Skip to main content
Parmana caller identity and public key responses. Hand-maintained: these are the response bodies of GET /callers/me (packages/api/src/routes/callers-me.ts) and GET /keys/{keyId} (packages/api/src/routes/keys.ts), not named exports of @parmana/shared, so python/scripts/generate_models.ts cannot generate them.

​
CallerIdentity Objects

Who the API key belongs to and what it may do.

​
allowed_principal_ids

Principal IDs this key may name in a request’s authority.principalId. Only its own caller ID unless the key lists others.

​
allowed_capabilities

Capabilities this key may request. Empty means none.

​
unrestricted_capabilities

True when allowed_capabilities contains ”*”.

​
PublicKeyInfo Objects

A signing public key of the deployment.

​
pem

SPKI PEM. Pass it to the offline verifiers in parmana.crypto.

​
jwk

The same key as a JSON Web Key, when the algorithm has a JWK form.