---
title: "DelegateMyAuthority — issue, consume, inspect, or revoke a capability"
method: POST
path: "/v1/delegations/manage"
---

# DelegateMyAuthority — issue, consume, inspect, or revoke a capability

`POST /v1/delegations/manage`

## Request

- Base URL: `https://api.scrubmytext.com`
- URL: `https://api.scrubmytext.com/v1/delegations/manage`
- Auth: HTTP bearer

Manages a narrow bearer capability bound to one action fingerprint, expiration, and maximum use count. It is not identity proof or legal delegation. Production.

## Request body

- object
  - `operation` 'issue' | 'use' | 'check' | 'revoke', required
  - `control_id` string
  - `token` string
  - `action_fingerprint` string: A lowercase SHA-256 digest, with an optional sha256: prefix.
  - `max_uses` integer
  - `expires_in_seconds` integer

## Response `200`

Delegation state or authorization decision

## Other responses

- `401`: Paid API key required
- `422`: Invalid operation-specific input

---

[API](https://skmtc.dev/scrubmytext/apis/scrubmytext-agent-infrastructure-api.md) · [All operations](https://skmtc.dev/scrubmytext/apis/scrubmytext-agent-infrastructure-api/llms.txt) · [OpenAPI document](https://skmtc.dev/scrubmytext/apis/scrubmytext-agent-infrastructure-api/revisions/54ace36baccf?raw)