Auth Artifacts - TinyCloud

Use auth artifacts when one process requests permissions and another identity grants or imports them.

Request

tc auth request --cap tinycloud.kv:default:documents/:get,list --emit request.json
tc auth request --permission permissions.json
tc auth request --manifest ./manifest.json

--cap accepts tinycloud.<service>:<space>:<path>:<actions-csv> and repeats for multiple entries.

Grant

tc auth grant request.json
tc auth grant request.json --stdin
tc auth grant request.json --yes

Use grant when you want to approve a request artifact and return a delegation artifact.

Import

tc auth import delegation.json
tc auth import --paste
tc auth import --stdin

Import can accept a delegation artifact or a stored request artifact. It is the path for moving permissions between processes.

Retry

tc auth retry request-id
tc auth retry --last
tc auth retry --last --exec

Retry checks whether a stored request is now covered by the active session and, optionally, runs the captured command.

Inspect

tc auth caps
tc auth caps --diff tinycloud.kv:default:documents/:get,list
tc auth caps --history

The CLI source treats these commands as the artifact path for advanced permission workflows, while tc auth login remains the normal sign-in path.

ProfilesManage TinyCloud identities, sessions, and default spaces

​Request

​Grant

​Import

​Retry

​Inspect

Request

Grant

Import

Retry

Inspect