---
title: "Block an account from reading your availability (idempotent)"
method: POST
path: "/api/me/availability-blocks"
tags: ["Account"]
---

# Block an account from reading your availability (idempotent)

`POST /api/me/availability-blocks`

## Request

- Base URL: `https://whenmeet.me`
- URL: `https://whenmeet.me/api/me/availability-blocks`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `__Host-session`

The blocked viewer sees you exactly like an unreadable calendar (calendarStatus "unavailable", the whole window busy, no timezone) — the block itself is never revealed.

## Request body

- object: uid of a WhenMeet.me account, as listed by GET /api/me/availability-lookups.
  - `uid` string, required

## Response `200`

{ ok: true, uid }

- object
  - `ok` boolean
  - `uid` string

## Other responses

- `400`: bad_request | cannot_block_self.
- `401`: unauthenticated (no session or token), or invalid_token (a Bearer token that is malformed, unknown or revoked — never a silent anonymous fallback).
- `404`: not_found (no such account).

---

[API](https://skmtc.dev/whenmeet/apis/whenmeet-me-api.md) · [All operations](https://skmtc.dev/whenmeet/apis/whenmeet-me-api/llms.txt) · [OpenAPI document](https://skmtc.dev/whenmeet/apis/whenmeet-me-api/revisions/202b80022215?raw)
