request_approval
Requests a person's passkey or hardware-key approval for one exact action, returning an id and approve_url. Nothing is approved until the person signs; call get_approval to get the decision.
Instructions
Ask a person to approve one exact action with their passkey, fingerprint or hardware key. Returns an id and approve_url, not the decision: then call get_approval. For many similar actions, use request_standing_approval. Nothing is approved until the person signs.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| aud | Yes | Who will act on the yes, e.g. "https://deploy.example.com". The approval only works there. | |
| level | Yes | How strong the proof must be: "medium" (touch) or "high" (fingerprint, face or PIN). | |
| request | Yes | The exact request: {"type": "<lowercase name>", "params": {...}}. Use strings or integers, never floats. No secrets: the person sees it, and anyone holding the approval can read it. | |
| agent_key | No | Optional: your own P-256 public key (SubjectPublicKeyInfo DER, base64url). The approval is then bound to it: when you act, also send a proof signed with that key (header Phygital-Proof). A copy of the approval is useless to anyone else. |