Canopy SDKs for JavaScript
The official JavaScript and TypeScript client libraries for Canopy — hierarchical identity and access management for B2B SaaS.
This repository is the whole family. Each package is published independently to npm under the @canopy-io scope, and each has its own README describing what it does.
Packages
| Package | What it is |
|---|
@canopy-io/node | The server client. Calls the API, verifies access tokens, and has zero runtime dependencies. |
@canopy-io/nestjs | The NestJS integration. Wraps the client in a module and turns an authorization check into a decorator on the route. |
@canopy-io/browser | The browser client. Signs a single-page app in through Canopy's hosted login as a public OAuth client, with PKCE and tokens kept in memory. |
@canopy-io/nestjs depends on @canopy-io/node and installs it for you. A NestJS application needs only the integration package; anything else needs the client.
What they have in common
Everything here is TypeScript and ships both ESM and CommonJS. The server packages require Node 18 or later; @canopy-io/browser runs in any browser with the Web Crypto API.
Every request and response type is generated from the same OpenAPI document that renders Canopy's API reference, and CI fails when the committed types no longer match it — so a package cannot silently describe an API that has moved on.
These are the only official SDKs. That specification is published so a generator can produce a client for Python, Go, or anything else, which serves those languages better than a partly-maintained SDK would.
For AI coding assistants
The Canopy agent skill teaches an assistant to integrate Canopy correctly: which sign-in shape to choose, verifying tokens, authorizing locally, failing closed, and the mistakes to avoid. Every code block in it is compiled against these packages in CI.
In Claude Code:
/plugin marketplace add canopy-identity/canopy-javascript
/plugin install canopy@canopy-javascript
Other assistants can read the same Markdown files directly, starting from SKILL.md. AGENTS.md points there too.
Contributing
See CONTRIBUTING.md for building, testing, and releasing.
License
MIT © Canopy Identity Inc.
