Third-Party Integration

Phosra connects to external platforms (DNS filters, streaming services, gaming consoles, browsers, devices) and pushes your child safety rules to each one. This guide covers how platform connections work.

Supported Platforms

Platforms are grouped by category:

Category	Examples	Auth Type
`dns`	NextDNS, CleanBrowsing	API key
`streaming`	Disney+, Hulu, YouTube	OAuth 2.0
`gaming`	Xbox, PlayStation, Nintendo	OAuth 2.0
`device`	Apple Screen Time, Google Family Link	Device key
`browser`	Chrome, Safari	Extension API

List all platforms:

curl https://prodapi.phosra.com/api/v1/platforms \
  -H "Authorization: Bearer $PHOSRA_API_KEY"

Filter by category:

curl "https://prodapi.phosra.com/api/v1/platforms/by-category?category=dns" \
  -H "Authorization: Bearer $PHOSRA_API_KEY"

Connecting a Platform

API Key Platforms

For platforms that use API keys (like NextDNS), pass the credentials directly:

curl -X POST https://prodapi.phosra.com/api/v1/compliance \
  -H "Authorization: Bearer $PHOSRA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "family_id": "FAMILY_UUID",
    "platform_id": "nextdns",
    "credentials": "nextdns-api-key-here"
  }'

OAuth Platforms

For OAuth platforms, redirect the user through the authorization flow:

# 1. Get the authorization URL
curl "https://prodapi.phosra.com/api/v1/platforms/netflix/oauth/authorize?redirect_uri=https://yourapp.com/callback" \
  -H "Authorization: Bearer $PHOSRA_API_KEY"

# 2. User authorizes in browser, redirected to your callback with ?code=...

# 3. Exchange the code
curl "https://prodapi.phosra.com/api/v1/platforms/netflix/oauth/callback?code=AUTH_CODE&redirect_uri=https://yourapp.com/callback" \
  -H "Authorization: Bearer $PHOSRA_API_KEY"

Compliance Tiers

Each platform carries a tier field indicating how deep Phosra’s integration with that platform is:

Tier	Meaning
`compliant`	Full API support. All applicable rules can be enforced.
`provisional`	Partial API support. Some rules may be skipped.
`pending`	Integration in development. Manual configuration required.

This is the platform integration tier (the tier field on a GET /platforms entry) — an unrelated concept from the OCSS Trust-List accreditation tier, which also uses the word provisional (see Trust Framework). For the per-rule honesty map of what Phosra can actually enforce on each platform, prefer the newer enforcement_mode + rule_support fields — see Platforms & enforcement modes.

Verifying Connections

After connecting, verify that credentials are still valid:

curl -X POST https://prodapi.phosra.com/api/v1/compliance/LINK_UUID/verify \
  -H "Authorization: Bearer $PHOSRA_API_KEY"

Set up a periodic verification check (e.g., daily cron) to catch expired tokens or revoked access early.

Rule Translation

Not every platform supports every rule category. When Phosra enforces a policy, it:

Reads the child’s active policy and its rules
For each connected platform, maps supported rule categories to platform-specific API calls
Skips unsupported categories (counted as rules_skipped in results)
Reports per-platform results with applied, skipped, and failed counts

Check enforcement results to see which rules were applied per platform:

curl https://prodapi.phosra.com/api/v1/enforcement/jobs/JOB_UUID/results \
  -H "Authorization: Bearer $PHOSRA_API_KEY"

Get Started

Concepts

Guides

Cookbook

Partner Integration

Phosra Link (secret-free)

OCSS Conformance

Platform

Supported Platforms

Connecting a Platform

API Key Platforms

OAuth Platforms

Compliance Tiers

Verifying Connections

Rule Translation

​Supported Platforms

​Connecting a Platform

​API Key Platforms

​OAuth Platforms

​Compliance Tiers

​Verifying Connections

​Rule Translation

Supported Platforms

Connecting a Platform

API Key Platforms

OAuth Platforms

Compliance Tiers

Verifying Connections

Rule Translation