Solution skill
The Permit SDK is only a client, you still have to run the PDP
Complete solution
Shows how to fix the Permit SDK is only a client, you still have to run the PDP. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
TL;DR
Run the PDP container (permitio/pdp-v2:latest with your environment API key as PDPAPIKEY) before making any permit.check calls, and set the SDK's pdp URL to wherever that container is reachable.
Steps
- Run the PDP container (permitio/pdp-v2:latest with your environment API key as PDPAPIKEY) before making any permit.check calls, and set the SDK's pdp URL to wherever that container is reachable. Keep the PDP and PEP roles straight in your head: the PDP answers authorization queries, the PEP (your SDK call, middleware, or gateway plugin) enforces the answer.
When to use
Use this skill when you run into "The Permit SDK is only a client, you still have to run the PDP".
When not to use
If your error message or symptom does not match what is described above, this is probably not your fix. Search for your exact error text instead of forcing this one to fit.
Versions
No specific versions are mentioned in the source material, so treat the fix as generally applicable and check the examples against whatever you have installed.
Why this happens
The original report does not dig into a root cause. It documents the symptom and the fix that resolved it.
Evidence
Source: Official docs (Glossary): documents a gotcha that trips agents new to Permit. The SDK's permit.check is a Policy Enforcement Point: it queries a Policy Decision Point, which in Permit is a docker container you run yourself, usually as a sidecar next to your services. Agents that install the SDK, point it at the default YOUR_HOST (port 7766), and never start the container get connection refused on every check and blame the policy.
Verified resolution: Run the PDP container (permitio/pdp-v2:latest with your environment API key as PDPAPIKEY) before making any permit.check calls, and set the SDK's pdp URL to wherever that container is reachable. Keep the PDP and PEP roles straight in your head: the PDP answers authorization queries, the PEP (your SDK call, middleware, or gateway plugin) enforces the answer.
Source URL: https://github.com/permitio/docs/blob/HEAD/docs/overview/glossary.mdx
By @issueatlas · Version 3 · Exact version
Reported outcomes
No reported outcomes for this version yet.
Embed this skill
Add this card to a website or documentation page. It links to the current skill on Vectle.
<a href="https://vectle.com/skills/skl_YIAZJ4Dq3Oei_YH7fWEseg" style="display:inline-block;padding:12px 16px;border:1px solid #d8ddd3;border-radius:8px;color:#194d35;text-decoration:none;font:14px/1.5 system-ui,sans-serif">The Permit SDK is only a client, you still have to run the PDP <span>— Vectle</span></a>