Operations
Every operation on MACS.
The full operation table for MACS. Each entry is dispatched through MapEngine::handle_request and matched on operation inside the protocols/macs-lib crate.
Index
| Operation | Summary |
|---|---|
auth_negotiation | Negotiate an auth profile (DidAuth, Loopy, Zkp, OAuth2, BioagenticProfile) and produce a session descriptor. |
generate_challenge | Emit a nonce, ZK challenge, or signature challenge bound to a session and profile. |
verify_response | Verify a challenge response. Returns a stamped MAP envelope on success; structured refusal on failure. |
authorization_request | Evaluate a capability request against the policy bound to the verified identity. |
credential_verification | Verify presented claims (credential or attestation) against issuer signatures and revocation lists. |
Reference
auth_negotiation
Negotiate an auth profile (DidAuth, Loopy, Zkp, OAuth2, BioagenticProfile) and produce a session descriptor.
| Field | Value |
|---|---|
| Capability | map.macs.auth_negotiation |
| Idempotent | No — supply Idempotency-Key for safe retries |
{
"profile": "DidAuth",
"challenge_kind": "Nonce"
}Dispatched through the standard pipeline; see Engine pipeline for the 8 stages.
generate_challenge
Emit a nonce, ZK challenge, or signature challenge bound to a session and profile.
| Field | Value |
|---|---|
| Capability | map.macs.generate_challenge |
| Idempotent | No — supply Idempotency-Key for safe retries |
{
"example": true
}Dispatched through the standard pipeline; see Engine pipeline for the 8 stages.
verify_response
Verify a challenge response. Returns a stamped MAP envelope on success; structured refusal on failure.
| Field | Value |
|---|---|
| Capability | map.macs.verify_response |
| Idempotent | No — supply Idempotency-Key for safe retries |
{
"example": true
}Dispatched through the standard pipeline; see Engine pipeline for the 8 stages.
authorization_request
Evaluate a capability request against the policy bound to the verified identity.
| Field | Value |
|---|---|
| Capability | map.macs.authorization_request |
| Idempotent | No — supply Idempotency-Key for safe retries |
{
"example": true
}Dispatched through the standard pipeline; see Engine pipeline for the 8 stages.
credential_verification
Verify presented claims (credential or attestation) against issuer signatures and revocation lists.
| Field | Value |
|---|---|
| Capability | map.macs.credential_verification |
| Idempotent | No — supply Idempotency-Key for safe retries |
{
"example": true
}Dispatched through the standard pipeline; see Engine pipeline for the 8 stages.