Skip to content
Authrim

Create an AI grant.

POST
/api/admin/ai-grants
Code sample: Shell / cURL 
curl --request POST \
  --url https://auth.example.com/api/admin/ai-grants \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "client_id": "client_123", "ai_principal": "assistant:billing-agent", "scopes": "ai:read ai:execute", "scope_targets": { "projects": [ "proj_123" ] }, "expires_at": 1770007200 }'

Creates an AI grant for a client/principal pair after validating field sizes, allowed AI scopes, maximum lifetime, and uniqueness.

Authorizations

Section titled “Authorizations ”

Request Body required

Section titled “Request Body required ”
Media type application/json
object
client_id
required
string
ai_principal
required
string
scopes
required

Space-separated subset of ai:read, ai:write, ai:execute, ai:admin.

string
scope_targets
object | array
expires_at
integer | null format: int64
key
additional properties
Example 
{
  "client_id": "client_123",
  "ai_principal": "assistant:billing-agent",
  "scopes": "ai:read ai:execute",
  "scope_targets": {
    "projects": [
      "proj_123"
    ]
  },
  "expires_at": 1770007200
}

Responses

Section titled “ Responses ”

201

Section titled “201 ”

AI grant detail response.

Media type application/json
object
grant
required
object
id
required
string
tenant_id
required
string
client_id
required
string
ai_principal
required
string
scopes
required

Space-separated AI scopes.

string
scope_targets
object | array | null
is_active
required
boolean
expires_at
integer | null format: int64
created_by
string | null
created_at
required
integer format: int64
updated_at
required
integer format: int64
revoked_at
integer | null format: int64
revoked_by
string | null
key
additional properties
key
additional properties
Example 
{
  "grant": {
    "id": "grant_123",
    "tenant_id": "default",
    "client_id": "client_123",
    "ai_principal": "assistant:billing-agent",
    "scopes": "ai:read ai:execute",
    "scope_targets": {
      "projects": [
        "proj_123"
      ]
    },
    "is_active": true,
    "expires_at": 1770007200,
    "created_by": "admin_123",
    "created_at": 1770000000,
    "updated_at": 1770000000,
    "revoked_at": null,
    "revoked_by": null
  }
}

400

Section titled “400 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Section titled “401 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Section titled “403 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

409

Section titled “409 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}