delegation

Mint a scope-narrowed child API key

The delegation-chain primitive (ADCS): a parent key mints a child key bound to a delegatable agent profile. Scopes intersect with the parent's, budget clamps to the parent's remaining, TTL caps at 24h, originSub is preserved for end-to-end audit. Feature-flagged; 404 when disabled. Rate limited per tenant.

post/api/v1/keys/child

Request

  • Base URL: https://api.agenticcontrolplane.com
  • URL: https://api.agenticcontrolplane.com/api/v1/keys/child
  • Auth: HTTP bearer

Request body

profileIdstring required

Delegatable agent profile the child is bound to.

scopesstring[]

Optional further narrowing; cannot widen beyond the parent.

maxBudgetCentsinteger
ttlSecondsinteger
reasonstring

Free-text audit label.

Response

The child key (returned once).

okboolean

Changes

No recorded changes to this operation across all 1 revision of this API.