---
title: "Operator: mark a beta access request invited, declined, or new again"
method: PATCH
path: "/api/ops/access-requests/{requestId}"
tags: ["Operator"]
---

# Operator: mark a beta access request invited, declined, or new again

`PATCH /api/ops/access-requests/{requestId}`

## Request

- Base URL: `https://tre-app.com`
- URL: `https://tre-app.com/api/ops/access-requests/{requestId}`
- Auth: one of:
  - API key in cookie `__Secure-authjs.session-token`
  - API key in cookie `authjs.session-token`

Operator console only: requires the web session of an address in the operator allowlist of this installation, sent from the application itself. Every other signed-in caller and every valid Bearer token receives 404 NOT_FOUND, whether or not this installation has an operator configured; a caller with no valid credential receives 401, as on every route. Recorded in the operator log. Bookkeeping only: Tre has no sign-in gate, so a status admits and refuses nobody. Moving between invited and declined needs a reopen first (409).

## Request body

- AccessRequestStatusUpdate
  - `status` 'new' | 'invited' | 'declined', required

## Response `204`

No content

## Other responses

- `400`: Invalid request
- `401`: Unauthenticated
- `403`: The request did not come from the application’s own origin
- `404`: Not the operator, or no such object
- `409`: Conflict
- `429`: Rate limited
- `500`: Internal server error
- `503`: Temporarily unavailable

---

[API](https://skmtc.dev/tre-app/apis/tre-rest-api.md) · [All operations](https://skmtc.dev/tre-app/apis/tre-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tre-app/apis/tre-rest-api/revisions/26a7187a05fc?raw)