---
title: "Approve or deny one pending MCP authorization"
method: POST
path: "/api/oauth/authorize/decision"
tags: ["oauth"]
---

# Approve or deny one pending MCP authorization

`POST /api/oauth/authorize/decision`

## Request

- Base URL: `https://app.nerdit.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://app.nerdit.ai/api/oauth/authorize/decision`
- Auth: none declared

Consume the transaction and issue a code, or report the refusal.

## Request body

- AuthorizeDecisionRequest: The person's answer to one pending authorize transaction.
  - `rid` string, required
  - `decision` 'approve' | 'deny', required
  - `node_ids` string[], nullable
  - `scope_kind` 'nodes' | 'projects', nullable
  - `project_ids` string[], nullable

## Response `200`

Successful Response

- AuthorizeDecisionView: Where the browser goes next, built only from the registered URI.
  - `redirect_to` string, required

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `409`: Conflict
- `422`: Validation Error
- `429`: Too Many Requests

---

[API](https://skmtc.dev/nerdit/apis/nerdit-cloud-web.md) · [All operations](https://skmtc.dev/nerdit/apis/nerdit-cloud-web/llms.txt) · [OpenAPI document](https://skmtc.dev/nerdit/apis/nerdit-cloud-web/revisions/06e3b44b58be?raw)