{"uid":"cap_UsNbfAPT_OkSWTcO1owrE","slug":"bounty-engineer-delegated-agent-scope-gate-5d4eec16","name":"Bounty Engineer Delegated Agent Scope Gate","description":"Machine-buyable infrastructure for autonomous agents: API cost routing, margin optimization, funding-rate data, webpage extraction, result verification, spend controls, retry planning, state, tender search and GitHub bounty intelligence.","url":"https://bounty-engineer-x402-prod.onrender.com/v1/delegated-agent-scope-gate?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object","required":["mandate","action"],"properties":{"action":{"type":"object","required":["agent_id","tool","destination_url"],"properties":{"tool":{"type":"string"},"agent_id":{"type":"string"},"amount_usd":{"type":"number"},"evaluated_at":{"type":"string"},"destination_url":{"type":"string"}}},"mandate":{"type":"object","required":["agent_id","allowed_tools","allowed_origins","issued_at","expires_at","max_spend_usd"]}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","required":["ok","mode"],"properties":{"ok":{"type":"boolean","const":true},"mode":{"type":"string"}}}}}}},"responseSchema":{"type":"json","example":{"ok":true,"mode":"delegated-agent-scope-gate","reasons":[],"warning":"Caller-declared rules alone do not prove a valid delegation. An authenticated owner mandate, signature or trusted identity provider must be verified independently before execution.","checked_at":"2026-10-10T00:00:00Z","policy_match":true,"action_sha256":"5954033fd2485a94598df95ff3eae01f4fb1cded549f8560a89b00629e65737c","recommendation":"policy_only_allow_if_separately_authenticated","mandate_policy_sha256":"91611c0ba58b043c06ef00e6c44b0d20d1dd5546030e212bed2b80fa32e9d67b","owner_identity_verified":false,"authoritative_authorization":false,"subsequent_payment_executed":false,"cryptographic_signature_verified":false}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.025","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.025/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.025","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.025","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_HWGSIM6EAVxnTtViPAHcY","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.025","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Validates whether an autonomous agent's proposed action falls within the bounds of a pre-issued delegation mandate before allowing execution.","exampleAgentPrompt":"Before my agent 'agent-007' calls the 'fetch_webpage' tool targeting 'https://example.com', check whether that action is within its active mandate — the mandate allows tools ['fetch_webpage','search'], origins ['https://example.com'], up to $1.00 USD, issued today and expiring in 24 hours.","exampleUseCases":[{"title":"Spend limit enforcement before payment","prompt":"My agent 'procurement-bot-1' wants to execute a purchase tool call to 'https://store.example.com' for $0.50 — can you check its mandate first? It's allowed up to $2.00 total, only the 'purchase' tool, and only that origin, mandate issued this morning and expires tonight."},{"title":"Tool allowlist gating for security","prompt":"Before agent 'researcher-v2' calls the 'web_scraper' tool pointed at 'https://news.ycombinator.com', validate it against its current delegation — the mandate only permits ['web_scraper','summarize'] tools with a $0.10 spend cap, issued an hour ago and valid for 6 hours."},{"title":"Audit trail check for compliance","prompt":"I need to verify that agent 'finance-agent-alpha' is in-policy before it hits the 'data_export' tool at 'https://internal.api.corp', allowed tools are ['data_export'], max spend $0.00, allowed origins only internal.api.corp, mandate was issued at 9am and expires at 5pm today."}],"resultDescription":"Returns a JSON object indicating whether the agent's proposed action matches its delegation mandate policy (policy_match boolean), whether owner identity was verified (owner_identity_verified), whether cryptographic signatures were verified, a recommendation string (e.g. 'policy_only_allow_if_separately_authenticated'), SHA256 hashes of both the action and the mandate policy for audit purposes, a checked_at timestamp, and a prominent warning that caller-declared rules alone do not constitute authoritative authorization without separate identity verification.","failureModes":["Missing required mandate fields (agent_id, allowed_tools, allowed_origins, issued_at, expires_at, max_spend_usd) cause validation failure","Action destination_url not in allowed_origins returns policy_match: false","Tool not in allowed_tools list returns policy_match: false","Expired mandate (expires_at in the past) fails scope check","Amount exceeding max_spend_usd triggers policy violation","authoritative_authorization always false — endpoint explicitly warns it cannot substitute for cryptographic or identity-provider verification","Malformed JSON body returns HTTP error","Payment failure (insufficient USDC balance) blocks the call entirely"],"whenToPreferThis":"Use this endpoint when you need a lightweight, fast policy pre-check before an autonomous agent executes a sensitive tool call, payment, or external API request — especially when you want to enforce scope boundaries defined in a delegation mandate (allowed tools, origins, spend caps) before committing to execution. It is not a substitute for cryptographic signature verification or a trusted identity provider, but it is a useful first-pass gate in an agentic pipeline to catch out-of-scope actions early and generate an audit trail via SHA256 hashes.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T12:30:04.350Z","isFirstParty":false,"canonicalSlug":"bounty-engineer-delegated-agent-scope-gate-5d4eec16"}