OC Agent

Try the grammar. Watch the id move.

Check whether one scope sits inside another, and see the exact bytes a delegation, action or revocation is signed over. This runs the real @orangecheck/agent-core (opens in a new tab) in your browser. Nothing is published, and nothing leaves this page.

Scope containment

The scope a delegation grants, and the scope an action exercises. A verifier admits the action only when the second sits inside the first.

Granted scope

CheckingCanonical:

Exercised scope

CheckingCanonical:

Not checked yet

Loading the library…

Examples

Canonical message

Edit any field. The message and the envelope id follow, exactly as a verifier computes them.

principal

agent

scopes

One per line.

bond_sats

bond_attestation

An attestation id, or none.

issued_at

ISO 8601 UTC.

expires_at

ISO 8601 UTC.

nonce

32 hex characters.

Canonical message

Loading the library…

Counting bytes…

Envelope id

Loading…

The SHA-256 of the message above. A wallet signs this id, as hex text, with BIP-322.

What this does not do

It parses scopes and derives ids. It does not check a signature, a time window or a revocation: those need a wallet and the relays, and neither happens on this page. Inspect checks all of it.