Start a CIBA approval for an operation-bound Agent elevation challenge.

POST

/api/admin/agent-elevations/{id}/ciba/start

Code sample: Shell / cURL

curl --request POST \
  --url https://auth.example.com/api/admin/agent-elevations/example/ciba/start \
  --header 'Content-Type: application/json' \
  --cookie authrim_admin_session=<authrim_admin_session> \
  --data '{ "approver_id": "example" }'

Requires the delegator’s Admin session and a distinct active approver. Creates an existing ApprovalRequest with a canonical RAR-equivalent scope containing only the challenge ID, Grant ID, Tool contract, and argument digest, then delivers the CIBA verification code via the configured notification channel. The one-time capability remains pending until the completed ApprovalRequest is revalidated.

Authorizations

• adminSessionCookie

Parameters

Path Parameters

id

required

string

Request Body ^required

Media type application/json

object

approver_id

required

string

>= 1 characters

key

additional properties

Example ^generated

{
  "approver_id": "example"
}

Responses

200

CIBA approval was started or the challenge’s existing artifact was reused.

Media type application/json

object

approval_request_id

string

artifact_id

required

string

artifact_path

required

string

auth_req_id

string

expires_at

integer format: int64

interval

integer

>= 1

reused

required

boolean

key

additional properties

Example ^generated

{
  "approval_request_id": "example",
  "artifact_id": "example",
  "artifact_path": "example",
  "auth_req_id": "example",
  "expires_at": 1,
  "interval": 1,
  "reused": true
}

400

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

404

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

409

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

503

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}