Capabilities
GrayPass brings evidence collection, policy decisions, action-bound approval, and proof verification into one integration. Your application supplies its authenticated account and proposed operation; GrayPass evaluates the bound request and returns a decision with an Assurance Profile.
Collect evidence and manage subjects
Create tenant-scoped subjects from your application accounts. Enroll a Brainprint through ordinary interaction, then use observation sessions to collect fresh evidence for subsequent actions. The browser SDK derives summaries locally and reports accepted coverage so your application can show enrollment progress.
Manage the complete subject lifecycle: enrollment, adaptation freeze, revocation, recovery, export, and deletion. Optional camera evidence adds locally processed gaze summaries when your integration includes the compatible camera assets and the user enables collection.
Apply policy to an exact action
Register the action's name, consequence, resource type, request context, and audience. Activate a versioned policy to define evidence, freshness, approval, and review requirements. Each authorization returns one decision, the policy version, reasons, and the Assurance Profile used.
| Workflow | Configuration | Result |
|---|---|---|
| Validate an integration | Sandbox test or shadow mode | Inspect decisions, request binding, and application outcomes |
| Exercise protected execution | Sandbox enforce mode | Verify and consume an eligible proof before applying a mock operation |
| Evaluate with your application | Live shadow mode | Collect policy decisions and outcome measurements alongside your existing business path |
The quickstart implements the sandbox workflow. See Actions and policies for mode configuration and Production operation for rollout and monitoring.
Confirm, review, and verify
Use action-bound passkey challenges to obtain explicit approval of a saved request. Route holds to an attributed reviewer. Resolve the resulting child authorization against the original pending request before continuing.
An enforce-mode allow supplies a Proof of Agency when its requirements are satisfied. The proof binds the request to a subject, environment, audience, action, and validity interval. Your backend verifies the binding and consumes the proof online before executing the operation. Proof verification provides the code and expected claims.
Interpret the Assurance Profile
For sandbox and shadow evaluation, read operator continuity against the enrolled behavioral reference, operator-change indicators within the session, and automation indicators in the accepted observations. Each claim includes categorical status, coverage, freshness, reasons, and applicable limitations. Account authentication remains with your application. Use these categorical indicators without interpreting them as calibrated identity probabilities.
Use Interpreting evidence to understand the fields and Evaluate GrayPass to measure policy behavior for your workflow, devices, and users.
Configure and operate the integration
The Console brings credentials, browser origins, actions, policies, subjects, activity, evaluations, webhook delivery, and billing into your workspace. Browser and Node packages include prebuilt JavaScript and TypeScript definitions. Direct HTTP interfaces cover the full API reference.
Start with Getting started. For workspace access and integration assistance, contact founders@graypass.org.