CapabilityToken
Bounded-lifetime scoped token granting a tool limited access to data, budget, and execution context.
- Source:
api/schemas/capability_token.json - Type:
object - Required properties:
jws,claims
Properties
| Property | Type | Required | Notes |
|---|---|---|---|
claims | object | Yes | Canonical claim set for capability evaluations. |
jws | string | Yes | Compact JWS encoding of the capability claims and signature. pattern: ^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$ |
key_id | string | No | Key identifier (kid) used when minting the token. |
Additional properties are not allowed.