Integrate as a relying party
Two headers in, one call, a decision and a signed receipt out. Start here if your service will receive actions from agents.
Specification v0.2
Grants, Proofs, the verify call, decision receipts, revocation, evidence, and the threat model.
Profile delegus-base-v1
The check table, P1 to P20, in evaluation order. Its SHA-256 is protocol. in every receipt. Served byte for byte.
How the pieces fit
| Party | Does | Where it is specified |
|---|---|---|
| Principal | A company. Proves control of its domain, signs Grants for its agents, revokes them. | §2.1, §3, §7 |
| Agent | Holds a key. Signs a Proof for each request, bound to the Grant, the recipient and the action. | §2.2, §4 |
| Relying party | Your service. Forwards Grant, Proof and action to Delegus in one call and keeps the receipt. | §2.3, §5, Integrate |
| Delegus | Evaluates the profile's checks in fixed order, fails closed, signs the receipt, preserves the evidence. | §5, §6, §8 |
Reference
- API reference: every route with request and response shapes, from the OpenAPI document the service is tested against.
- SDK and CLI: every export of
@delegus/sdkand thedeleguscommand, generated from the code. - DENY reason codes: every reason a verify call can return, in evaluation order.
- Errata: the record of corrections to the specification.
- Security: how the service is built and run, and what’s coming soon.
Permanent links
Every page and document here is also reachable under /docs/v0.2/, for example /docs/v0.2/spec and /docs/v0.2/delegus-spec-v0.2.md. Those paths will keep pointing at this version after v0.3 exists; the unversioned paths will follow the current version.
Documents
- /docs/delegus-spec-v0.2.md: the specification as Markdown, the bytes the rendered page is built from.
- /profiles/delegus-base-v1: the profile document. Immutable; a change is a new profile with a new name.
- /ns/grant/v1: the Grant JSON-LD context named by every Grant's
@context. - /llms.txt and /index.md: the site for language models and agents.
Status
The protocol engine @delegus/core and the SDK @delegus/sdk are Apache-2.0; anyone can run the open checks. The Delegus service, which signs decisions and preserves evidence, is not open source. v0.2 is the current specification. The production API is serving at api.delegus.ai, with self-serve signup at app.delegus.ai; @delegus/core, @delegus/sdk and @delegus/ are on npm. Nothing here is a measured figure or a guarantee. Founding pilots: hello@delegus.ai.