Overview
The Delegations API creates and manages delegation hops between parent and child mandates. Delegations enforce scope narrowing (child scope must be a subset of parent). Each hop includes nonce replay protection and a 24-hour expiry. Cross-org delegation chains enable multi-party governance.
Endpoints
| Method | Path | Description |
|---|---|---|
| POST | /delegations | Create delegation hop (parent→child) |
| GET | /delegations | List hops (filter by mandate_id) |
| GET | /delegations/:id | Get hop details |
| GET | /a2a/agent-card | Get A2A agent card |
| POST | /cross-org/evidence | Cross-org evidence package |
| GET | /cross-org/chain/:mandateId | Cross-org delegation chain |
Example
curl -X POST http://localhost:4000/delegations \
-H "Content-Type: application/json" \
-d '{"parent_mandate_id":"...","child_mandate_id":"..."}'