MAP Docs
MACS

Operations

Every operation on MACS.

The full operation table for MACS. Each entry is dispatched through MapEngine::handle_request and matched on operation inside the protocols/macs-lib crate.

Index

OperationSummary
auth_negotiationNegotiate an auth profile (DidAuth, Loopy, Zkp, OAuth2, BioagenticProfile) and produce a session descriptor.
generate_challengeEmit a nonce, ZK challenge, or signature challenge bound to a session and profile.
verify_responseVerify a challenge response. Returns a stamped MAP envelope on success; structured refusal on failure.
authorization_requestEvaluate a capability request against the policy bound to the verified identity.
credential_verificationVerify presented claims (credential or attestation) against issuer signatures and revocation lists.

Reference

auth_negotiation

Negotiate an auth profile (DidAuth, Loopy, Zkp, OAuth2, BioagenticProfile) and produce a session descriptor.

FieldValue
Capabilitymap.macs.auth_negotiation
IdempotentNo — supply Idempotency-Key for safe retries
{
  "profile": "DidAuth",
  "challenge_kind": "Nonce"
}

Dispatched through the standard pipeline; see Engine pipeline for the 8 stages.

generate_challenge

Emit a nonce, ZK challenge, or signature challenge bound to a session and profile.

FieldValue
Capabilitymap.macs.generate_challenge
IdempotentNo — supply Idempotency-Key for safe retries
{
  "example": true
}

Dispatched through the standard pipeline; see Engine pipeline for the 8 stages.

verify_response

Verify a challenge response. Returns a stamped MAP envelope on success; structured refusal on failure.

FieldValue
Capabilitymap.macs.verify_response
IdempotentNo — supply Idempotency-Key for safe retries
{
  "example": true
}

Dispatched through the standard pipeline; see Engine pipeline for the 8 stages.

authorization_request

Evaluate a capability request against the policy bound to the verified identity.

FieldValue
Capabilitymap.macs.authorization_request
IdempotentNo — supply Idempotency-Key for safe retries
{
  "example": true
}

Dispatched through the standard pipeline; see Engine pipeline for the 8 stages.

credential_verification

Verify presented claims (credential or attestation) against issuer signatures and revocation lists.

FieldValue
Capabilitymap.macs.credential_verification
IdempotentNo — supply Idempotency-Key for safe retries
{
  "example": true
}

Dispatched through the standard pipeline; see Engine pipeline for the 8 stages.

On this page