Delegations - TinyCloud

Use delegations when another DID needs access to a path in your space. To send a file to a person, use Share instead.

Create a delegation

tc delegation create \
  --to did:pkh:eip155:1:0xRecipient... \
  --path documents/ \
  --actions kv/get,kv/list \
  --expiry 7d

The CLI prefixes short actions with tinycloud. automatically, so kv/get becomes tinycloud.kv/get.

Inspect and revoke

tc delegation list
tc delegation list --granted
tc delegation list --received
tc delegation info bafy...
tc delegation revoke bafy...

To hand someone a file rather than a standing delegation, use tc share publish. It publishes a bearer link or an addressed link (one email address or an email domain) that opens in the Share viewer, and keeps an encrypted sender history you can list and revoke.

DID and expiry rules

Use a PKH DID for user-to-user delegations
did:key is for session-key style identities
Expiry can be relative (1h, 7d) or an absolute ISO timestamp; delegation create defaults to 1h

Bearer Share links are built on the same delegations: tc share revoke on a bearer link revokes its delegation. Addressed shares add a signed policy that your node enforces.