private sdk distribution

Private SDK distribution through npm-compatible packages.

Customer SDKs are product surface area, not just build artifacts. PackagePass lets teams publish SDK packages and grant each customer the exact install access they need.

Create your first private package

Product demo

Publish generated SDKs as scoped TypeScript packages.

Grant install access to a customer subject or customer group.

Rotate tokens and inspect audit events when access changes.

Proof point

Customer-scoped package grants make private SDK delivery measurable and reversible.

Simple pricing

Start free, upgrade when packages become infrastructure.

Free for early setup. Team plans add higher limits, longer audit retention, and production package workflows.

customer-sdk.ts

await registry.customers.create({
  slug: "globex",
  name: "Globex"
});

await registry.grants.create({
  subject: { type: "customer", slug: "globex" },
  resource: { type: "package", name: "@acme/globex-sdk" },
  actions: ["package:install"]
});

FAQ

Can each customer get different access?

Yes. Grants can target customers, users, agents, groups, scopes, packages, or specific package versions.

Does this work for generated SDKs?

Yes. Generated TypeScript libraries and preview packages are core PackagePass workflows.