Entitlements

NEXUS checks a small set of cloud-issued entitlements to decide which local capabilities are available. The cloud is not involved in the capabilities themselves — canvas writes, mesh messages, and terminal sessions all happen locally — only in granting or withholding the entitlement that unlocks them.

Endpoint

GET /api/v1/nexus/entitlements
Authorization: Bearer <token>

Response

{
  "nexus.desktop": true,
  "nexus.mcp_sync": true,
  "nexus.wiki": true,
  "nexus.files": true,
  "nexus.neural_map": true,
  "nexus.room": true,
  "nexus.music.player": false,
  "nexus.canvas": true,
  "nexus.browser": false,
  "nexus.orchestration": false,
  "nexus.sessions.max": 8,
  "nexus.agents.max": 20,
  "nexus.workspaces": 3
}

Keys

Key	Kind	Gates
nexus.desktop	boolean	Running the desktop application at all.
nexus.mcp_sync	boolean	The local MCP server.
nexus.wiki	boolean	The per-agent wiki surface.
nexus.files	boolean	File surfaces.
nexus.neural_map	boolean	The neural map view.
nexus.room	boolean	The room surface.
nexus.music.player	boolean	The music player surface.
nexus.canvas	boolean	The collaborative canvas and its canvas_* tools.
nexus.browser	boolean	A browser capability. Roadmap — this key exists so the gate is already in place; the capability itself has not shipped.
nexus.orchestration	boolean	One of the two independent gates required before autonomous agent chains can form. See Explanation: Orchestration Governance.
nexus.sessions.max	limit	Maximum concurrent terminal sessions.
nexus.agents.max	limit	Maximum agents in a workspace.
nexus.workspaces	limit	Maximum workspaces.

Propagation delay

Entitlement responses are served from a cached snapshot. A newly granted key can take up to 300 seconds to appear in this endpoint's response. Do not treat an entitlement that was just granted and still reads false (or a limit still at its old value) as a bug — poll or wait rather than escalating immediately.