Overview

The Mandates API implements the full lifecycle of a mandate — from creation via a TAP schema through state transitions (draft, review, active, expired, revoked). Mandates encode permissions, scope constraints, and jurisdictional rules. Each mandate maintains an action record chain for audit.

Endpoints

MethodPathDescription
GET/mandatesList mandates (optional status filter)
POST/mandatesCreate mandate from TAP schema
GET/mandates/:idGet mandate details
PATCH/mandates/:idUpdate scope or validity
PATCH/mandates/:id/statusTransition status (draft/review/active/expired/revoked)
DELETE/mandates/:idRevoke
GET/mandates/:id/chainGet action record chain
POST/mandates/:id/delegateDelegate to child mandate

Example

curl http://localhost:4000/mandates \
  -H "Authorization: Bearer tr_abc123"