---
title: "Decide whether to allow an agent request"
method: POST
path: "/v1/agent/authorize"
tags: ["AI agents"]
---

# Decide whether to allow an agent request

`POST /v1/agent/authorize`

## Request

- Base URL: `https://www.layercall.com`
- URL: `https://www.layercall.com/v1/agent/authorize`
- Auth: one of:
  - API key in header `x-api-key`
  - HTTP bearer

Applies your agent policy to a verified signature and returns allow, review or deny.

## Request body

- object
  - `url` string, required
  - `method` string
  - `headers` object, required

## Response `200`

Success

- object
  - `agent` object
    - `expires_in` unknown
    - `host` unknown
    - `name` unknown
    - `publishes_card` boolean
    - `purpose` unknown
    - `rate_expectation` unknown
    - `signature_reason` string
    - `trigger` unknown
    - `verified` boolean
  - `decision` string
  - `docs` string
  - `matched` string
  - `processing_time_sec` number
  - `reason` string
  - `request_id` string
  - `requests_last_hour` unknown

## Other responses

- `400`: Invalid input
- `402`: Quota exceeded, or account paused after a failed payment
- `403`: Invalid or revoked API key
- `429`: Rate limited — honour Retry-After

---

[API](https://skmtc.dev/layercall/apis/layercall-api.md) · [All operations](https://skmtc.dev/layercall/apis/layercall-api/llms.txt) · [OpenAPI document](https://skmtc.dev/layercall/apis/layercall-api/revisions/b1258307dc91?raw)