request_fullmakt

no.apier/mcp · Verify this server

Broker a fullmakt — a legally-grounded, scoped, revocable company→agent authority delegated through an Altinn systembruker. Turns an agent principal (an identity) into an ACTOR for a specific Norwegian company: the tool brokers the delegation, persists it, and binds the returned system_user_id write-once onto the principal (`pending` → `active`). The company's signing authority must approve the returned `delegation_url` before the delegation is usable. `warnings[]` is ALWAYS present; non-empty on a 201 means the delegation EXISTS upstream but a local follow-up degraded — reconcile, never blind-retry. Identical retries are dedup-safe (deterministic Idempotency-Key). Inputs: { agent_principal_id (uuid, YOUR OWN), org_number (9 digits), scopes (non-empty string[]), validity_days?, label? }. Failure modes: FULLMAKT_PRINCIPAL_NOT_FOUND, FULLMAKT_PRINCIPAL_NOT_ELIGIBLE, FULLMAKT_UPSTREAM_FAILED (never blind-retry the ack-unconfirmed variant), SCOPE_INSUFFICIENT (needs read:altinn), VALIDATION_FAILED. The read-side twin is check_fullmakt; the revocation leg is revoke_fullmakt. No sandbox mirror. Docs: https://www.apier.no/docs/fullmakt