Issue a scoped execution JWT

Mint a short-lived (default 15min) mandate: a signed JWT authorizing a child agent or counterparty to act within a credential scope and a hard spend cap. Pass it to a subprocess, a delegated agent, or another agent over A2A. Required to call /credentials/inject; verify liveness at POST /mandate/verify (no API key — the JWT is the capability).

post/exec

Request

  • Base URL: https://getsanction.com/api/v1
  • URL: https://getsanction.com/api/v1/exec
  • Auth: API key in header x-api-key

Request body

scopestring[] required

Credential labels this execution needs access to

budget_usdnumber required

Maximum spend authority for this execution

ttl_secondsinteger

Token lifetime in seconds. Default 900 (15 min).

container_idstring

Optional identifier for the container claiming this token

Response

Execution token issued

jwtstring

Signed mandate JWT. Pass as Authorization: Bearer <jwt> to /credentials/inject, or as mandate to POST /mandate/verify.

jtistring

Unique token ID for audit trail

expires_atstring date-time
clearanceinteger
scopestring[]
budget_usdnumber
ttl_secondsinteger

Changes

No recorded changes to this operation across all 1 revision of this API.