First Delegation in 5 Minutes

Install the Cred SDK:

npm install @credninja/sdk

Or for Python: pip install cred-auth

From your self-hosted Cred deployment, you need:

• Base URL: The HTTPS URL of your Cred server
• App Client ID: Usually local for the default self-hosted flow
• Agent Token: The AGENT_TOKEN configured on the server

# Add to your .env file
CRED_BASE_URL=https://cred.example.com
CRED_APP_CLIENT_ID=your_app_client_id
CRED_AGENT_TOKEN=cred_at_...

Initialize the client with your credentials:

import { Cred, ConsentRequiredError } from '@credninja/sdk';

const cred = new Cred({
  agentToken: process.env.CRED_AGENT_TOKEN,
  appClientId: process.env.CRED_APP_CLIENT_ID,
  baseUrl: process.env.CRED_BASE_URL,
});

Call delegate() with the user ID, service, and scopes:

async function getCalendarEvents(userId: string) {
  try {
    // Request delegated access to Google Calendar
    const { accessToken } = await cred.delegate({
      userId,
      service: 'google',
      appClientId: process.env.CRED_APP_CLIENT_ID,
      scopes: ['calendar.readonly'],
    });

    // Use the token directly with Google API
    const response = await fetch(
      'https://www.googleapis.com/calendar/v3/calendars/primary/events',
      {
        headers: {
          Authorization: `Bearer ${accessToken}`,
        },
      }
    );

    return response.json();
  } catch (error) {
    if (error instanceof ConsentRequiredError) {
      // User hasn't authorized yet
      // Redirect them to the consent URL
      console.log('Redirect user to:', error.consentUrl);
      return null;
    }
    throw error;
  }
}

The first time you request delegation for a user, they need to authorize your app:

// In your web app
app.get('/connect/google', async (req, res) => {
  try {
    await cred.delegate({
      userId: req.user.id,
      service: 'google',
      appClientId: process.env.CRED_APP_CLIENT_ID,
      scopes: ['calendar.readonly'],
    });
    // Already authorized, proceed
    res.redirect('/dashboard');
  } catch (error) {
    if (error instanceof ConsentRequiredError) {
      // Redirect to your self-hosted Cred consent page
      res.redirect(error.consentUrl);
    }
  }
});

// After user approves, they're redirected back
app.get('/callback', async (req, res) => {
  // Now delegation will succeed
  const { accessToken } = await cred.delegate({
    userId: req.user.id,
    service: 'google',
    appClientId: process.env.CRED_APP_CLIENT_ID,
    scopes: ['calendar.readonly'],
  });
  // Use the token...
});