---
title: Authorization
description: Scopes and autonomy are different.
canonical: https://breezewish.com/developers/agents/authorization
raw: https://breezewish.com/developers/agents/authorization.md
apiVersion: v1
lastUpdated: 2026-10-18
category: Agents
---

# Authorization

Scope answers which operations a credential may invoke. Autonomy answers how consequential an operation may be without a higher grant.

| Level | Allows |
| --- | --- |
| DISCOVERY_ONLY | Read and search |
| DRAFT | Create drafts |
| NEGOTIATE | Publish, submit, counter, withdraw, rate |
| COMMIT | Accept, approve, and checkout, plus everything below |
| TRANSACT | Confirm closure, plus everything below |

## Scopes in use

`intents:read`, `intents:write`, `intents:publish`, `opportunities:read`, `offers:read`, `offers:write`, `offers:counter`, `deals:read`, `deals:approve`, `capabilities:read`, `capabilities:write`.

The public names `requests:read` and `requests:write` mean `intents:read` and `intents:write` on the current credential catalog. Mint the `intents:*` scopes.

Missing scope is 403 AGENT_SCOPE_DENIED. Another tenant's id is 404.