API reference Embed
Draft the mandate in the embedded approval
POST/v1/embed/draft
As POST /v1/connections/{code}/draft, for the embedded request and the session's user. The mandate carries embed.top_origin, the platform's origin, so only an assertion made in this frame signs it.
Headers
Content-Typeapplication/jsonRequiredkeelson-embedstringkeelson-devicestringIdempotency-KeystringRequired- 1 to 255 characters. A retry with the same key returns the first answer.
Request body
application/json
limitsobjectRequiredcredentialIdstring
Responses
- 200The draft mandate and its card
- 401No live embed session, or no user
- 403The passkey is not the user's
- 404The request is no longer open
- 409The user has no passkey
- 422A limit is above what the agent asked
- 503The operator's agent key or bond is not set
200 response
mandateDraftobjectRequiredcardobjectRequiredambiguousarray of stringRequiredcheckobjectRequired