Read and revoke Stamped Mandates

Private preview: this is rolling out and may not be available on your account yet.

First-party only today. These calls need a personal access token, which isn’t yet open to third-party apps. See Sign in.

A Stamped Mandate is a signed authorisation for what an agent may do. The SDK’s functions still carry the older wire name, pint: listPints lists Stamped Mandates. Every call below reads or changes the signed-in person’s own mandates. Nobody else’s are visible.

List mandates

Mandates are listed per wallet, so listPints needs the address of the wallet the person’s mandates belong to. Get it from listWallets: it is the person’s primary account wallet.

import { listPints, listWallets, unwrap } from "@sumvin/sdk";

const { wallets } = unwrap(await listWallets({ client, query: { is_eoa: false } }));
const wallet = wallets.find((w) => w.is_primary);
if (!wallet) throw new Error("This account has no primary wallet yet.");

const page = unwrap(await listPints({ client, query: { wallet: wallet.address } }));
for (const { pint } of page.data) {
  console.log(pint.id, pint.status, pint.scopes);
}

A person’s account wallet is created after they finish verification. Until then, listWallets succeeds but returns no account wallet, so they have no mandates to list. The wallet is created in the background, so it may not appear straight after verification; check again later.

Query	Default	Values
`wallet`	required	The wallet address.
`status`	`active`	`pending`, `active`, `consumed`, `revoked`, `expired`. See States.
`sort`	`created_at`	`created_at` or `expires_at`.
`order`	`desc`	`asc` or `desc`.
`limit`	`20`	1 to 50.
`cursor`	none	The `cursor` from the previous page, when `has_more` is `true`.

Read one mandate

import { getPint } from "@sumvin/sdk";

const { pint } = unwrap(await getPint({ client, path: { pint_id: mandateId } }));

mandateId is the mandate identifier, such as sr:us:pint:3f9c2a7e5b1d4c8e9a6f0b2d7e4c1a58. You can only read your own. To show what a mandate allows in plain numbers, use the ceiling reader. The scopes themselves are described in Scopes.

See who it was issued to

A mandate can be issued as a token to more than one party. listPintTokens lists each one: who it is addressed to, when it was issued, when it expires, and whether it was revoked.

import { listPintTokens } from "@sumvin/sdk";

const tokens = unwrap(await listPintTokens({ client, path: { pint_id: mandateId } }));

Revoke a mandate

import { revokePint } from "@sumvin/sdk";

const { error } = await revokePint({ client, path: { pint_id: mandateId } });

Revoking is immediate and can’t be undone. Every token issued against the mandate stops working with it. Revoking one that is already revoked returns 409 with its current state.

Requesting a new mandate

A new mandate is always approved by the person, with their passkey, in their own browser. Ask for one through the MCP connector or the CLI.

Start

Act for a person

Check a mandate

Testing

Read and revoke Stamped Mandates

List mandates

Read one mandate

See who it was issued to

Revoke a mandate

Requesting a new mandate

​List mandates

​Read one mandate

​See who it was issued to

​Revoke a mandate

​Requesting a new mandate

List mandates

Read one mandate

See who it was issued to

Revoke a mandate

Requesting a new mandate