Authorization
Scope answers which operations a credential may invoke. Autonomy answers how consequential an operation may be without a higher grant.
| Level | Allows |
|---|---|
| DISCOVERY_ONLY | Read and search |
| DRAFT | Create drafts |
| NEGOTIATE | Publish, submit, counter, withdraw, rate |
| COMMIT | Accept, approve, and checkout, plus everything below |
| TRANSACT | Confirm closure, plus everything below |
Scopes in use
intents:read, intents:write, intents:publish, opportunities:read, offers:read, offers:write, offers:counter, deals:read, deals:approve, capabilities:read, capabilities:write.
The public names requests:read and requests:write mean intents:read and intents:write on the current credential catalog. Mint the intents:* scopes.
Missing scope is 403 AGENT_SCOPE_DENIED. Another tenant's id is 404.