> ## Documentation Index
> Fetch the complete documentation index at: https://developers.telnyx.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ports.authorization

> `readonly` `optional` **authorization?**: [`HarnessAuthorizationPort`](/docs/agent-sdk/harness-sdk/ports/authorization#harnessauthorizationport)

Omitted until a host supplies the production gateway-attested provider. Approval paths fail closed.

## On the Agent Runtime

The [`Agent`](/docs/agent-sdk/runtime-sdk) class of the runtime SDK has no public member for authorization. [The runtime adapter](/docs/agent-sdk/harness-sdk/adapters/runtime#on-the-agent-runtime) omits the port unless the host registers a provider for the instance through `setAgentHarnessAuthorizationProvider()`, from `@telnyx/edge-runtime/internal`.

```ts theme={null}
// runtime-adapter.ts
import { getAgentHarnessHost, getAgentHarnessAuthorizationProvider } from "@telnyx/edge-runtime/internal";
// …
const authorization = getAgentHarnessAuthorizationProvider(agent);
// …
...(authorization === undefined ? {} : { authorization }),
```

A registered provider is passed through as the port.

## HarnessAuthorizationPort

Versioned private authorization capability required for approval decisions.

**Methods**
**authorize()**

> **authorize**(`request`): `Promise`\<`Readonly`\<\{ `kind`: `"allow"` | `"deny"` | `"unavailable"`; }>>

**Parameters**

| Parameter | Type |
| - | - |
| `request` | `Readonly`\<\{ `action`: `string`; `approvalId`: `string`; `identity`: [`AgentHarnessAuthorizationIdentity`](/docs/agent-sdk/harness-sdk/ports/authorization#agentharnessauthorizationidentity); `resource`: `string`; `runId`: `string`; }> |

**Returns**
`Promise`\<`Readonly`\<\{ `kind`: `"allow"` | `"deny"` | `"unavailable"`; }>>

**identity()**

> **identity**(): [`AgentHarnessAuthorizationIdentity`](/docs/agent-sdk/harness-sdk/ports/authorization#agentharnessauthorizationidentity) | `undefined`

**Returns**
[`AgentHarnessAuthorizationIdentity`](/docs/agent-sdk/harness-sdk/ports/authorization#agentharnessauthorizationidentity) | `undefined`

## AgentHarnessAuthorizationIdentity

Gateway-attested Service Account identity. It is never caller or tool supplied.

**Properties**
**organizationId**

> `readonly` **organizationId**: `string`

**serviceAccountId**

> `readonly` **serviceAccountId**: `string`