Skip to main content
Manage access-control scopes.

tai scopes add

Map a URL to a scope (optionally with a dynamic match pattern). Example: tai scopes add read /api/tools

tai scopes delete

Delete a scope. Example: tai scopes delete read

tai scopes list

List every non-public route mapping as {url: scope_id}. Example: tai scopes list

tai scopes public-list

List every route pinned to the public marker. Example: tai scopes public-list

tai scopes public-pin

Pin a URL public (optionally with a dynamic match pattern). The pin is for a route that does NOT declare itself public — an authed registered route an operator chooses to open (e.g. /metrics), or a path a mounted app serves that the registry does not describe. A route declared public at registration needs no pin, and a pin never re-protects a declared-public route. Example: tai scopes public-pin /metrics

tai scopes public-unpin

Unpin a public URL. Example: tai scopes public-unpin /metrics

tai scopes remove-url

Remove a URL from every scope that references it. Example: tai scopes remove-url /api/tools

tai scopes routes

List the app’s HTTP routes with each route’s scope mapping. A mapped of null marks an unassigned route. Example: tai scopes routes