import type { DelegationTokenPayload } from '../../types/delegation';
/**
 * Create a scoped, short-lived delegation token.
 *
 * Delegation tokens authorize MCP tools to act on behalf of a user
 * with only the specified scopes.
 */
export declare function createDelegationToken(userId: string, scopes: string[], ttlSeconds?: number, options?: {
    workflowId?: string;
    serverId?: string;
}): string;
/**
 * Validate a delegation token. Returns the decoded payload or throws.
 */
export declare function validateDelegationToken(token: string): DelegationTokenPayload;
/**
 * Check that a delegation token has the required scope.
 * Throws if the scope is missing.
 */
export declare function requireScope(payload: DelegationTokenPayload, requiredScope: string): void;