## §OIP SYSTEM ARTICLE — Capabilities (tokens) (3 operations)
A generated article for one OIP shelf. It lists every operation in this API/CLI/MCP/device/model/core subsystem, links each leaf article, and gives the ledger path for proof.

### Read Order
- scan operations
- open a leaf doc
- run via run_now or POST /api/dispatch
- open receipt
- repair/replay if needed

### Operations
- **CAP_MINT** — Mint a scoped, short-lived, ledgered capability URL — delegated authority over exactly one row (or read/act ti
  when: Cyrus says "mint a token/capability/link for <KEY>", "give a model a 10 minute key to X", "one-shot link for NOW".
  args: $1=scope (row|act|read), $2=row key (for scope row), $3=ttl seconds (default 600), $4=max uses (default 1, 0=unlimited), $5=purpose (plain english), $6=risk_ceiling (low|high, default low), $7=owner_gate (0|1, default 0).
  doc: https://miscsubjects.com/api/dispatch?key=CAP_MINT&format=markdown
  run: https://miscsubjects.com/api/dispatch?invoke=CAP_MINT&body=row%7CNOW%7C600%7C1%7Cdemo%20for%20chatgpt&share=<TOKEN>
  history: https://miscsubjects.com/api/invocations?object_id=CAP_MINT
- **CAP_EXPLAIN** — Explain a capability: what it may invoke, verbs, expiry + remaining TTL, uses left, risk ceiling, owner gate, 
  when: Cyrus asks "what can this token do", "explain this capability", "is cap_x still valid".
  args: $1 = capability token or cap_ fingerprint.
  doc: https://miscsubjects.com/api/dispatch?key=CAP_EXPLAIN&format=markdown
  run: https://miscsubjects.com/api/dispatch?invoke=CAP_EXPLAIN&body=cap_1a2b3c4d5e6f7a8b&share=<TOKEN>
  history: https://miscsubjects.com/api/invocations?object_id=CAP_EXPLAIN
- **CAP_REVOKE** — Revoke a capability by fingerprint — the URL dies immediately; further invokes are denied and ledgered.
  when: Cyrus says "revoke that token", "kill cap_x", "cut that model off".
  args: $1 = cap_ fingerprint.
  doc: https://miscsubjects.com/api/dispatch?key=CAP_REVOKE&format=markdown
  run: https://miscsubjects.com/api/dispatch?invoke=CAP_REVOKE&body=cap_1a2b3c4d5e6f7a8b&share=<TOKEN>
  history: https://miscsubjects.com/api/invocations?object_id=CAP_REVOKE

### Troubleshooting
- If a row's example has placeholders, replace only the placeholder values and preserve separators.
- If a call fails, open its receipt and repair it with POST /api/dispatch {key, body, repairs:'inv_ID'}.
- If token scope denies this system, ask the owner for a row:/rows:/pfx: token scoped to the exact operation set.

Back to the tree: https://miscsubjects.com/api/dispatch?map=1&format=markdown