Session keys
Session bounds mirror of the on-chain constants
24h max TTL, 30min inactivity timeout, 205-byte record.
curl -X GET "https://example.com/session-keys/constants"{ "maxTtlSecs": 0, "inactivitySecs": 0, "stateLen": 0}Validate a permission grant and return its canonical id + owner challenge POST
Pure scope-hygiene check mirroring `grantPermission` (kind rules, denylist, 30d TTL, caps) plus the canonical `permissionId` and the owner challenge (what the passkey signs). Authenticated; submission-time pid→account binding is enforced by the relay path.
Validate a session grant and return its canonical address + owner challenge POST
Pure scope-hygiene check mirroring `register_session` (24h TTL, game binding, upgrade snapshot shape) plus the canonical session PDA and the owner challenge (what the passkey signs). Authenticated; submission-time pid→vault binding is enforced by the relay path.