---
title: "Create Permission"
method: POST
path: "/users/me/assistant-permissions"
tags: ["approved agent writes"]
---

# Create Permission

`POST /users/me/assistant-permissions`

## Request

- Base URL: `https://api.tickertrac.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.tickertrac.com/users/me/assistant-permissions`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-API-Key`

## Request body

- CreatePermission
  - `request_id` string, uuid, required
  - `credential_id` integer, required
  - `watchlist_id` integer, required
  - `actions` string[], required
  - `duration_days` integer
  - `daily_limit` integer
  - `confirmation_statement` 'I permit these bounded saved-record changes until expiry.', required

## Response `200`

Successful Response

- PermissionOut
  - `id` string, uuid, required
  - `credential_id` integer, required
  - `credential_name` string, required
  - `watchlist_id` integer, required
  - `watchlist_name` string, required
  - `actions` string[], required
  - `daily_limit` integer, required
  - `created_at` string, date-time, required
  - `expires_at` string, date-time, required
  - `rules_hash` string, required
  - `status` 'active' | 'expired' | 'revoked', required
  - `revoked_at` string, date-time, nullable, required
  - `usage_day` string, date, required
  - `operations_used` integer, required
  - `operations_remaining` integer, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/tickertrac/apis/tickerrag-api.md) · [All operations](https://skmtc.dev/tickertrac/apis/tickerrag-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tickertrac/apis/tickerrag-api/revisions/3c7eb0f6425d?raw)