Check what an agent is allowed to do
check_authorityResolve the human mandate behind an AI agent: which actions a named person actually permitted, any value cap, the expiry, and whether the grant itself is signed. Where authority was delegated agent to agent, the full chain is walked back to the human at the root, and one law is enforced at every hop: authority may only ever narrow. No hop can hold an action, a target or a spending cap wider than the hop above it, and the root must be a human. Use this before letting an agent transact, sign, spend or commit on someone else's behalf. An agent holding a valid credential may still be acting outside its mandate, and those are different questions. The answer is the mandate on file as of checked_at. It is not proof the permission still holds at the moment the action runs: check again at the point of action, and treat a record as proof of what was recorded and when.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | Agent name, credential id, or agent UUID. |