A warrant is Liceat's unit of authority: a scoped, attenuable, offline-verifiable, revocable capability token for an AI agent.
A warrant is an ordered chain of Ed25519-signed blocks. Block 0 carries the authority (id, principal, agent, issuer key id). Later blocks only add caveats — the restrictions that define what it permits:
resource — glob patterns of allowed resourcesaction — the allowed action setspend_limit — a cumulative, stateful caprate_limit — a sliding-window capexpires / not_before — validity windowpop — holder-bindingThe token is CW1~ followed by base64url canonical JSON. It verifies offline against the issuer's published key; the format is frozen and reproduced by a cross-language test vector, so a warrant issued today verifies forever, in any language. Full spec: the CW1 specification.
Liceat is permission infrastructure for AI agents. You issue a warrant — a scoped, spend-capped, revocable token — that grants an agent narrow authority; the agent presents it at the point of action; Liceat enforces it (scope, spend, rate, holder-binding, revocation) and records every decision in a tamper-evident log. It is open source with a zero-dependency SDK for TypeScript and Python.
No. A warrant is a signed, self-describing token; the SDK verifies it fully offline against the issuer's public key. Use the gateway when you also want centralized audit, stateful spend/rate limits, and instant revocation.
Free to self-host. 10,000 free decisions on the hosted gateway — no card.
Get an API key Read the docs