> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tinycloud.xyz/llms.txt
> Use this file to discover all available pages before exploring further.

# Auth Artifacts

> Request, grant, import, and retry TinyCloud permission artifacts

Use auth artifacts when one process requests permissions and another identity grants or imports them.

## Request

```bash theme={null}
tc auth request --cap tinycloud.kv:default:documents/:get,list --emit request.json
tc auth request --permission permissions.json
tc auth request --manifest ./manifest.json
```

`--cap` accepts `tinycloud.<service>:<space>:<path>:<actions-csv>` and repeats for multiple entries.

## Grant

```bash theme={null}
tc auth grant request.json
tc auth grant request.json --stdin
tc auth grant request.json --yes
```

Use `grant` when you want to approve a request artifact and return a delegation artifact.

## Import

```bash theme={null}
tc auth import delegation.json
tc auth import --paste
tc auth import --stdin
```

Import can accept a delegation artifact or a stored request artifact. It is the path for moving permissions between processes.

## Retry

```bash theme={null}
tc auth retry request-id
tc auth retry --last
tc auth retry --last --exec
```

Retry checks whether a stored request is now covered by the active session and, optionally, runs the captured command.

## Inspect

```bash theme={null}
tc auth caps
tc auth caps --diff tinycloud.kv:default:documents/:get,list
tc auth caps --history
```

<Note>
  The CLI source treats these commands as the artifact path for advanced permission workflows, while `tc auth login` remains the normal sign-in path.
</Note>