ports.authorization

readonly optional authorization?: HarnessAuthorizationPort

Omitted until a host supplies the production gateway-attested provider. Approval paths fail closed.

On the Agent Runtime

The Agent class of the runtime SDK has no public member for authorization. The runtime adapter omits the port unless the host registers a provider for the instance through setAgentHarnessAuthorizationProvider(), from @telnyx/edge-runtime/internal.

// runtime-adapter.ts
import { getAgentHarnessHost, getAgentHarnessAuthorizationProvider } from "@telnyx/edge-runtime/internal";
// …
const authorization = getAgentHarnessAuthorizationProvider(agent);
// …
...(authorization === undefined ? {} : { authorization }),

A registered provider is passed through as the port.

HarnessAuthorizationPort

Versioned private authorization capability required for approval decisions. Methods authorize()

authorize(request): Promise<Readonly<{ kind: "allow" | "deny" | "unavailable"; }>>

Parameters

Parameter	Type
`request`	`Readonly`<{ `action`: `string`; `approvalId`: `string`; `identity`: `AgentHarnessAuthorizationIdentity`; `resource`: `string`; `runId`: `string`; }>

Returns Promise<Readonly<{ kind: "allow" | "deny" | "unavailable"; }>> identity()

identity(): AgentHarnessAuthorizationIdentity | undefined

Returns AgentHarnessAuthorizationIdentity | undefined

AgentHarnessAuthorizationIdentity

Gateway-attested Service Account identity. It is never caller or tool supplied. Properties organizationId

readonly organizationId: string

serviceAccountId

readonly serviceAccountId: string

Get Started

Inside the Managed Harness

The Agent Harness SDK

The Agent Runtime SDK

The Agent Client SDK

For AI Agents

ports.authorization

On the Agent Runtime

HarnessAuthorizationPort

AgentHarnessAuthorizationIdentity

​On the Agent Runtime

​HarnessAuthorizationPort

​AgentHarnessAuthorizationIdentity

On the Agent Runtime

HarnessAuthorizationPort

AgentHarnessAuthorizationIdentity