Metadata
| Field | Value |
|---|---|
| Name | agent.grant.refresh |
| Category | treasury |
| Required scope | agent:budget:create |
| Idempotency key required | no |
Annotations
| Annotation | Value |
|---|---|
| Title | Refresh Grant (no step-up) |
| Read-only | no |
| Destructive | no |
| Idempotent | yes |
| Open-world | no |
| Requires human approval | no |
Input schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"type": "object",
"properties": {},
"additionalProperties": false
}
Output schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"type": "object",
"properties": {
"grant_id": {
"type": "string",
"format": "uuid",
"pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
},
"bearer_token": {
"type": "string",
"minLength": 1
},
"expires_at": {
"type": "string",
"format": "date-time",
"pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
},
"scope": {
"type": "array",
"items": {
"type": "string",
"enum": [
"accounts:read",
"agents:read",
"payments:initiate",
"payments:simulate",
"cards:manage",
"agent:budget:create",
"agent:budget:revoke",
"beneficiary:read",
"beneficiary:write",
"kyc:start",
"x402:pay",
"x402:receive",
"audit:stream",
"treasury:rotate-signer",
"treasury:yield-allocate"
]
}
},
"old_policy_version": {
"type": "integer",
"minimum": 0,
"maximum": 9007199254740991
},
"new_policy_version": {
"type": "integer",
"minimum": 0,
"maximum": 9007199254740991
},
"policy_changed": {
"type": "boolean"
}
},
"required": [
"grant_id",
"bearer_token",
"expires_at",
"scope",
"old_policy_version",
"new_policy_version",
"policy_changed"
],
"additionalProperties": false
}
Request examples
curl -X POST https://mcp.glide.co/mcp/treasury \
-H "Authorization: Bearer $GLIDE_GRANT_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"jsonrpc": "2.0",
"id": 1,
"method": "agent.grant.refresh",
"params": {}
}'
import { GlideClient } from './glide-client';
const client = new GlideClient({ grantToken: process.env.GLIDE_GRANT_TOKEN! });
// Refresh the current grant — re-issues under latest policy if unchanged or narrowed
const result = await client.call('agent.grant.refresh', {});
if (result.policy_changed) {
console.log(
`Policy narrowed from v${result.old_policy_version} to v${result.new_policy_version}`
);
}
// Use the new bearer token for subsequent calls
console.log(`New grant: ${result.grant_id}, expires: ${result.expires_at}`);
from glide_client import GlideClient
import os
client = GlideClient(grant_token=os.environ["GLIDE_GRANT_TOKEN"])
result = client.call("agent.grant.refresh", {})
if result["policy_changed"]:
print(
f"Policy narrowed from v{result['old_policy_version']} "
f"to v{result['new_policy_version']}"
)
print(f"New grant: {result['grant_id']}, expires: {result['expires_at']}")
Response examples
Successful response — policy unchanged (pure TTL extension):{
"jsonrpc": "2.0",
"id": 1,
"result": {
"grant_id": "g8h9i0j1-k2l3-4567-m012-567890123456",
"bearer_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJkNGU1ZjZhNyIsInNjb3BlIjpbImFjY291bnRzOnJlYWQiLCJwYXltZW50czppbml0aWF0ZSJdfQ.newsignature",
"expires_at": "2026-05-04T13:30:00Z",
"scope": ["accounts:read", "payments:initiate"],
"old_policy_version": 3,
"new_policy_version": 3,
"policy_changed": false
}
}
{
"jsonrpc": "2.0",
"id": 1,
"result": {
"grant_id": "h9i0j1k2-l3m4-5678-n123-678901234567",
"bearer_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJkNGU1ZjZhNyIsInNjb3BlIjpbImFjY291bnRzOnJlYWQiXX0.newsignature",
"expires_at": "2026-05-04T13:30:00Z",
"scope": ["accounts:read"],
"old_policy_version": 3,
"new_policy_version": 4,
"policy_changed": true
}
}
agent.grant.issue with step-up):
{
"jsonrpc": "2.0",
"id": 1,
"error": {
"code": -32602,
"message": "new policy version 5 expands authority (daily_limit increased from 5000 to 10000); use agent.grant.issue with step-up",
"data": {
"reason_id": "policy_broadened_requires_step_up"
}
}
}
{
"jsonrpc": "2.0",
"id": 1,
"error": {
"code": -32602,
"message": "policy version 3 on vault a1b2c3d4-e5f6-7890-abcd-ef1234567890 is not on file; agent.grant.refresh cannot validate narrowing without it",
"data": {
"reason_id": "old_envelope_missing"
}
}
}
Errors
| Code | Name | Cause | Remediation |
|---|---|---|---|
-32600 | Invalid request | Malformed JSON-RPC envelope | Check method, jsonrpc, and id fields |
-32602 | Invalid params | New policy expands authority vs issue-time version; policy envelope missing or fails schema validation | Use agent.grant.issue with step-up to acquire broader scope; contact support if envelope missing |
-32000 | Unauthenticated | Missing Authorization header | Supply a valid Bearer token |
-32001 | Unauthorized | Grant token expired or revoked | Issue a new grant via agent.grant.issue (step-up required) |
-32002 | Insufficient scope | Grant missing agent:budget:create scope | Issue new grant with agent:budget:create scope |
-32603 | Internal error | Server-side error | Retry with backoff; contact support |
Auth
Caller’s grant must include theagent:budget:create scope. Grants whose scope set is a superset of the required scope are accepted.