See it work. Then see the code.
Every card below makes a real call through Permisyn’s real proxy — a small, rate-limited demo budget, no account needed. What comes back is a real signed receipt, verified right in your browser against the org’s public key, not a canned screenshot.
You're wiring up your own project. Here's the two-line difference between an authorized call and a blocked one.
An authorized call
A real call, inside the demo agent's real passport. Authorized, forwarded to Groq, signed.
A blocked call
The same agent, asked for a model outside its passport. Blocked before it ever reaches the provider — and the denial is still a signed receipt.
Kill switch
This demo agent is permanently halted. Every call to it is denied instantly, the same real enforcement a live incident uses.
Budget cap
One header sets a hard per-call cost ceiling. Set it below the real cost and the call is refused before upstream, not billed then refunded.
Multi-agent chain of custody
Two real hops, linked. The second hop's input is hashed and checked against the first hop's real output — provable, not just claimed.
Compliance attestation
A signed statement built from this org's real enforcement history, mapped onto SOC 2's controls.
Want the full integration reference?
Read the developer guide →