---
title: "Approve Consent"
method: POST
path: "/api/v1/mcp/consent/approve"
tags: ["mcp"]
---

# Approve Consent

`POST /api/v1/mcp/consent/approve`

## Request

- Base URL: `https://api.nudgelink.co` (the document declares no server; this is the origin it was published from)
- URL: `https://api.nudgelink.co/api/v1/mcp/consent/approve`
- Auth: HTTP bearer

Grant the assistant access as the signed-in user.

``user.id`` is the ONLY source of the tenant that gets stamped onto the
authorization — never anything from the request body. That is what keeps
one user from approving an assistant into someone else's account.

## Request body

- ConsentDecision
  - `request_id` string, required

## Response `200`

Successful Response

- ConsentRedirectOut
  - `redirect_url` string, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/nudgelink/apis/nudgelink-api.md) · [All operations](https://skmtc.dev/nudgelink/apis/nudgelink-api/llms.txt) · [OpenAPI document](https://skmtc.dev/nudgelink/apis/nudgelink-api/revisions/baa46e6db986?raw)