Live demo · development environment
A company's purchasing agent orders from a service that has never seen it. Watch the Grant, the Proof, the one call and the signed receipt, executed by the real engine on the development environment. Every receipt below is real; the identities are sandbox ones, not production.
Nothing yet.
Run the handshake to see the Grant the company signed.
A company’s procurement agent buys GPU time paid by card and datasets on a net-30 invoice, under one signed permission. Orders outside it are refused before any payment runs. One revoke, and both sellers refuse.
Recorded from a live run in Stripe test mode, with example companies. Full recording page
The receiving service adds one call to its request handler. This is the whole relying-party integration as spec §15 gives it; the seller in our demo application, including its error handling, is 68 lines.
import { Delegus } from "@delegus/sdk";
const delegus = new Delegus({ apiKey: process.env.DELEGUS_API_KEY, publicBaseUrl: "https://seller.example" });
app.post("/orders", async (req, res) => {
const d = await delegus.verify({
grant: req.header("Delegus-Grant"),
proof: req.header("Delegus-Proof"),
action: { type: "commerce:purchase", resource: req.body.orderId, amount: req.body.amountMinor, currency: req.body.currency },
request: { method: req.method, path: req.path },
});
if (d.decision !== "ALLOW") return res.status(403).json({ reason: d.reason });
// proceed; persist d.receipt with the order
});
A note on the receipts above: on a revocation the receipt reports trust.result FAIL as well as protocol FAIL. No trust check failed; the replay check T5 is skipped once P6 fails, and the specification defines PASS as every check true. The per-check list shows exactly that.
Two headers come in with the agent's request. Your service forwards them with its own description of the action, gets ALLOW or DENY with a reason, and keeps the receipt. No keys, credential formats or revocation lists to handle. Read the integration guide or try the same calls yourself.
Free to start: a sandbox with no card, then 14 days free in production. See pricing
Running agents across many sellers? Talk to us.