Macaroon
A class of aggregatable, attenuable cryptographic bearer credentials proposed by Google in 2014, commonly used in decentralized authorization scenarios. Macaroons support offline verification and caveat constraints, and can serve as API keys that become effective only after payment.
Timeline (last 90 days)
Under the Capability Token model, the Agent holds a signed capability token declaring the services and interfaces it is allowed to call and the validity period, and the server side only needs to verify the signature and scope to allow access, without requiring a central gateway.
The L402 protocol (formerly named LSAT, Lightning Service Authentication Token) is a machine-native paid authentication protocol proposed by the Lightning Network community, and its workflow consists of four steps: the client requests a resource -> the server returns HTTP 402 with a Lightning invoice -> after payment the client obtains a Macaroon credential containing the payment preimage -> the resource is accessed using the Macaroon.
Macaroon was proposed by Google in 2014 and is a type of aggregatable, attenuable bearer credential commonly used in decentralized authorization scenarios.
The key premise of Macaroon is offline verifiability—as long as the issuer's public key/root key is held, any edge node can independently verify the signature and check the caveat constraints, which is the theoretical basis for removing the backend wallet from the hot path.
Macaroon是由Google研究团队在2014年提出的去中心化授权凭证方案，论文标题为《Macaroons: Cookies with Contextual Caveats》
Macaroon支持逐级衰减（attenuation）的权限控制，持有者可在不接触原始服务器的情况下为令牌附加限制条件（Caveat）
All Facts (6)
Under the Capability Token model, the Agent holds a signed capability token declaring the services and interfaces it is allowed to call and the validity period, and the server side only needs to verify the signature and scope to allow access, without requiring a central gateway.
50%UnverifiedThe L402 protocol (formerly named LSAT, Lightning Service Authentication Token) is a machine-native paid authentication protocol proposed by the Lightning Network community, and its workflow consists of four steps: the client requests a resource -> the server returns HTTP 402 with a Lightning invoice -> after payment the client obtains a Macaroon credential containing the payment preimage -> the resource is accessed using the Macaroon.
50%UnverifiedMacaroon was proposed by Google in 2014 and is a type of aggregatable, attenuable bearer credential commonly used in decentralized authorization scenarios.
50%UnverifiedThe key premise of Macaroon is offline verifiability—as long as the issuer's public key/root key is held, any edge node can independently verify the signature and check the caveat constraints, which is the theoretical basis for removing the backend wallet from the hot path.
50%UnverifiedMacaroon是由Google研究团队在2014年提出的去中心化授权凭证方案，论文标题为《Macaroons: Cookies with Contextual Caveats》
50%UnverifiedMacaroon支持逐级衰减（attenuation）的权限控制，持有者可在不接触原始服务器的情况下为令牌附加限制条件（Caveat）
50%