Tools: If the application is used solely within a controlled internal environment where the users are trusted, the risk of credential exposure can be mitigated.
- Public APIs with Limited Scope: If your API has very limited scope and the exposed credentials do not grant access to sensitive data or critical operations, the potential impact of exposure is reduced.
- Development or debugging purpose: Enabling this feature temporarily might be acceptable, provided the credentials are short-lived, aren’t also used in production environments, or are frequently rotated.
Note that React Native is not supported at this time.
If you are interested in other runtime environments, please open or upvote an issue on GitHub.