Authorize acquiring or exercising a capability

CAP-1: installing a skill, adding a plugin, calling a new API — new capability is a governed action. Evaluated against the wallet's ordered capability rules (namespaced prefix-glob patterns like skill:install:*, effect block/allow/escalate; empty = allow all). Escalations persist to the approval inbox with replayable evidence; approval mints a one-use grant — retry with grant_id to consume. Supports Idempotency-Key.

post/authorize/capability

Request

  • Base URL: https://getsanction.com/api/v1
  • URL: https://getsanction.com/api/v1/authorize/capability
  • Auth: API key in header x-api-key

Request body

capabilitystring required

Namespaced capability id, e.g. skill:install:web-scraper, plugin:browser, api:github.com/repos

argumentsobject

Advisory — not policy-evaluated or persisted

grant_idstring

One-use grant from an approval; retry the same capability with this to consume it

Response

allowed or escalated (poll /authorize/{id}, or replay the Idempotency-Key for status — an approved escalation replays authorized: false with approval_status; redeem the grant)

Changes

No recorded changes to this operation across all 1 revision of this API.