---
title: "Approve (or deny) a CLI device authorization"
method: POST
path: "/agent/v1/control-plane/cli/device/approve"
tags: ["Console"]
---

# Approve (or deny) a CLI device authorization

`POST /agent/v1/control-plane/cli/device/approve`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/agent/v1/control-plane/cli/device/approve`
- Auth: HTTP bearer

Operator-session-authed; the session must have authenticated recently (magic-link OR passkey). Binds the user_code to an approve/deny decision. Does NOT mint a session — the mint happens at the token poll.

## Request body

- object
  - `user_code` string, required
  - `decision` 'approve' | 'deny'

## Response `200`

{ ok, decision, client_name }

- object

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)