ControlPlane

Verify a write-intent assertion and mint the write approval

The proof IS the WebAuthn assertion (UV required) over the single-use server-issued challenge — no bearer needed. Returns the opaque write approval token ONCE; send it as X-Run402-Write-Approval: Bearer <token> alongside the control-plane session bearer on the write routes it covers.

post/agent/v1/control-plane/write-approval/verify

Request

  • Base URL: https://api.run402.com
  • URL: https://api.run402.com/agent/v1/control-plane/write-approval/verify
  • Auth: none declared

Request body

challenge_idstring required
responseobject required

WebAuthn authentication response JSON

Response

write_approval_token (returned once) + session metadata

object required

Changes

No recorded changes to this operation across all 1 revision of this API.