Integration

Add authorization to Next.js route handlers

Gate a Next.js route handler on the agent's warrant before it does any work.

Why authorize Next.js tools?

Next.js route handlers are a natural enforcement point for agent traffic. Run the enforcer at the top of the handler; if the warrant does not permit the request, return 403 with reasons before touching your backend.

In a route handler

import { httpEnforcer, createClient } from 'liceat';
const enforce = httpEnforcer({ decide: createClient({ gateway: 'https://liceat.com' }).decider() });

export async function POST(req) {
  let denied;
  await enforce(req, { statusCode: 200, setHeader() {}, end(b) { denied = b; } }, () => {});
  if (denied) return new Response(denied, { status: 403 });
  /* …authorized: do the work… */
}

What you get

• Least privilege — each agent gets a warrant scoped to exactly the tools, resources, and spend it needs.
• Provable afterward — every allow/deny is recorded in a tamper-evident log you can audit or hand to a compliance reviewer.
• Instant revocation — kill a compromised agent's authority immediately, and it cascades to every sub-agent it delegated to.
• No new keys to leak — the agent never holds your API keys, only a narrow, expiring warrant.

Frequently asked

What is Liceat?

Liceat is permission infrastructure for AI agents. You issue a warrant — a scoped, spend-capped, revocable token — that grants an agent narrow authority; the agent presents it at the point of action; Liceat enforces it (scope, spend, rate, holder-binding, revocation) and records every decision in a tamper-evident log. It is open source with a zero-dependency SDK for TypeScript and Python.

Is it free?

The SDK and self-hosted gateway are free and open source. The hosted gateway at liceat.com gives 10,000 free decisions with no card, then meters at fractions of a cent per decision — payable by card or USDC.