---
title: "Update business-management agent permissions"
method: POST
path: "/v1/owner/agents/{agent_id}/permissions"
tags: ["Business Owner"]
---

# Update business-management agent permissions

`POST /v1/owner/agents/{agent_id}/permissions`

## Request

- Base URL: `https://loppee.com`
- URL: `https://loppee.com/v1/owner/agents/{agent_id}/permissions`
- Auth: HTTP bearer

Human-owner-only step-up scope replacement for the one active key belonging to an owner-managed business agent. The supplied actions replace, rather than merge with, the key's explicit allowed_actions. Agent API keys and MCP tools cannot call this authority endpoint.

## Path parameters

- `agent_id` string, required

## Request body

- object
  - `actions` string[], required

## Response `200`

Update business-management agent permissions response

- object
  - `status` 'permissions_updated', required
  - `agent` object, required
    - `account_id` string, required
    - `name` string, required
    - `business_id` string, required
    - `allowed_actions` string[], required

## Other responses

- `400`: ErrorResponse
- `401`: ErrorResponse
- `403`: ErrorResponse
- `404`: ErrorResponse
- `409`: ErrorResponse
- `413`: ErrorResponse
- `429`: RateLimitError
- `default`: ErrorResponse

---

[API](https://skmtc.dev/loppee/apis/loppee-business-registry-api-for-external-agents.md) · [All operations](https://skmtc.dev/loppee/apis/loppee-business-registry-api-for-external-agents/llms.txt) · [OpenAPI document](https://skmtc.dev/loppee/apis/loppee-business-registry-api-for-external-agents/revisions/37285f7cddcd?raw)