Preview the native NEAR permissions. A function-call key restricts receivers, methods and gas allowance; Leash supplies the additional policy checks.

{
  "receiver_id": "coffee.near",
  "method_names": [],
  "allowance": "2000000000000000000000000"
}

near account add-key YOUR_ACCOUNT.testnet grant-function-call-access --allowance '2 NEAR' --receiver-account-id 'coffee.near' --method-names '' use-manually-provided-public-key YOUR_PUBLIC_KEY network-config testnet sign-with-keychain send

{
  "receiver_id": "weather.near",
  "method_names": [],
  "allowance": "2000000000000000000000000"
}

near account add-key YOUR_ACCOUNT.testnet grant-function-call-access --allowance '2 NEAR' --receiver-account-id 'weather.near' --method-names '' use-manually-provided-public-key YOUR_PUBLIC_KEY network-config testnet sign-with-keychain send

• Preview only. Leash never runs these commands. Replace YOUR_ACCOUNT.testnet and YOUR_PUBLIC_KEY with your account and an existing public key; use a distinct key for each receiver.
• Allowance limits cumulative gas fees, not transferred value or a daily budget. This preview uses the daily budget as a gas-allowance suggestion; choose an appropriate gas cap before running it.
• Function-call keys cannot make native transfers or attach deposits. Standard ft_transfer needs a 1-yocto deposit, so this key cannot directly authorize it.
• Daily resets, per-payment caps, hourly limits, human approval, token rules, argument checks and time windows require a trusted runtime or on-chain enforcement beyond an access key.
• One receiver per function-call key: create one key per receiver. Splitting keys does not enforce a shared budget.
• coffee.near: empty method_names means ALL contract methods. Add an explicit method rule to reduce authority.
• weather.near: empty method_names means ALL contract methods. Add an explicit method rule to reduce authority.

{
  "dailyBudgetYocto": "2000000000000000000000000",
  "perTxCapYocto": "500000000000000000000000",
  "allowlist": [
    "coffee.near",
    "weather.near"
  ],
  "blockedReceivers": [],
  "allowedMethods": {},
  "askHumanAboveYocto": "300000000000000000000000",
  "maxTxPerHour": 5,
  "activeHours": null,
  "allowedTokens": [
    "NEAR"
  ]
}