Govern your first action

Connect one low-risk TypeScript function to Sernixa, run it, and confirm the decision in the Command Center. Most teams can complete this path in about 15 minutes.

Before you begin

You need:

• a Sernixa account and an active organization;
• security-admin access to create an API key;
• Node.js 18 or later; and
• one non-destructive function to protect.

If your workspace is new, empty charts and lists are expected until the first integration sends activity.

1. Create an API key

In Sernixa, open Dev, select Generate key, give the key a name that identifies its application and environment, and choose the minimum roles it needs.

Copy the key into your secret manager when it is shown. The raw value is available only once.

2. Install the SDK

npm install @sernixa/sdk

Set the hosted API URL and your organization key in the environment that runs your application:

export SERNIXA_BASE_URL=https://api.sernixa.com
export SERNIXA_API_KEY="<your-organization-api-key>"

3. Confirm the identity

Use whoami() before protecting a real action. It confirms that the key is valid and shows which organization and permissions the application will use.

import { Client } from '@sernixa/sdk'

const client = new Client()
const identity = await client.whoami()

console.log(identity.organization_id, identity.permissions)

Stop here if the organization is not the one you expect.

4. Protect a low-risk function

Wrap the function with clear, stable context. By default, the SDK describes the call without uploading function argument values.

const readAccount = client.intercept(
  async (accountId: string) => ({ accountId, status: 'active' }),
  {
    intentId: 'account-summary-read',
    riskLevel: 'LOW',
    operationClass: 'read',
    dataSensitivity: 'internal',
    systemsTouched: ['crm'],
  },
)

console.log(await readAccount('acct_123'))

The function runs after an approved decision. A blocked or rejected decision stops it before the business action executes.

5. Verify the complete path

Open Command Center and confirm:

• the action appears under the expected organization;
• the agent, operation, risk, and decision match the request;
• a review request appears if policy requires a person; and
• the application handles the returned result or error as intended.

Next step

Read How Sernixa works, then set a deliberate policy and approval posture before expanding to higher-impact actions.