# description
Error returned when a tool call requires user authorization. The response is itself signed (detached JWS in _meta) so the client can verify the authorizationUrl before trusting it; the client resumes the flow with resumeToken after the user grants authority (SPEC §9.2).

# properties.error.description
Discriminator identifying this error variant.

# properties.message.description
Human-readable explanation of what authorization is required.

# properties.authorizationUrl.description
URL where the user grants authorization. Bound by the response proof's responseHash to detect substitution.

# properties.resumeToken.description
Opaque token used to resume the flow after authorization is granted.

# properties.expiresAt.description
Unix timestamp in seconds when resumeToken expires.

# properties.context.description
Optional implementation-specific context carried with the challenge.

# $defs.AuthorizationDisplay.description
Optional presentation hints for rendering the authorization prompt.

# $defs.AuthorizationDisplay.properties.title.description
Short title for the authorization prompt.

# $defs.AuthorizationDisplay.properties.authorizationCode.description
Short human-enterable code, when 'code' presentation is offered.

# $defs.AuthorizationDisplay.properties.qrUrl.description
URL to encode as a QR code, when 'qr' presentation is offered.

# examples[].message
Authorization required to send email on the user's behalf.