---
title: "Set whether a member can create agents"
method: PATCH
path: "/company/me/members/{userId}/agent-permission"
tags: ["Company"]
---

# Set whether a member can create agents

`PATCH /company/me/members/{userId}/agent-permission`

## Request

- Base URL: `https://api.atako.ai`
- URL: `https://api.atako.ai/company/me/members/{userId}/agent-permission`
- Auth: HTTP bearer

Company-admin only.

## Path parameters

- `userId` string, required

## Request body

- object
  - `canCreateAgents` boolean, required

## Response `200`

- CompanyMemberRow: The raw `company_members` DB row — unlike `CompanyMember` (used by `GET /company/me/members`, which joins in the user's name/email/photo and the team's name), the three mutation endpoints below (`updateMemberRole`, `setMemberAgentPermission`, `setMemberTeam`) return this row as-is, with no join.
  - `id` string, uuid, required
  - `companyId` string, uuid, required
  - `userId` string, uuid, required
  - `role` 'admin' | 'member', required
  - `canCreateAgents` boolean, required
  - `teamId` string, uuid, nullable
  - `createdAt` string, date-time, required

## Other responses

- `400`: Validation error.
- `401`: Missing, malformed, or invalid bearer token / API key, or revoked session (SESSION_REVOKED).
- `402`: No active subscription, or subscription not active.
- `403`: The caller does not have the required role/permission.
- `404`: No company found / Member not found

---

[API](https://skmtc.dev/atako/apis/atako-api.md) · [All operations](https://skmtc.dev/atako/apis/atako-api/llms.txt) · [OpenAPI document](https://skmtc.dev/atako/apis/atako-api/revisions/aa555c56fbd7?raw)