---
title: "Consume a single-use human authorization for one exact operation."
method: POST
path: "/attention-authorizations/{id}/consume"
---

# Consume a single-use human authorization for one exact operation.

`POST /attention-authorizations/{id}/consume`

## Request

- Base URL: `https://forbiz.io/api/public/agent`
- URL: `https://forbiz.io/api/public/agent/attention-authorizations/{id}/consume`
- Auth: HTTP bearer

`operation` must equal the authorized operation exactly: an answer never widens into a permission nobody granted. The authorization unblocks nothing on its own — no execution gate accepts it today — and a DENY policy still refuses, leaving it UNCONSUMED.

## Path parameters

- `id` string, required

## Request body

- object
  - `operation` string
  - `ref` string

## Response `200`

Consumed

- object
  - `consumed` boolean
  - `authorization` object
  - `unblocks` string[]
  - `note` string

## Other responses

- `400`: OPERATION_REQUIRED
- `403`: POLICY_DENIED — authorization_consumed false
- `404`: AUTHORIZATION_NOT_FOUND
- `409`: AUTHORIZATION_ALREADY_CONSUMED / AUTHORIZATION_EXPIRED / AUTHORIZATION_SCOPE_MISMATCH

---

[API](https://skmtc.dev/forbiz/apis/forbiz-external-agent-api.md) · [All operations](https://skmtc.dev/forbiz/apis/forbiz-external-agent-api/llms.txt) · [OpenAPI document](https://skmtc.dev/forbiz/apis/forbiz-external-agent-api/revisions/e5b10d59dc5f?raw)