Integration

Add authorization to a Fastify API

Use the same Node-native enforcer with Fastify to gate routes on an agent's warrant.

Why authorize Fastify tools?

Fastify's middleware-compatible hooks let you drop httpEnforcer in front of routes. The agent presents Authorization: Warrant CW1~…; you decide, per route, what resource and action it maps to; Liceat enforces and audits.

Register the enforcer

import middie from '@fastify/middie';
import { httpEnforcer, createClient } from 'liceat';
await fastify.register(middie);
fastify.use(httpEnforcer({ decide: createClient({ gateway: 'https://liceat.com' }).decider() }));

What you get

• Least privilege — each agent gets a warrant scoped to exactly the tools, resources, and spend it needs.
• Provable afterward — every allow/deny is recorded in a tamper-evident log you can audit or hand to a compliance reviewer.
• Instant revocation — kill a compromised agent's authority immediately, and it cascades to every sub-agent it delegated to.
• No new keys to leak — the agent never holds your API keys, only a narrow, expiring warrant.

Frequently asked

What is Liceat?

Liceat is permission infrastructure for AI agents. You issue a warrant — a scoped, spend-capped, revocable token — that grants an agent narrow authority; the agent presents it at the point of action; Liceat enforces it (scope, spend, rate, holder-binding, revocation) and records every decision in a tamper-evident log. It is open source with a zero-dependency SDK for TypeScript and Python.

Is it free?

The SDK and self-hosted gateway are free and open source. The hosted gateway at liceat.com gives 10,000 free decisions with no card, then meters at fractions of a cent per decision — payable by card or USDC.