Three lines of SDK. A hosted consent screen your users trust. Signed tokens your agent can verify.
Four steps between "agent needs permission" and "signed, revocable, provable."
Three lines. Your agent requests a scope — no auth infrastructure to stand up.
A hosted consent screen — not your UI, not a generic OAuth dialog.
Your agent receives a JWT signed with a per-agent ECDSA key — verify it offline, no callback required.
Your user can pull the permission at any time from their own revocation portal — no ticket to your support inbox.
Hosted, clean, mobile-first. Every permission explained in plain language. Risk level on every scope — low, medium, or high. One tap to approve or decline.
Requests, approvals, active consents, webhook health — all with sparklines for the last 7 days. Know exactly how your agents are performing.
Every request, approval, decline, revocation, and token verification — logged with actor, IP, and timestamp. Filter by agent or event type. Ready for compliance. Enterprise buyers are already asking: can you prove what your agent did? Now you can answer yes.
HMAC-signed payloads fired on every consent event. Automatic retry with exponential backoff (1m → 5m → 30m → 2h → 8h). Test delivery from your dashboard in one click.
No user passwords. No payment data. API keys are bcrypt-hashed on arrival — we can never read them, and neither can attackers. Even a full database dump reveals only consent metadata.
Drop in. Redirect. Done.
from permitly import PermitlyClient, ScopeTemplates
# 1. Initialize
client = PermitlyClient("sk_live_...")
# 2. Request consent
result = client.consent.request({
"end_user_ref": "user_123",
"scopes": [ScopeTemplates.send_email()],
"redirect_url": "https://yourapp.com/done"
})
# 3. Redirect user to hosted consent screen
return redirect(result.consent_url)Your user approves. You get a signed token. Your agent acts.
What it actually costs to roll your own consent layer.
No feature gates. Full infrastructure from day one.
Full pricing details at permitly.dev/pricing
Everything you need to know about AI agent consent, delegation, and security.
Permitly is hosted consent infrastructure and execution delegation for AI agents. It enables AI tools to request explicit human authorization before executing high-risk actions.
When a user approves consent, Permitly returns an ECDSA cryptographically signed JWT token containing granted scopes and expiration timestamps that your agent can verify offline.
Free forever. No card to start building — verify once to go live.
Get your API key →