API reference · schema

A2AAuthorityRequest

6 fields · used by 0 operations

Last reviewed 2026-10-02

Authority-preserving delegation using ordered levels (Phase 9). Unlike /a2a/verify (cards), this models *magnitude*: a child ceiling may never exceed its parent's, capabilities are the intersection down the chain, and revocation cascades.

Fields

Field	Type	Meaning
`root` required	object	{subject, ceiling, capabilities, expires_at}
`delegatee` required	string	Subject receiving delegated authority
`requested_ceiling` required	string	NONE\|READ\|WRITE\|EXECUTE\|ADMIN
`requested_capabilities`	array of string
`authorized_delegators` required	array of string	Explicit list; '*' is refused
`expires_at`	number or null

Smallest valid example

{
  "root": {},
  "delegatee": "delegatee",
  "requested_ceiling": "requested-ceiling",
  "authorized_delegators": [
    "authorized-delegators"
  ]
}

JSON Schema

Show the raw definition

{
  "properties": {
    "root": {
      "additionalProperties": true,
      "type": "object",
      "title": "Root",
      "description": "{subject, ceiling, capabilities, expires_at}"
    },
    "delegatee": {
      "type": "string",
      "title": "Delegatee",
      "description": "Subject receiving delegated authority"
    },
    "requested_ceiling": {
      "type": "string",
      "title": "Requested Ceiling",
      "description": "NONE|READ|WRITE|EXECUTE|ADMIN"
    },
    "requested_capabilities": {
      "items": {
        "type": "string"
      },
      "type": "array",
      "title": "Requested Capabilities"
    },
    "authorized_delegators": {
      "items": {
        "type": "string"
      },
      "type": "array",
      "title": "Authorized Delegators",
      "description": "Explicit list; '*' is refused"
    },
    "expires_at": {
      "anyOf": [
        {
          "type": "number"
        },
        {
          "type": "null"
        }
      ],
      "title": "Expires At"
    }
  },
  "type": "object",
  "required": [
    "root",
    "delegatee",
    "requested_ceiling",
    "authorized_delegators"
  ],
  "title": "A2AAuthorityRequest",
  "description": "Authority-preserving delegation using ordered levels (Phase 9). Unlike /a2a/verify (cards),\nthis models *magnitude*: a child ceiling may never exceed its parent's, capabilities are the\nintersection down the chain, and revocation cascades."
}

Try CAIN-42 on your own agents

Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.

Create a free account → · Try the sandbox · See the whole ecosystem