---
title: "Approve or reject an agent action"
method: POST
path: "/agent-actions/{id}/decide"
tags: ["Agents"]
---

# Approve or reject an agent action

`POST /agent-actions/{id}/decide`

## Request

- Base URL: `https://api.hypamoon.com/api/v1`
- URL: `https://api.hypamoon.com/api/v1/agent-actions/{id}/decide`
- Auth: one of:
  - HTTP bearer
  - OAuth 2 (authorization code, authorization URL `https://app.hypamoon.com/oauth/authorize`, token URL `https://api.hypamoon.com/oauth/token`, scopes: `project:write`)

The owner's decision on an action awaiting approval (status pending_approval). approve runs it now, through the same checks as any other request (verification, balance, test mode); reject drops it. An SMS or a call can only be approved in the portal (403 forbidden here); rejecting does work here. Approving also needs the action's scope. A paused agent's actions can only be rejected. Repeating the same decision returns the action unchanged; a different decision on an action that was already decided or expired returns 409. Every decision is recorded in the project's audit log.

## Path parameters

- `id` string, uuid, required

## Request body

- object: The owner's decision on an action that waits for approval.
  - `decision` 'approve' | 'reject', required: approve runs the action now; reject drops it.

## Response `200`

The action after the decision.

- object: One action of an agent run.
  - `id` string, uuid, required
  - `run_id` string, uuid, required
  - `agent_id` string, uuid, required
  - `type` 'read_document' | 'update_document' | 'email_owner' | 'email_contact' | 'send_sms' | 'start_call' | 'send_webhook', required
  - `input` object, required: What the agent asked for, like {"to": "+447700900123", "assistant_instructions": "..."}.
  - `status` 'running' | 'done' | 'simulated' | 'pending_approval' | 'rejected' | 'refused' | 'failed' | 'expired', required: running, done, simulated (test mode), pending_approval (waiting for the owner), rejected (by the owner), refused (by the limits or the rules, see reason), failed (see reason), expired (no decision within 72 hours).
  - `reason` string, nullable, required
  - `result` object, nullable, required
  - `decided_by` string, nullable, required
  - `decided_at` string, nullable, required
  - `expires_at` string, nullable, required: When a pending action expires.
  - `created_at` string, required
  - `executed_at` string, nullable, required

## Other responses

- `400`: Bad Request: invalid_json.
- `401`: Unauthorized: unauthorized, missing_api_key, invalid_api_key, api_key_revoked, project_deleted.
- `403`: Forbidden: project_not_enabled, key_mode_mismatch, missing_scope, verification_required, forbidden.
- `404`: Not Found: not_found.
- `409`: Conflict: conflict.
- `422`: Unprocessable Content: validation_failed.
- `429`: Too Many Requests: rate_limited.
- `500`: Internal Server Error: internal_error.
- `503`: Service Unavailable: service_unavailable.

---

[API](https://skmtc.dev/hypamoon/apis/hypamoon-api.md) · [All operations](https://skmtc.dev/hypamoon/apis/hypamoon-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hypamoon/apis/hypamoon-api/revisions/9f0b90004c06?raw)