Skip to main content
POST
Mint an exec capability

Authorizations

Authorization
string
header
required

Personal byk_ API key; user-principal, resolved to a tenant by org context.

Headers

X-Bonya-Organization-ID
string

Org context. Omitted means the caller's personal organization. A well-formed non-member org is 404; malformed is 400.

Path Parameters

sandbox_id
string
required

Response

Capability

capability_jws
string
required
expires_at
string<date-time>
required
authority_generation
integer
required