Anchorage API reference
    Preparing search index...

    Interface PermissionManifest

    Permission manifest — what the connector declares about itself.

    interface PermissionManifest {
        background?: boolean;
        dryRun?: boolean;
        egress?: readonly string[];
        idempotencyKey?: boolean;
        rateLimit?: string;
        requiredPermissions?: readonly string[];
        requiresApproval?: boolean;
        sideEffect: SideEffect;
    }
    Index

    Properties

    background? dryRun? egress? idempotencyKey? rateLimit? requiredPermissions? requiresApproval? sideEffect

    Properties

    background?: boolean

    Allow Mastra background intent for this connector. The default is foreground-only. Only a read-only connector may enable this field; write-class connectors fail at construction.

    dryRun?: boolean

    Connector supports side-effect-free simulation: requires ConnectorConfig.dryRunExecute. Callers request a simulation per call by setting requestContext DRY_RUN_CONTEXT_KEY to true.

    egress?: readonly string[]

    Hostnames this connector calls; gated by the networkEgress policy.

    idempotencyKey?: boolean

    Caller must supply a per-call idempotency key (IDEMPOTENCY_KEY_CONTEXT_KEY in requestContext). Replays of a stored key return the stored result without re-executing.

    rateLimit?: string

    Execution budget as '/' — e.g. '100/min'; units are the singular s|sec|second|m|min|minute|h|hour|d|day. Enforced with fixed windows against policies.rateLimitStore; only actual executions consume budget (denied calls, replays, and shared in-flight joins do not).

    requiredPermissions?: readonly string[]

    Server-derived permissions required to invoke this connector, with explicit ALL-OF semantics: the executing principal must hold every listed identifier. Enforced against the trusted breakwater.principalPermissions projection BEFORE the dry-run branch and the approval-grant gate — authorization applies to simulations too, and a valid approval must not elevate an unauthorized principal. A call with no valid projection fails closed. Omission preserves the existing approval/policy-only behavior; a present list must be non-empty.

    requiresApproval?: boolean

    Always require human approval, regardless of org policy.

    sideEffect: SideEffect

    Worst side effect the connector can cause.

    Settings

    Member Visibility

    On This Page

    Properties