Skip to main content
POST
Grant bounded authority to an actor

Authorizations

X-Ambient-Actor
string
header
required

Provisioned actor identifier.

X-Ambient-Timestamp
string
header
required

Current Unix timestamp in seconds, within the configured clock-skew window.

Authorization
string
header
required

Ambient-HMAC followed by a space and the unpadded base64url HMAC-SHA256 signature. See Authentication and authority for the canonical input.

Body

application/json
commandId
string
required

Actor-scoped idempotency key. Retry the identical command with the same value.

Minimum string length: 1
delegationId
string
required
Minimum string length: 1
principalId
string
required

Principal represented by the authenticated actor.

Minimum string length: 1
delegateActorId
string
required
Minimum string length: 1
scopes
enum<string>[]
required
Minimum array length: 1
Available options:
market:create,
market:publish,
market:claim,
market:bid,
commitment:confirm,
commitment:decline,
credential:issue
validUntil
string<date-time>

Response

Delegation issued or an identical command replayed.

id
string
required
principalId
string
required
actorId
string
required
scopes
enum<string>[]
required
Available options:
market:create,
market:publish,
market:claim,
market:bid,
commitment:confirm,
commitment:decline,
credential:issue
validFrom
string<date-time>
required
validUntil
string<date-time>
revokedAt
string<date-time>