`POST /grants` — issue a scope grant (admin; owner-reserved scopes need owner).

POST/grants

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

POST /grants body.

scope*string

<resource>:<action> scope (e.g. tables:query); validated server-side.

subject_id*string

subject_type*SubjectKind

The kind of identity a grant is attached to. Identities are the grant subjects (ADR-0026 §1); a client is a credential an identity holds, never a subject itself (§4).

Value in

"user"
"team"
"app"

target*string

"*" (org-wide, all of the scope's kind) or a concrete resource id.

Response Body

`application/json`

curl -X POST "https://example.com/grants" \  -H "Content-Type: application/json" \  -d '{    "scope": "string",    "subject_id": "string",    "subject_type": "user",    "target": "string"  }'

{  "created_at": "string",  "granted_by": "string",  "id": "string",  "scope": "string",  "subject_id": "string",  "subject_type": "user",  "target": "string",  "updated_at": "string"}

`POST /grants` — issue a scope grant (admin; owner-reserved scopes need owner).

Request Body

Response Body

201application/json

`application/json`