Skip to main content
POST
Ask a person to approve this agent's bounded authority

Authorizations

X-Ambient-Actor
string
header
required

Provisioned actor identifier.

X-Ambient-Timestamp
string
header
required

Current Unix timestamp in seconds, within the configured clock-skew window.

Authorization
string
header
required

Ambient-HMAC followed by a space and the unpadded base64url HMAC-SHA256 signature. See Authentication and authority for the canonical input.

Body

application/json
email
string<email>
required
scopes
enum<string>[]
required
Available options:
market:create,
market:publish,
market:cancel,
market:claim,
market:bid,
market:lottery_enter,
market:offer_submit,
market:offer_select,
commitment:confirm,
commitment:decline,
commitment:refund,
credential:issue,
payment:authorize,
payment:register_payee_rail
validUntil
string<date-time>
required
paymentMandate
object

Per-authorization bounds for delegated payment authority. This is not an aggregate spending budget. The containing delegation supplies the mandate expiry through validUntil.

Response

Returns challenge ID, delegation ID, and expiry; the action-bound code is sent to the person.