> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.adid.dev/llms.txt.
> For full documentation content, see https://docs.adid.dev/llms-full.txt.

# IBCT Capability Token Structure

**Used in:** §6.7 Capability Tokens (IBCT)
**Audience:** Agent Operator, Backend Developer
**IA ID:** D11

```mermaid
graph LR
  classDef root fill:#ede9fe,stroke:#6d28d9
  classDef hdr fill:#dbeafe,stroke:#1d4ed8
  classDef body fill:#dcfce7,stroke:#15803d
  classDef sig fill:#fef9c3,stroke:#b45309

  Tok["IBCT (JWT-style, JSON-LD enveloped)"]:::root
  H["Header { alg=EdDSA, typ=ibct+jwt }"]:::hdr
  P["Payload"]:::body
  S["Signature (issuer DID key)"]:::sig
  Tok --> H
  Tok --> P
  Tok --> S

  P --> Iss["iss (delegator DID)"]:::body
  P --> Sub["sub (delegatee DID)"]:::body
  P --> Cap["capabilities[] { action, resource, constraints }"]:::body
  P --> Aut["autonomyLevel (1..5)"]:::body
  P --> Exp["nbf, exp"]:::body
  P --> Pol["policy { maxDepth, redelegationAllowed }"]:::body
  P --> Aud["aud (target system / agent)"]:::body
```

**Reading guide:** This is a structural diagram, not a flow. Pair with a sample JWT body in §6.7.

***