PRISMATECH SHIELD / Developers

Your first controlled integration.

A synthetic example of the existing SDK contract.

Prerequisites

After approved onboarding, select the existing project, save the key once after reauthentication, and prepare the private SDK build locally. No real customer data in tests.

Handle the result

BLOCK denies the operation. REQUIRE_2FA requires another factor. Technical failure or exhausted quota keeps the operation denied.

Synthetic server-side example · no production credentials

import { ShieldClient } from "@prismatech/shield-sdk";

const shield = new ShieldClient({
  baseUrl: process.env.SHIELD_API_URL!,
  apiKey: process.env.SHIELD_API_KEY!,
  failureMode: "fail-closed"
});
const result = await shield.evaluateLogin({
  subject: { id: "synthetic-user" },
  idempotencyKey: "synthetic-login-0001"
});
if (result.degraded || result.decision !== "ALLOW") {
  throw new Error("ACCESS_REQUIRES_REVIEW");
}

Public registration and email verification are not yet approved. Existing customers use the customer portal. No accounts or keys are created here.