Docs / Reference / session: my grants

session: my grants.

The caller, and a place to its permissions there, after all three narrowings

Figure 1POST /v1/session/my_grantsspecified

The caller sends GrantsInput to /v1/session/my_grants. The platform returns a card whose body is [GrantRef].

POST/v1/session/my_grants

What may this caller do. The call needs the user rung under a token with the read grant, and it is served by the platform.

The route takes GrantsInput and returns a card whose body is GrantRef.

Request body#

The request body is GrantsInput.

field	type	required	note
`place`	Scope	yes

Response#

The route returns a card whose body is GrantRef. Every card ends with a foot that states the basis of each number, the scope of the call, and the time when the facts were true.

Headers#

header	required	meaning
`Scale-Scope`	yes	the scope the call runs in: tenant/, then /brand/, then /strategy/
`Scale-As-True-On`	no	the date the facts must have been true on; defaults to now
`Scale-As-Known-On`	no	the date the facts must have been known on; defaults to now
`Scale-Key`	no	for a change, the key made from the input; a repeat under the same key returns the unit held and writes nothing

A caller needs the user rung and a token with the read grant. The platform serves this route.

Example#

The example sends the smallest body that GrantsInput allows. The build validates it against the schema of GrantsInput.

Example

curl -X POST https://api.scaleintelligence.co/v1/session/my_grants \
  -H "Scale-Key: $SCALE_KEY" -H "Scale-Scope: tenant/<id>" \
  -H "content-type: application/json" \
  -d '{ "place": { "level": "shared" } }'

import { client } from "@scale/sdk";
const answer = await client.session.my_grants({
    "place": {
      "level": "shared"
    }
  });
// answer.body is a [GrantRef]. answer.foot holds the basis, the scope and the time.

import requests
answer = requests.post("https://api.scaleintelligence.co/v1/session/my_grants",
    headers={"Scale-Key": KEY, "Scale-Scope": "tenant/<id>"},
    json={
      "place": {
        "level": "shared"
      }
    }).json()

let answer: Card = client.post("https://api.scaleintelligence.co/v1/session/my_grants")
    .header("Scale-Key", key).header("Scale-Scope", "tenant/<id>")
    .json(&GrantsInput { /* the fields of the page */ }).send().await?.json().await?;

MCP tool#

The MCP tool si.session.my_grants takes the same input and returns the same card. The tool only reads data. An MCP host that renders cards draws this card from ui://scale-intelligence/cards/GrantRef. The tool’s page describes it.

POST /v1/session/my_grants
Scale-Scope: …
Scale-As-True-On: …
Scale-As-Known-On: …
Scale-Key: …
content-type: application/json

{
  "place": {
    "level": "shared"
  }
}

Without a key, this page shows the request only. The request body is GrantsInput, and the route returns a card whose body is [GrantRef].

Claims#

claim	state	route or tool
The platform serves the route /v1/session/my_grants at contract 0476e35e6e275db5.	target	`/v1/session/my_grants`