Struct Scope 

pub struct Scope {
    pub namespace: String,
    pub protocol: String,
    pub resource: String,
    pub action: String,
}

A single permission scope in the format namespace:protocol:resource:action.

Grammar (4-part)

scope = namespace ":" protocol ":" resource ":" action

Each component may be a literal value or "*" (wildcard, matches anything).

Fields

Field	Description	Examples
namespace	Protocol family	mcp, a2a, idprova, http
protocol	Sub-protocol or category within the namespace	tool, prompt, resource, agent
resource	Specific resource (tool name, endpoint, etc.)	filesystem, search, billing
action	Operation being requested	read, write, execute, call

Examples

mcp:tool:filesystem:read     — read access to the filesystem MCP tool
mcp:tool:*:*                 — all tools, any action
mcp:tool:filesystem:*        — all actions on the filesystem tool
a2a:agent:billing:execute    — execute on the billing A2A agent
idprova:registry:aid:write   — write AIDs to the IDProva registry
*:*:*:*                      — unrestricted (root delegation only)

Fields

namespace: String

Protocol family (e.g., “mcp”, “a2a”, “idprova”).

protocol: String

Sub-protocol within the namespace (e.g., “tool”, “prompt”, “agent”).

resource: String

Specific resource targeted (e.g., “filesystem”, “billing”).

action: String

Action being requested (e.g., “read”, “write”, “execute”).

Implementations

impl Scope

pub fn parse(s: &str) -> Result<Self>

Parse a 4-part scope string namespace:protocol:resource:action.

Returns an error if the string does not contain exactly 4 colon-separated parts.

pub fn covers(&self, requested: &Scope) -> bool

Check if this scope covers (permits) the requested scope.

A scope covers another if each component either matches exactly or this scope’s component is the wildcard "*".

pub fn to_string_repr(&self) -> String

Convert to the canonical string representation.

Trait Implementations

impl Clone for Scope

fn clone(&self) -> Scope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Scope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Scope

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for Scope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Hash for Scope

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for Scope

fn eq(&self, other: &Scope) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Scope

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for Scope

impl StructuralPartialEq for Scope