saas.admitModule 30Ask whether an agent may touch a SaaS source, and let it write through one only after the same check that gates everything else.
saas.admit runs Intralock admission on a SaaS connector, resource saas:<source>, with a default action of read. An administrator can also give a source a write map; write then admits each operation, forwards it with the workspace's connection credential and ledgers the outcome.
Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
© 2026 Intramedial. All rights reserved. Intramedial is a product by Trustvice. Secured and supercharged by Avonao Labs.
Report abusesync answers ok: false for every source: credential_gated where a connector-fabric adapter exists, adapter_planned otherwise. Admission and write maps work today; inspect shows which sources are implemented.
Plane module
sourceid is accepted as an alias.actorDidactionread, write or . For it defaults to ; in it comes from the operation's .
deleteadmitreadwritekindconfirmationTokenresultallow, reason and, when a human must confirm, approvalId.llmfalse. The verdict is a pure function.opargs{args.name} placeholders in the operation's path and resource.admit checks saas:<source> for an actor and an action. It is a verdict only; nothing is sent to the SaaS. Use it before your own client calls the API.
write looks up the operation in the source's write map, admits it, and only on allow sends the request with the stored credential. The reply is screened.
list returns the connector catalogue, the sources and which are implemented. An unknown source returns 404.
admit takes source, actorDid and optionally action. The verdict is the shared admission answer, including approvalId for a write needing confirmation.
An administrator sets write-map with a address and up to 100 operations, each with , , and of , or .
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private. saas.admit docs
Press Run to send the request on the left to the shared demo workspace.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private.
A request in the shape the API accepts, and an example response in the shape the module returns.
POST /api/v1/acp/saas/admit Authorization: Bearer av_workspace_•••• Content-Type: application/json { "source": "github", "actorDid": "did:web:acme.example:agent:support", "action": "write" } → 200 { result: { allow, reason }, llm: false }
{
"result": {
"allow": false,
"reason": "no_grant"
},
"llm": false
}Call admit with action: write before your client posts to the source. A missing grant answers no_grant; a held write answers with an approvalId.
A write map gives each operation its own resource, so a grant can cover saas:github/issues.read without covering saas:github/repos.delete.
The agent never holds the SaaS credential. write attaches the workspace connection's token and screens the reply before returning it.
Every write appends a saas.write event and a row to the write log, including refused attempts with their reason.
github.enforce, which admits repo: and posts a check.mandates.compile; admission only reads the grants.A module is a strong claim about a narrow thing. Rely on it for exactly what it is.
admit decides with Intralock and returns llm: false; it uses the same path as coordination.admit.read, and a DELETE must be declared delete; the map is refused otherwise.write is never forwarded: the response says forwarded: false and the row is logged with the reason.status is the connector's HTTP status, and a 4xx still comes back with allow: true.admit verdict bounds your own client. Only calls sent through write are held by the gateway.kind is true of the remote API. The map is the administrator's claim, and a mislabeled operation is admitted as labeled.An operation without its own resource is admitted as saas:<source>/<op>. One that does set a resource keeps it, up to 200 characters.
write uses the map's connectionId or a workspace secret named by authEnv, which must start with SAAS_. If neither yields a token, the call goes out without authorization.
{args.name} in a path is filled from args and URL-encoded. A missing argument is a 400, not a blank.
write-map needs policies.approve and an administrator. admit, write-preview and write carry no role of their own; the verdict gates them.
/ and no longer than 300 characters.write times out at 8000 ms and keeps at most 256 KiB of the reply.write-log returns the latest 100.write and write-preview.Authenticate with a workspace API key as a Bearer token. The base URL is https://api.intramedial.com.
/api/v1/acp/saas/admitAdmit an actor's action on a SaaS connector./api/v1/acp/saas/listList connector sources and which are implemented./api/v1/acp/saas/write-mapSet or clear a source's write map (administrators)./api/v1/acp/saas/write-previewShow the resource and hold status of an operation./api/v1/acp/saas/writeAdmit and forward one mapped operation./api/v1/acp/saas/write-logRead recent write outcomes.coordination.saas.admitAsk for a SaaS verdict from an agent.coordination.saas.listList connector sources from an agent.coordination.admit01Intralock admissionDecide every action before it happens: an agent declares its intent, and Intralock admits it or names the reason it may not.coordination.approve05Human approval queueHold a risky write or delete until a signed-in person approves it, with the agent, resource and verb in front of them.github.enforce29GitHub write gateMake a commit's check go red unless the agent behind it holds the grant and, for a write, a human has confirmed.mcp.enforce04MCP gateway enforcementPut a front on an MCP server so each tool call is admitted like any other intent, and a refused call never reaches the server.iam.assume31Cloud credential brokerGive an agent a short-lived cloud credential only while it holds a live lease on the role, and let the credential die with the lease.coordination.halt06Emergency stop switchesStop one agent, one mandate or one resource at once, with a reason on record, and lift the stop when it is safe.baseopmethodpathkindreadwritedeletewrite-preview shows the resource and whether the operation is held. write runs it, and write-log shows the 100 most recent outcomes.
coordination.quarantine32