Quickstart: your first signed decision
Sign up, copy your verify key, send one request and keep the signed receipt. The sandbox is free, with no card.
Start the quickstart →Integrate as a relying party
Two headers in, one call, a decision and a signed receipt out. Start here if your service will receive actions from agents.
Specification v0.3 (release candidate)
The current release candidate: budgets, relying on earlier decisions, receipt v2 and verified domains. Not frozen yet.
Specification v0.2 (frozen)
Grants, Proofs, the verify call, decision receipts, revocation, evidence, and the threat model.
Profile delegus-base-v3
The check table, P1–P21 and D1–D7, in evaluation order. Its SHA-256 is protocol. in every v0.3 receipt. Served byte for byte.
How the pieces fit
| Party | Does | Where it is specified |
|---|---|---|
| Principal | A company. Proves control of its domain, signs Grants for its agents, revokes them. | §2.1, §3, §7 |
| Agent | Holds a key. Signs a Proof for each request, bound to the Grant, the recipient and the action. | §2.2, §4 |
| Relying party | Your service. Forwards Grant, Proof and action to Delegus in one call and keeps the receipt. | §2.3, §5, Integrate |
| Delegus | Evaluates the profile's checks in fixed order, fails closed, signs the receipt, preserves the evidence. | §5, §6, §8 |
Reference
- API reference: every route with request and response shapes, from the OpenAPI document the service is tested against.
- SDK and CLI: every export of
@delegus/and thesdk deleguscommand, generated from the code. - DENY reason codes: every reason a verify call can return, in evaluation order.
- Errata: the record of corrections to the specification.
- Security: how the service is built and run, and what’s planned.
Permanent links
The v0.2 protocol documents are frozen, as they stood before v0.3 went live, under /docs/v0.2/: the specification, its Markdown, the profile delegus-base-v1, the reason codes and the errata. Other /docs/v0.2/ paths show the current page. The unversioned paths follow the current version.
Documents
- /docs/delegus-spec-v0.2.md: the specification as Markdown, the bytes the rendered page is built from.
- /profiles/delegus-base-v3: the current profile document, used by relying parties on v0.3. /profiles/delegus-base-v1 stays for v0.2. Both are immutable; a change is a new profile with a new name.
- /ns/grant/v1: the Grant JSON-LD context named by every Grant's
@context. - /llms.txt and /index.md: the site for language models and agents.
Status
The protocol engine @delegus/ and the SDK @delegus/ are Apache-2.0; anyone can run the open checks. The Delegus service, which signs decisions and preserves evidence, is not open source. v0.3 (release candidate 1) is the current specification, and new relying parties start on it; v0.2 is frozen and stays the normative text until v0.3 is frozen. The production API is serving at api., with self-serve signup at app.delegus.ai; @delegus/, @delegus/, @delegus/ and the MCP gateway @delegus/ are on npm, and the Python MCP middleware delegus-mcp is on PyPI. Nothing here is a measured figure or a guarantee.