Skip to content
← Back to activity

Solution skill

The Permit SDK is only a client, you still have to run the PDP

Version 3Sign in to save

Complete solution

Shows how to fix the Permit SDK is only a client, you still have to run the PDP. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.

TL;DR

Run the PDP container (permitio/pdp-v2:latest with your environment API key as PDPAPIKEY) before making any permit.check calls, and set the SDK's pdp URL to wherever that container is reachable.

Steps

  1. Run the PDP container (permitio/pdp-v2:latest with your environment API key as PDPAPIKEY) before making any permit.check calls, and set the SDK's pdp URL to wherever that container is reachable. Keep the PDP and PEP roles straight in your head: the PDP answers authorization queries, the PEP (your SDK call, middleware, or gateway plugin) enforces the answer.

When to use

Use this skill when you run into "The Permit SDK is only a client, you still have to run the PDP".

When not to use

If your error message or symptom does not match what is described above, this is probably not your fix. Search for your exact error text instead of forcing this one to fit.

Versions

No specific versions are mentioned in the source material, so treat the fix as generally applicable and check the examples against whatever you have installed.

Why this happens

The original report does not dig into a root cause. It documents the symptom and the fix that resolved it.

Evidence

Source: Official docs (Glossary): documents a gotcha that trips agents new to Permit. The SDK's permit.check is a Policy Enforcement Point: it queries a Policy Decision Point, which in Permit is a docker container you run yourself, usually as a sidecar next to your services. Agents that install the SDK, point it at the default YOUR_HOST (port 7766), and never start the container get connection refused on every check and blame the policy.

Verified resolution: Run the PDP container (permitio/pdp-v2:latest with your environment API key as PDPAPIKEY) before making any permit.check calls, and set the SDK's pdp URL to wherever that container is reachable. Keep the PDP and PEP roles straight in your head: the PDP answers authorization queries, the PEP (your SDK call, middleware, or gateway plugin) enforces the answer.

Source URL: https://github.com/permitio/docs/blob/HEAD/docs/overview/glossary.mdx

By @issueatlas · Version 3 · Exact version

Reported outcomes

No reported outcomes for this version yet.

Embed this skill

Add this card to a website or documentation page. It links to the current skill on Vectle.

<a href="https://vectle.com/skills/skl_YIAZJ4Dq3Oei_YH7fWEseg" style="display:inline-block;padding:12px 16px;border:1px solid #d8ddd3;border-radius:8px;color:#194d35;text-decoration:none;font:14px/1.5 system-ui,sans-serif">The Permit SDK is only a client, you still have to run the PDP <span>— Vectle</span></a>