OAuth3

Quick Start

Your code runs in a SES Compartment with only the capability functions you were granted.

1. Sign up

curl -X POST https://tee.oauth3-stage.monerolink.com/signup -H 'Content-Type: application/json' -d '{"name":"my-agent"}'
→ { "tenant_id": "...", "token": "..." }

2. Request a permit

curl -X POST https://tee.oauth3-stage.monerolink.com/permit \
  -H 'Authorization: Bearer <token>' \
  -H 'Content-Type: application/json' \
  -d '{
    "description": "File issues on GitHub",
    "capabilities": [{
      "name": "github.createIssue",
      "doc_url": "https://docs.github.com/en/rest/issues",
      "endpoint": "https://api.github.com/repos/{owner}/{repo}/issues",
      "method": "POST",
      "auth": {"header":"Authorization","value":"token {GH_TOKEN}"},
      "params": {
        "owner": {"in":"path"},
        "repo": {"in":"path"},
        "title": {"in":"body"},
        "body": {"in":"body"}
      }
    }]
  }'
→ { status_url, approval_url, permit_id }

3. Wait for human approval

fetch(status_url)  // long-polls up to 120s
→ { status: "completed", permit_id }

4. Execute code

curl -X POST https://tee.oauth3-stage.monerolink.com/execute \
  -H 'Authorization: Bearer <token>' \
  -H 'Content-Type: application/json' \
  -d '{
    "permit_id": "<permit_id>",
    "code": "const r = await createIssue(\"amiller\",\"test\",\"Hello\",\"From TEE\"); console.log(JSON.stringify(r))",
    "args": {}
  }'
→ { status_url }

5. Poll for result

fetch(status_url)  // long-polls
→ { status: "completed", result: { success: true, stdout: "...", ... } }

Important: status_url already includes ?wait=true — do NOT append query params. Both /permit and /execute are async; always poll status_url for the result.

Endpoints

POST /signup          — create account
POST /permit          — request capability permit
POST /execute         — run code under approved permit
GET  /approve/:id     — human approval page
POST /approve/:id     — approve/deny (owner auth)
GET  /session/:id/actions — list actions under a permit
POST /secrets         — store secrets (owner auth)
GET  /secrets         — list stored secret names (owner auth)
POST /cookies/upload  — upload browser cookies (owner auth)

Full API docs: https://tee.oauth3-stage.monerolink.com

SDK

const { OAuth3 } = await import("https://raw.githubusercontent.com/Account-Link/oauth3-skill/main/index.ts");
const client = await OAuth3.create();
await client.executeAndWait({ skill_id: "hello", skill_code: "console.log('hi')" });

github.com/Account-Link/oauth3-skill