---
title: "Approve, reject or return a task"
method: POST
path: "/api/v1/rest/workflow/tasks/{id}/decision"
tags: ["Workflows"]
---

# Approve, reject or return a task

`POST /api/v1/rest/workflow/tasks/{id}/decision`

## Request

- Base URL: `https://api.custodo.ai`
- URL: `https://api.custodo.ai/api/v1/rest/workflow/tasks/{id}/decision`
- Auth: HTTP bearer

Records a decision on a task in YOUR inbox. This is an act with consequences for other people — it advances or stops a run, and an approval may release a payment. ALWAYS show the user what they are approving and get an explicit yes first. You may only decide a task assigned to you, to your role, or delegated to you. `returned` sends the run back a stage for correction.

## Path parameters

- `id` string, uuid, required

## Headers

- `X-Tenant-Id` string, uuid

## Request body

- object
  - `outcome` 'approved' | 'rejected' | 'returned', required: `returned` sends the run back a stage for correction rather than killing it.
  - `fields` object: Values for the task’s own decision fields, if it declares any.

## Response `200`

Done. `data` is the tool’s own answer.

- RestResult
  - `ok` true, required
  - `data` unknown, required

## Other responses

- `400`: The arguments did not validate: `error.message` names the field, what it expects and what arrived.
- `401`: No API key, or one that is malformed, unknown, revoked or expired.
- `403`: The call never ran: the module is off for this organisation, the credential lacks the permission or the module, the tier does not cover it, or the tool is destructive and the key was not minted for that.
- `404`: Nothing with that id in this organisation.
- `409`: The record is in a state that does not allow it — under legal hold, already sent, already closed. `error.code` says which.
- `422`: The tool ran and refused, in a sentence of its own (`TOOL_REFUSED`): the message says what to change. Retrying the same call will not help.
- `429`: The API key has spent its minute, or its day. Every request a key makes counts. See `Retry-After`.

---

[API](https://skmtc.dev/custodo/apis/custodo-integrazioni.md) · [All operations](https://skmtc.dev/custodo/apis/custodo-integrazioni/llms.txt) · [OpenAPI document](https://skmtc.dev/custodo/apis/custodo-integrazioni/revisions/16d336d3ec2a?raw)
