---
title: "Grant plugin access"
method: POST
path: "/v1/plugins/{pluginId}/access"
tags: ["Plugins"]
---

# Grant plugin access

`POST /v1/plugins/{pluginId}/access`

Creates or reactivates one access grant for a plugin.

## Path parameters

- `pluginId` string, typeid, required

## Request body

- object
  - `orgMembershipId` string, typeid — Den TypeID with 'om_' prefix and a 26-character base32 suffix.
  - `teamId` string, typeid — Den TypeID with 'tem_' prefix and a 26-character base32 suffix.
  - `orgWide` boolean
  - `role` 'viewer' | 'editor' | 'manager', required

## Response `201`

Plugin access grant created successfully.

- PluginArchAccessGrantMutationResponse
  - `ok` true, required
  - `item` PluginArchAccessGrant, required
    - `id` union, required
      - string, typeid — Den TypeID with 'coa_' prefix and a 26-character base32 suffix.
      - string, typeid — Den TypeID with 'pag_' prefix and a 26-character base32 suffix.
      - string, typeid — Den TypeID with 'mag_' prefix and a 26-character base32 suffix.
      - string, typeid — Den TypeID with 'cia_' prefix and a 26-character base32 suffix.
    - `orgMembershipId` string, typeid, nullable, required — Den TypeID with 'om_' prefix and a 26-character base32 suffix.
    - `teamId` string, typeid, nullable, required — Den TypeID with 'tem_' prefix and a 26-character base32 suffix.
    - `orgWide` boolean, required
    - `role` 'viewer' | 'editor' | 'manager', required
    - `createdByOrgMembershipId` string, typeid, required — Den TypeID with 'om_' prefix and a 26-character base32 suffix.
    - `createdAt` string, date-time, required
    - `removedAt` string, date-time, nullable, required

## Other responses

- `400` — The plugin access request was invalid.
- `401` — The caller must be signed in to manage plugin access.
- `403` — The caller lacks permission to manage plugin access.
- `404` — The plugin could not be found.

## Changes

- **2026-08-20** `93df40e2efd5` — 8 info
  - removed the pattern `^plg_.*` from the `path` request parameter `pluginId`
  - removed the pattern `^om_.*` from the request property `orgMembershipId`
  - removed the pattern `^tem_.*` from the request property `teamId`
  - added `subschema #1, subschema #2, subschema #3, subschema #4` to the `item/id` response property `anyOf` list for the response status `201`
  - …4 more

[Change history](https://skmtc.dev/openworklabs/apis/den-api/changes/v1/plugins/:pluginId/access/post.md)

---

[API](https://skmtc.dev/openworklabs/apis/den-api.md) · [All operations](https://skmtc.dev/openworklabs/apis/den-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/openworklabs/den-api/revisions/571dc4a74532/schema)