Production beta · Least privilege

DelegateMyAuthority

Give another worker the smallest usable technical capability: one action fingerprint, a short expiry, and a fixed use count.

Use it when

A coordinator must let a sub-agent perform one specific action without sharing the coordinator's broad credentials.

Decision rule

Proceed only when authorized is true. Treat the returned capability token as a secret.

POST /v1/delegations/manage
{"operation":"issue","action_fingerprint":"sha256:…","max_uses":1,"expires_in_seconds":900}
This is a technical bearer capability. It does not prove a person's identity, organizational role, or legal authority.