---
title: "Set one verified assistant connection's iPhone location policy"
method: POST
path: "/v1/account/agent-location/connections/{connection_id}/policy"
tags: ["Customer Account"]
---

# Set one verified assistant connection's iPhone location policy

`POST /v1/account/agent-location/connections/{connection_id}/policy`

## Request

- Base URL: `https://loppee.com`
- URL: `https://loppee.com/v1/account/agent-location/connections/{connection_id}/policy`
- Auth: HTTP bearer

Selects always_allowed, ask_every_time, or not_allowed for exactly one stable verified assistant connection and active Loppee iPhone installation. Enabling either location mode requires a one-use App Attest assertion from that exact iPhone; not_allowed remains an immediate bearer-authorized safety reduction. Always allowed still requires a trusted, replay-resistant host request receipt, and unsupported hosts fail closed to in-app approval.

## Path parameters

- `connection_id` string, required

## Request body

- union
  - object
    - `policy` 'not_allowed', required
    - `installation_id` string, uuid, required
    - `consent_copy_version` 'agent-phone-location.v2', required
  - object
    - `policy` 'always_allowed' | 'ask_every_time', required
    - `installation_id` string, uuid, required
    - `consent_copy_version` 'agent-phone-location.v2', required
    - `oauth_grant_id` string, uuid, nullable, required
    - `agent_key_id` string, uuid, required
    - `challenge_id` string, uuid, required
    - `challenge` string, required
    - `key_id` string, required
    - `assertion` string, required

## Response `200`

Set one verified assistant connection's iPhone location policy response

- object
  - `status` 'updated', required
  - `connection_id` string, uuid, required
  - `policy` 'always_allowed' | 'ask_every_time' | 'not_allowed', required
  - `all_paused` boolean, required
  - `selected_at` string, date-time, required
  - `agent_receives_coordinates` false, required

## Other responses

- `400`: ErrorResponse
- `401`: ErrorResponse
- `403`: ErrorResponse
- `404`: ErrorResponse
- `409`: ErrorResponse
- `413`: ErrorResponse
- `429`: RateLimitError
- `default`: ErrorResponse

---

[API](https://skmtc.dev/loppee/apis/loppee-business-registry-api-for-external-agents.md) · [All operations](https://skmtc.dev/loppee/apis/loppee-business-registry-api-for-external-agents/llms.txt) · [OpenAPI document](https://skmtc.dev/loppee/apis/loppee-business-registry-api-for-external-agents/revisions/37285f7cddcd?raw)