Issue a signed mandate

Signs a grant of authority to an agent and returns the mandate with a detached HMAC-SHA256 signature over its canonical bytes. The document is self-contained — store it wherever you like and present it on every verification. The signing key is per-account and never leaves the service, so a mandate signed for one account cannot verify under another.

post/v1/mandates

Request

  • Base URL: https://agentmandate-api.com
  • URL: https://agentmandate-api.com/v1/mandates
  • Auth: HTTP bearer

Request body

principalstring required

Who granted the authority — the user or org the agent acts for.

agentstring required

Who holds it. A verification for a different agent is denied.

notBeforestring date-time

Defaults to now.

expiresAtstring date-time required

Required. A mandate without an end is not a mandate.

totalSpendCapMinorinteger

Ceiling across every action, integer minor units.

currencystring

ISO-4217. Required whenever any monetary cap is set.

metadataobject

Carried into the receipt, never interpreted.

Response

Success

mandateobject
signaturestring

v1:<hex>. Detached — keep it with the mandate.

Changes

No recorded changes to this operation across all 1 revision of this API.