Overview

The Delegations API creates and manages delegation hops between parent and child mandates. Delegations enforce scope narrowing (child scope must be a subset of parent). Each hop includes nonce replay protection and a 24-hour expiry. Cross-org delegation chains enable multi-party governance.

Endpoints

MethodPathDescription
POST/delegationsCreate delegation hop (parent→child)
GET/delegationsList hops (filter by mandate_id)
GET/delegations/:idGet hop details
GET/a2a/agent-cardGet A2A agent card
POST/cross-org/evidenceCross-org evidence package
GET/cross-org/chain/:mandateIdCross-org delegation chain

Example

curl -X POST http://localhost:4000/delegations \
  -H "Content-Type: application/json" \
  -d '{"parent_mandate_id":"...","child_mandate_id":"..."}'