Authorize · Protect · Govern

Autonomy for your agents. Authority for your team.

Where your AI spend is going, who's cleared to spend it, and the calls big enough to need your sign-off — in one place, above whatever gateway your engineers run. Every decision on a signed record.

Start freeTalk to us →
MCP · AWS Bedrock · REST
SANCTION
Agent Access Key
PXY · •••• · •••• · AGNT
Clearance ◆ 5 · Valid thru ∞
Cardholder
AUTONOMOUS AGENT
The seat above the stack

Your gateway routes the calls. Sanction is where you answer for them.

LiteLLM, Bedrock, Vercel — let them route, cache, and log. Sanction sits above whatever you run: the one place the people accountable for the spend can see it, set the budget, and sign off on the calls that cross the line.

For the CFO

The monthly number

Where AI spend went this month — by team, by provider — and whether you're on budget. The one figure that rolls up across every agent, in every division.

For the CTO

Who can do what

Which agents are cleared for which actions, the line where a human takes over, and a signed record of every call. Set the policy once; it holds across providers.

For the CMO

My team's usage

Your department's agent spend and budget at a glance — no ticket to engineering to find out what your team's AI actually costs this month.

Authorize

Agent Wallet

Budgets and policy on every spend and provisioning action. Auto-approve under threshold, escalate over it, deny what's blocked.

Protect

Credential Vault

AES-256-GCM at rest under a rotating KMS-wrapped key, tenant-isolated at the database. Scoped 15-minute execution tokens gate every injection.

Govern

Clearance Levels

A 1–5 clearance system. Agents only ever touch what they're explicitly cleared for. Fail-closed by default.

The decision engine

Every call comes back one of three ways.

Approved

Under the threshold, allowed category. The agent proceeds; the spend is logged.

Escalated

Over your line. The request pauses and waits for a human — approval mints a one-use grant.

Denied

Blocked category or over the hard cap. It never reaches the merchant.

For the builders

Three calls. Governed agent.

Register an agent, set a policy, authorize in real time. Real REST, real MCP — no SDK lock-in, nothing to babysit.

Read the docs →
# authorize.sh
curl -X POST /api/v1/authorize \
  -H "x-api-key: pxy_••••" \
  -d '{ "action": "purchase",
      "amount_usd": 12.50 }'

# → { "status": "approved" }
Security posture

Built like the company you're trusting it to be.

SOC 2 Type II
In flight — report available under NDA on completion.
Encrypted + isolated
AES-256-GCM at rest under a rotating key; row-level tenant isolation at the database.
Fail-closed
No policy match, no action. Denial is the default state.
Full audit trail
Every decision attributable, exportable, on the record.
Individual
Free
No card. Personal, production, and client work.
Start free
Enterprise
Paid license
SSO, policy administration, audit export, SLA, deployment control.
Commercial license guide →Talk to us
Stay in the loop

Not ready to wire up an agent?

Get launch updates and early access as we ship. One email when it matters — no spam.