---
title: "Deliver a HITL approval/rejection to the user's active chat session"
method: POST
path: "/assistant/chat/permission"
tags: ["Chat"]
---

# Deliver a HITL approval/rejection to the user's active chat session

`POST /assistant/chat/permission`

## Request

- Base URL: `https://api.mobilerun.ai`
- URL: `https://api.mobilerun.ai/assistant/chat/permission`
- Auth: HTTP bearer

Deliver a HITL approval/rejection for an in-flight turn. Interactive HITL clients must start the turn with `Accept: text/event-stream`, wait for a `tool-hitl-approval` event, and send its `permissionId` here at `/assistant/chat/permission`. Do not submit approval as free-form user text or as `confirmed: true`. For `devices.reset`, only `once` and `reject` are allowed; the generic `always` response is rejected with HTTP 400.

## Request body

- object
  - `permissionId` string, required
  - `response` 'once' | 'always' | 'reject', required

## Response `200`

Permission delivered

- object
  - `ok` true, required

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `404`: Not Found
- `500`: Internal Server Error

## Changes

- **2026-10-16** `4ad548c528a8`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/droidrun/apis/droidrun-cloud/changes/assistant/chat/permission/post.md)

---

[API](https://skmtc.dev/droidrun/apis/droidrun-cloud.md) - [All operations](https://skmtc.dev/droidrun/apis/droidrun-cloud/llms.txt) - [OpenAPI document](https://skmtc.dev/droidrun/apis/droidrun-cloud/revisions/1cc95586c933?raw)