Create a policy domain
Separate policy ownership by product, tenant, business unit, or environment.
Use Permra to evaluate scope, request approval when needed, issue a constrained grant, and preserve evidence.
const decision = await permra.evaluate(({
agent: "finops-agent",
action: "transfers.create",
context: { amount: 25000 },
});
if (decision.requiresApproval) {
await decision.requestApproval();
}Model the agent, action, resource, and context. Permra returns a structured decision your application can enforce.
Separate policy ownership by product, tenant, business unit, or environment.
Send the acting agent, represented user, operation, resource, and contextual facts.
Continue on allow, create an approval on ask, and stop cleanly on deny.
This is an example of the documentation experience. SDK packages and endpoint details will be published with the developer docs.
Start with one agent, one consequential action, and one clear policy.