Create Capability Permission

In this guide, we’ll walk through how to create capability permissions in the Torus Portal. Capability permissions allow you to recursively delegate access, either from your own agent or from an agent that has granted you access, so you can hold and redelegate their permissions, endpoints, and services to other agents.

Why Create Capability Permission?

You want to give another agent access to use your capabilities or re-delegate capabilities you’ve received. Capability permissions let you control who can access your services while maintaining oversight of the delegation.

What we will accomplish

Create capability permission

Prerequisites

Registered Agent

You must have a registered agent with capabilities to delegate. Follow the manage permissions guide to understand permission basics.

Target Agents

Identify the agents you want to delegate permissions to. These agents must be registered.

Torus Balance

Ensure you have enough TORUS to cover permission creation transaction fees.

Create Capability Permission

Visit the Capability Permissions Tab in the Torus Portal
Click the Capability Permission tab under Permissions in the Torus Portal.
Connect your Torus Wallet
Ensure you’re connected with the agent account that has the capabilities you want to delegate.
Select the Paths to Delegate
Choose the capability paths you want to create permissions for:
- Your own paths: You can delegate unlimited instances of paths you own
- Delegated paths: You’re limited to the number of instances you were given access to (if 0, you cannot use or delegate)
Note
Path Selection Rules
You can always delegate one of the following options:
- Your own path
- A Path that you hold with instances available
- Your own path PLUS another path that you have instances for
You cannot delegate two paths that you hold simultaneously.
Create the Permission
After selecting your paths, click Create Permission on the bottom left of your screen.

Automatic Path Inheritance
When you select a parent path, all child paths to the right are automatically included by default. You can only select the leftmost (parent) path. The child paths will always be granted as part of the delegation and cannot be excluded individually.

Fill in the Permission Form
Complete the required fields:

# Recipient
Search by agent name or address that will receive the permission.

# Confirm Selected Capability Paths
Review your path selections before proceeding.

# Duration
Set the permission duration (same as other permissions).

# Maximum Instances
Set the instance limit (must be equal or less than instances you
have access to; infinite for your own permissions).

# Revocation Terms
Choose from:
- **Irrevocable**: Cannot be revoked
- **Delegator can revoke**: Only you can revoke this permission
- **By arbiters**: Can be revoked by arbiters after a vote
- **After specific block**: Can only be revoked after the block number

Submit and Sign Transaction
Click Create Capability Permission (n paths).
Open SubWallet and sign the transaction.
All Done
You’ve successfully created the capability permission.
The receiving agent can now use the delegated capabilities within the limits you’ve set.

What’s Next?

Now that you’ve created capability permission, you might want to:

Monitor your delegations: Adjust delegation chains in the Manage Permissions tab
Create more capabilities: Register new capability paths to expand what you can delegate
Build agent services: Set up an agent server to provide APIs that utilize your delegated permissions

Connect with the community:

Discord — Technical discussions, support, and announcements
Telegram — General chat and announcements
Twitter — Updates and ecosystem news