Permissions
Selectors a nonfinancial permission may never invoke
Mirror of the on-chain `_deniedSelector` list (second layer only — exact target+selector scope is the first).
Mirror of the on-chain _deniedSelector list (second layer only — exact target+selector scope is the first).
Response Body
application/json
curl -X GET "https://example.com/permissions/denied-selectors"{ "selectors": [ "string" ]}Set one operation's per-app fee (stacks on the global fee) PUT
Previous Page
Validate a permission grant and return its canonical id + owner challenge POST
Pure scope-hygiene check mirroring `grantPermission` (kind rules, denylist, 30d TTL, caps) plus the canonical `permissionId` and the owner challenge (what the passkey signs). Authenticated; submission-time pid→account binding is enforced by the relay path.