Authorize from any trusted Node backend.

Call AccessVerdict from your backend

Keep the project API key in a server environment variable. Client applications should never receive the credential.

Use the REST API

const response = await fetch("https://accessverdict.dev/api/v1/verify", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.ACCESSVERDICT_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    policyId: process.env.ACCESSVERDICT_POLICY_ID,
    wallet,
  }),
});
const result = await response.json();

Use the server SDK

import { createAccessVerdictClient } from "@accessverdict/sdk";
const accessVerdict = createAccessVerdictClient({
  apiKey: process.env.ACCESSVERDICT_API_KEY!,
});

Three decision states

allowed and denied are conclusive policy results. error means verification could not produce a trustworthy decision.