POST
/api/auth/lyra/actions/executeSubmit a confirmed, delegated Lyra action boundary request
This operation is part of the public Lucion Identity contract.
Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/lyra/actions/execute'
-H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
-H 'Content-Type: application/json'
-H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
--data '{}'Authentication
session + CSRF + idempotency
Request
No request body documented.
Responses and errors
GET
/api/organizations/{id}/lyra/actionsList schema-validated Lyra action catalog entries
This operation is part of the public Lucion Identity contract.
Safe request
curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/lyra/actions'
-H 'Authorization: Bearer YOUR_ACCESS_TOKEN'Authentication
membership
Request
No request body documented.
Responses and errors
POST
/api/organizations/{id}/lyra/actionsRegister a schema-validated Lyra action
This operation is part of the public Lucion Identity contract.
Safe request
curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/lyra/actions'
-H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
-H 'Content-Type: application/json'
-H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
--data '{}'Authentication
admin + step-up
Request
No request body documented.
Responses and errors
Required controls
- Register an action with a bounded object schema and an approved scope.
- Obtain a current delegation for the exact user, organization, application, agent, and scope.
- Require explicit user confirmation and a caller-supplied idempotency key.
- Require recent passkey step-up for destructive or high-risk actions.
- Persist a complete audit and execution record before handing an accepted request to a reviewed executor.
Execution boundary
{
"organization_id": "org_YOUR_ORGANIZATION_ID",
"action_id": "lya_YOUR_ACTION_ID",
"application_id": "app_YOUR_APPLICATION_ID",
"agent_identity_id": "agt_YOUR_AGENT_ID",
"user_confirmed": true,
"payload": { "title": "Example" }
}