Afixo

Developer identity infrastructure

Context-specific personas, purpose-aware disclosure at the API boundary. One endpoint returns exactly the identity a caller is permitted to see — for that caller, for that reason — and nothing else.

Context-specific personas

A subject keeps several partial identities — social, work, legal — each a bundle of typed fields graded 0–3 by sensitivity.

Purpose-aware disclosure

Requesters declare a purpose with every call. Grant-only rules keyed on (requester, purpose) decide which persona and which fields come back. Deny by default.

Audited by construction

Every allow and deny is written to a hash-chained log the subject can read and verify: who asked, why, and exactly which keys were released.

The product endpoint

GET https://api.afixo.io/v1/disclose/alice?purpose=shipping
Authorization: Bearer <requester token>

HTTP/1.1 200 OK
{
  "decision": "allow",
  "persona": "shipping",
  "fields": { "name": "Alice Example", "postal_address": "1 Example Row, Leeds" },
  "withheld": ["dob"],
  "decision_id": "dec_01j9…"
}

Same subject, different purpose or different requester → a different persona, a different field set, or a uniform 403. Unknown subjects are indistinguishable from denied ones.