Three lines of SDK. A hosted consent screen your users trust. Signed tokens your agent can verify.
Hosted, clean, mobile-first. Every permission explained in plain language. Risk level on every scope — low, medium, or high. One tap to approve or decline.
Requests, approvals, active consents, webhook health — all with sparklines for the last 7 days. Know exactly how your agents are performing.
Every request, approval, decline, revocation, and token verification — logged with actor, IP, and timestamp. Filter by agent or event type. Ready for compliance.
HMAC-signed payloads fired on every consent event. Automatic retry with exponential backoff (1m → 5m → 30m → 2h → 8h). Test delivery from your dashboard in one click.
No user passwords. No payment data. API keys are bcrypt-hashed on arrival — we can never read them, and neither can attackers. Even a full database dump reveals only consent metadata.
Drop in. Redirect. Done.
from permitly import PermitlyClient, ScopeTemplates
# 1. Initialize
client = PermitlyClient("sk_live_...")
# 2. Request consent
result = client.consent.request({
"end_user_ref": "user_123",
"scopes": [ScopeTemplates.send_email()],
"redirect_url": "https://yourapp.com/done"
})
# 3. Redirect user to hosted consent screen
return redirect(result.consent_url)No feature gates. Full infrastructure from day one.
Full pricing details at permitly.dev/pricing