Identity infrastructure for APIs and AI agents.

import { AuthPIAdmin } from "@authpi/admin";

const admin = new AuthPIAdmin({
  apiKey: { id: process.env.AUTHPI_KEY_ID!, secret: process.env.AUTHPI_KEY_SECRET! },
  accountId: process.env.ACCOUNT_ID!,
});

const iss = admin.issuer(process.env.ISSUER_ID!);

// Provision the customer model your product already knows about.
const org = await iss.organizations.create({ name: "Acme", org_type: "business" });

await iss.organization(org.id).invitations.create({
  email_invited: "amir@acme.com",
  scopes: ["member"],
});

const key = await iss.organization(org.id).apiKeys.create({
  name: "Billing sync",
  type: "api_key",
  restrictions: { scopes: ["issuers.users:read", "events:read"] },
});

const agent = await iss.agents.create({
  name: "Support triage agent",
  scopes: ["tickets:read", "tickets:triage"],
});

const verifier = await iss.agent(agent.id).verifiers.create({
  type: "secret",
  name: "primary",
});

// The agent uses standard client_credentials at runtime.
// Mutations are available through the events API and subscribed webhooks.

from authpi_admin import AuthPIAdmin

async with AuthPIAdmin(api_key=(KEY_ID, KEY_SECRET), account_id=ACCOUNT_ID) as admin:
    iss = admin.issuer(ISSUER_ID)

    # Provision the customer model your product already knows about.
    org = await iss.organizations.create({"name": "Acme", "org_type": "business"})

    await iss.organization(org.id).invitations.create({
        "email_invited": "amir@acme.com",
        "scopes": ["member"],
    })

    key = await iss.organization(org.id).api_keys.create({
        "name": "Billing sync",
        "type": "api_key",
        "restrictions": {"scopes": ["issuers.users:read", "events:read"]},
    })

    agent = await iss.agents.create({
        "name": "Support triage agent",
        "scopes": ["tickets:read", "tickets:triage"],
    })

    verifier = await iss.agent(agent.id).verifiers.create({
        "type": "secret",
        "name": "primary",
    })

    # The agent uses standard client_credentials at runtime.
    # Mutations are available through the events API and subscribed webhooks.