For AI agents: a documentation index is available at the root level at /llms.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
LogoLogo
DashboardGet started
  • Getting Started
    • Introduction
    • Quickstart
    • Errors
  • Core Concepts
    • Capabilities
    • Containers
    • Gateway
    • Wallets and top-ups
    • Grants and controls
    • Mandates
    • Approvals
    • Receipts
    • Settlements
  • Authentication
    • Authentication overview
    • Wallet sign-in (SIWE)
    • Connected apps (OAuth)
  • Guides
    • Call a capability
    • Monetize an API
    • Apply for public capability
    • Realtime notifications
  • Agents
    • MCP
    • CLI
  • API Reference
    • Overview
    • Authentication
    • Capabilities
    • Capability containers
    • Capability applications
    • Gateway
    • Wallet
    • Approvals
    • Intent mandates
    • Controls
      • Get controls
      • Update controls
    • OAuth
  • Generated API Explorer
  • Introduction
  • Quickstart
  • Errors
  • Core Concepts
  • Capabilities
  • Containers
  • Gateway
  • Wallets and top-ups
  • Grants and controls
  • Mandates
  • Approvals
  • Receipts
  • Settlements
  • Authentication overview
  • Wallet sign-in (SIWE)
  • Connected apps (OAuth)
  • Guides
  • Call a capability
  • Monetize an API
  • Apply for public capability
  • Realtime notifications
  • Agents
  • MCP
  • CLI
  • API Reference
  • Overview
  • Authentication
  • Capabilities
  • List public capabilities
  • List my capabilities
  • Get capability
  • Create capability
  • Update capability
  • Delete capability
  • Capability containers
  • List containers
  • Get container
  • Create container
  • Assign capability
  • Claim domain
  • Verify domain
  • Capability applications
  • Create application
  • Gateway
  • Invoke capability
  • Wallet
  • Get wallet
  • Transactions
  • Top-ups
  • Approvals
  • List approvals
  • Decide approval
  • Sign approval
  • Intent mandates
  • Create mandate
  • Fulfill mandate
  • List mandates
  • Controls
  • Get controls
  • Update controls
  • OAuth
  • Authorize
  • Token
  • Grants
  • Generated API Explorer
  • Health check
  • Create account
  • Get current account
  • List API keys
  • Create API key
  • Revoke API key
  • Start Google OAuth login
  • Google OAuth callback
  • Request a SIWE nonce
  • Verify SIWE signature, sign in / create account
  • List sign-in identities on the current account
  • Link a wallet to the current account (SIWE signature)
  • Unlink a wallet from the current account
  • Begin a Google flow that links to the current account
  • Unlink a Google identity from the current account
  • Get current session
  • List active sessions
  • Logout this session
  • Logout all sessions
  • List active capabilities (public registry)
  • Register a new capability
  • List your own capabilities (drafts + active + disabled)
  • Get a capability by slug
  • Soft-delete (status='disabled')
  • Update a capability
  • Owner-detailed view (masked provider_config)
  • List active containers (public registry)
  • Create a container
  • List your containers
  • Get a container with its capabilities
  • Archive a container
  • Update container metadata
  • Attach (or detach) a capability to a container
  • Begin DNS TXT challenge for a domain
  • Check the TXT record and mark domain verified
  • Submit a capability application
  • Get topup status
  • Transfer to another account
  • List approvals
  • Request approval
  • Get an approval
  • Decide (human session only — not API key)
  • Get signing challenge for wallet-decision
  • Decide via wallet signature
  • Build SIWE-style challenge for mandate signing
  • List mandates
  • Create a signed mandate
  • Get a mandate
  • Cancel a mandate
  • Fulfill against a mandate
  • List scheduled intents
  • Schedule an intent
  • Get scheduled intent
  • Cancel scheduled intent
  • Get spending controls
  • Upsert spending controls
  • OAuth metadata
  • Dynamic client registration
  • Authorization endpoint (renders consent screen)
  • Submit consent decision
  • Token endpoint (exchange code or refresh)
  • Revoke a refresh token
  • List your connected-app grants
  • Revoke a connected-app grant (human session only)
  • MCP server discovery
  • JSON-RPC 2.0 MCP requests
  • Usage summary
  • Usage by capability
  • Server-sent events stream
  • Refund a successful capability request
  • Get a receipt
  • Verify a receipt's signature (public)
  • List settlements (owner)
  • Get a settlement
DashboardGet started
API ReferenceControls

Update controls

Upsert spending controls on a grant (or your account_default grant). See Grants and controls.

Was this page helpful?
Previous

OAuth API

Next
Built with