create_delegation
Create a delegation from an active control proof, authorizing a URL or package artifact for capability scopes and returning a publishable signed token.
Instructions
Create a delegation (Proof of Delegation): a control-proven domain authorizes a typed url/purl artifact for a set of capability scopes and receives a publishable signed token. The attestation is that the domain's controller authorized this artifact — nothing more; it says nothing about the artifact or the business behind it. Each mint is a billable proof. A requested lifetime longer than the control proof's remainder is rejected, never truncated. The result carries the publishable token AND the DERIVED effective_status/is_valid — the same pair the list and get tools return, so the shape does not depend on which verb produced it.
ACCESS: needs a Proof account. Set PROOF_API_KEY and restart this server, then call this tool again. start_login does NOT open this tool.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| scope | Yes | 1-32 capability scopes: lowercase kebab-case tokens, at most 64 characters each (e.g. send-email). NOT API scopes — an API-style resource:action such as payments:read is rejected with invalid_scope. | |
| delegate | Yes | The typed artifact being authorized | |
| expires_in | No | Lifetime in seconds (must not exceed the control proof's remainder) | |
| control_proof | Yes | Public handle (ph_ctl_<32 hex>) of YOUR active domain control proof |