OpenAPI

AI & DELEGATION

Lyra action boundary

Use the v5 schema-validated, tenant-bound action boundary without turning authorization into implicit execution.

POST/api/auth/lyra/actions/execute

Submit a confirmed, delegated Lyra action boundary request

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/lyra/actions/execute'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

session + CSRF + idempotency

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
GET/api/organizations/{id}/lyra/actions

List schema-validated Lyra action catalog entries

This operation is part of the public Lucion Identity contract.

Safe request
curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/lyra/actions'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

membership

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/organizations/{id}/lyra/actions

Register a schema-validated Lyra action

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/lyra/actions'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

Required controls

  1. Register an action with a bounded object schema and an approved scope.
  2. Obtain a current delegation for the exact user, organization, application, agent, and scope.
  3. Require explicit user confirmation and a caller-supplied idempotency key.
  4. Require recent passkey step-up for destructive or high-risk actions.
  5. Persist a complete audit and execution record before handing an accepted request to a reviewed executor.
Execution boundary
{
  "organization_id": "org_YOUR_ORGANIZATION_ID",
  "action_id": "lya_YOUR_ACTION_ID",
  "application_id": "app_YOUR_APPLICATION_ID",
  "agent_identity_id": "agt_YOUR_AGENT_ID",
  "user_confirmed": true,
  "payload": { "title": "Example" }
}