Get an API key.

npm install @graypass/sdk

import { GrayPassV2 } from "@graypass/sdk";

// init returns a client instance - keep it around for the session lifetime
const gp = GrayPassV2.init({ apiKey: "pk_test_…" });

// startSession returns V2SessionStartResponse - snake_case fields, mirrors the JSON API.
const { session_id, enrolled, trust, state } = await gp.startSession({ userId: "user_42" });

gp.on("trust_change", ({ confidence, state, reasons }) => {
  console.log("trust ->", confidence, state, reasons);
});

// when the user clicks "Open dashboard":
const verdict = await gp.authorize("dashboard.example.com", { minTrust: 0.7 });
if (verdict.authorized) {
  document.cookie = `gp_token=${verdict.token}; Secure; SameSite=Lax`;
} else {
  // verdict.fallback ∈ {step_up_required, re_authenticate, wait_for_trust, session_killed}
}

// middleware.ts
import { withGrayPass } from "@graypass/middleware/nextjs";

export default withGrayPass({
  apiKey: process.env.GRAYPASS_SECRET_KEY!,
  minTrust: 0.4,
  target: "dashboard",
  stepUpRedirect: "/step-up",
});

export const config = { matcher: ["/dashboard/:path*"] };

curl -X POST https://app.graypass.org/v2/sessions/start \
  -H "Authorization: Bearer sk_test_…" \
  -H "Content-Type: application/json" \
  -d '{"user_id":"user_42"}'