Skip to main content
POST
Mint a one-time protection-write capability (the CISO grant)

Authorizations

Authorization
string
header
required

Supabase JWT token in Authorization: Bearer header

Path Parameters

agent_id
string
required

Agent identifier (e.g. smolt-abc123)

Response

One-time protection capability minted

minted
boolean
required
agent_id
string
required
action
enum<string>
required

The action this one-time capability authorizes.

Available options:
cards:write:protection
expires_at
string<date-time>
required

When the grant lapses if unused (15 minutes from mint).