Capability Token
A security token mechanism that grants permission for specific operations. The holder of the token can perform the corresponding operations, making it an important component of traditional access control systems.
Timeline (last 90 days)
Under the Capability Token model, the Agent holds a signed capability token declaring the services and interfaces it is allowed to call and the validity period, and the server side only needs to verify the signature and scope to allow access, without requiring a central gateway.
The Capability Token approach means the Agent does not hold the tool itself but only holds restricted, revocable tokens that encode the scope of permissions.
All Facts (2)
Under the Capability Token model, the Agent holds a signed capability token declaring the services and interfaces it is allowed to call and the validity period, and the server side only needs to verify the signature and scope to allow access, without requiring a central gateway.
50%UnverifiedThe Capability Token approach means the Agent does not hold the tool itself but only holds restricted, revocable tokens that encode the scope of permissions.
50%