Skip to main content
POST
Set or show an agent runtime permission profile

Authorizations

Authorization
string
header
required

Runtime context-key (rctx_*) issued by the Ravi gateway. Required for every non-open scope. Bootstrap the first key with ravi daemon init-admin-key; rotate, derive, and revoke via the ravi context family. Specs: runtime/context-keys, sdk/auth.

Body

application/json
id
string
required

Agent ID

capabilities
string

Comma-separated explicit capabilities (permission:objectType:objectId)

clearCapabilities
boolean

Remove explicit capabilities while preserving profile

execute
boolean

Actually change the runtime permission profile; default is a dry-run that only shows the plan (exit 3)

profile
string

Profile: bootstrap, chat-only (conversation only), explicit-only (only the listed capabilities, no bootstrap floor), full-access (Bash execute ceiling + admin), none (reset to bootstrap minimum)

Response

Success — body conforms to the @Returns schema.

action
string
required
Allowed value: "permissions"
agentId
string
required
changed
boolean
required
after
object | null
agent
object
authorityLayer
string
before
object | null
breakGlassCommand
string
chatOnlyCommand
string
command
string
defaults
object | null
effectiveOn
string
inspectCommand
string
leastPrivilegeExample
string
profile
string
recurringAccessCommand
string
resetToBootstrapCommand
string
runtimePermissions
object | null