cartographer.mapModule 17Keep connections between resources on a map you control: the cartographer proposes, and a person or a bound you wrote approves.
cartographer.map returns the ratified edges, the amendments waiting for approval and the auto-ratify bounds in force. A model reads text and proposes edges off the hot path. A person ratifies each one, or a bound in the compiled mandates lets listed relations through up to a cap.
Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
© 2026 Intramedial. All rights reserved. Intramedial is a product by Trustvice. Secured and supercharged by Avonao Labs.
Report abuse
Plane module
edges{ from, to, rel }. rel defaults to relates.pendinghold and the time it was queued./docs/cartographer-mapAPI referenceRoutes, bodies and status codes./docs/cartographer-mapOpen the consoleSee the module at work in the dashboard, on a seeded fleet or your own./dashboard-preview/cartographerStart freeCreate a workspace and admit your first intent./auth/signup
pending[].holdbounds.relationsbounds.maxpendingDroppedpropose and infer: how many older pending edges were dropped to stay within the queue limit.infer sends text to an off-path model for candidate edges, and propose takes edges an agent or person names. Both pass the same checks before anything is written.
An edge goes through only if its relation is bounded, both endpoints are already on the map, it would not merge two live leases held by different agents, and the cap is not reached.
Everything else is queued as bounds_closed, relation_not_bounded, unknown_endpoint, would_merge_active_conflict or cap_exceeded.
edge ratifies an edge as the operator and clears it from the queue. dismiss drops it, and nothing reaches the map.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private. cartographer.map docs
Press Run to send the request on the left to the shared demo workspace.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private.
A request in the shape the API accepts, and an example response in the shape the module returns.
GET /api/v1/acp/cartographer/map Authorization: Bearer av_workspace_•••• → 200 { edges, pending, bounds }
{
"edges": [
{
"from": "svc:billing",
"to": "svc:ledger",
"rel": "calls"
}
],
"pending": [
{
"from": "svc:billing",
"to": "svc:reports",
"rel": "feeds",
"hold": "relation_not_bounded",
"at": "2026-11-01T08:41:09.200Z"
}
],
"bounds": {
"relations": [
"calls"
],
"max": 3
}
}An agent reports that the billing service calls the ledger. The edge waits in pending until an operator ratifies it, instead of reshaping the map on a model's word.
A mandate lets calls edges ratify, three at a time. Other relations still wait for a person.
A proposed edge would join two resources held by different agents right now. It is held as would_merge_active_conflict.
A suggested edge is wrong. dismiss removes it from the queue and the map stays as it was.
worldmodel.graph.mandates.compile; the cartographer only reads it.coordination.admit.A module is a strong claim about a narrow thing. Rely on it for exactly what it is.
edge call.Two kinds of grant in a compiled mandate, for the principal cartographer: ratify on imd://cartographer/edge/rel/<relation> for each relation, and ratify on imd://cartographer/edge/max/<n> for the cap.
edge and dismiss need the policies.approve permission. propose and infer need policies.propose.
infer runs a classifier model off the hot path, through a queue or workflow when one is bound. Admission never waits on it, and its answer is only a proposal.
pendingDropped.bounds.max edges: eight when the mandate lists relations and sets no cap.infer answers queued when a queue or workflow takes it. Pass forceInline: true to run it inside the request.Authenticate with a workspace API key as a Bearer token. The base URL is https://api.intramedial.com.
/api/v1/acp/cartographer/mapRead ratified edges, pending amendments and the bounds./api/v1/acp/cartographer/edgeRatify one edge as the operator./api/v1/acp/cartographer/proposePropose edges and let the bounds sort them./api/v1/acp/cartographer/dismissDrop a pending edge without writing it./api/v1/acp/cartographer/inferAsk the off-path model for candidate edges.coordination.cartographer.mapRead the cartographer's map as an MCP action.coordination.cartographer.edgeRatify one edge as an MCP action.coordination.cartographer.inferAsk the model for candidate edges as an MCP action.worldmodel.graph16World model graphSee every agent, repo, lease and named resource your workspace knows, and how they connect, without drawing the map first.mandates.compile03Mandate studio and replayWrite an agent's charter as code, see what it would change about who may do what, and apply it as the mandate's next version.coordination.lease02Resource leases and queuesHold a resource for one agent at a time, with a lease that lapses on its own and a queue for the agents that have to wait.coordination.fleetmap11Fleet MapRead every agent grant, lease, waiter and quarantine in the workspace in one call, drawn from what the plane has admitted.identity.enroll12Agent identity registryGive each agent its own identity before it acts, so every admitted action traces back to one agent and never to a shared account.mcp.shadow13Shadow agent discoveryList the tool calls the MCP gateway has seen, with the agent behind each, so callers nobody enrolled show up beside the ones that are.civics.presence14