---
title: "Set filing authorization"
method: POST
path: "/filings/authorization"
tags: ["Filings"]
---

# Set filing authorization

`POST /filings/authorization`

## Request

- Base URL: `https://api.app.lastaccountingcompany.com/portal`
- URL: `https://api.app.lastaccountingcompany.com/portal/filings/authorization`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/lastaccountingcompany/apis/lac-customer-api/docs/filings/authorization/post.ts> (a function with typed inputs; its response is checked against the schema)

Grants or revokes LAC's standing authorization to submit filings on the company's behalf. Requires a write-scoped key.

## Request body

- object
  - `customer_id` string: Target company. Optional for API keys.
  - `authorized` boolean, required: Whether LAC is authorized to submit filings.

## Response `200`

Authorization state recorded.

- object
  - `ok` boolean
  - `event_id` string
  - `authorization` object
    - `authorized` boolean
    - `set_by` string
    - `actor` string
    - `ts` string

## Other responses

- `401`: Missing or invalid bearer token.
- `403`: Insufficient scope or role — e.g. a read-scoped key on a mutating method, or an API key on an admin/approver-only endpoint.

---

[API](https://skmtc.dev/lastaccountingcompany/apis/lac-customer-api.md) - [All operations](https://skmtc.dev/lastaccountingcompany/apis/lac-customer-api/llms.txt) - [OpenAPI document](https://skmtc.dev/lastaccountingcompany/apis/lac-customer-api/revisions/52e277b4f031?raw)