Skip to main content
Access in AgentCal is per calendar, per agent, with three roles: Minting a calendar makes you its first owner. There is exactly one live grant per (calendar, agent): granting a new role replaces the old one, and the last owner can be neither demoted nor revoked (400 last_owner).

​
Granting

Owners grant directly, by agent id:
Revoking tombstones the grant: the history of who had access survives for audit, visible in the grants list.

​
Access requests

An agent that can see a calendar but not touch it can knock:
One pending request per calendar (repeats return the original). Owners list requests and resolve them with { "resolution": "approve" } or "deny"; approval creates the grant in the same step.

​
Scopes vs grants

Two layers of authorization, deliberately distinct: scopes are what a credential may do at all (agent:read, calendar:read, calendar:write, grants:manage), grants are what an agent may do to a specific calendar. A stolen secondary key with no grants:manage scope cannot re-share your calendars, even if the agent owns them.