---
title: "Decide on an application"
method: POST
path: "/v1/applications/{application_id}/actions/decide"
tags: ["Other"]
---

# Decide on an application

`POST /v1/applications/{application_id}/actions/decide`

## Request

- Base URL: `https://api.yardstick.team`
- URL: `https://api.yardstick.team/v1/applications/{application_id}/actions/decide`
- Auth: HTTP bearer

Decide on an application

**Required scopes:** `tasks:write`

Records the job hiring manager's decision without a review task; `reject` disqualifies the candidate. Only the job's hiring manager may decide. Any other caller gets the same 404 `application_not_found` as an unknown application. `reason_code_ids` must be system reason codes or your organization's own; any other id returns 400 `invalid_request_body`. If the hiring manager is refused for another reason, such as Application Review being off or the application being archived, the response is 403 `application_decision_forbidden`. An application that already has a handoff or decision returns 409 `precondition_failed`.

**Example (curl):**

```bash
curl -X POST https://api.yardstick.team/v1/applications/app_def456/actions/decide \
  -H 'Authorization: Bearer ys_sk_live_…' \
  -H 'Content-Type: application/json' \
  -H 'Idempotency-Key: 7c3a…' \
  -d '{"decision":"reject","note":"Missing required experience"}'
```

**Example (TypeScript):**

```ts
await fetch(
  "https://api.yardstick.team/v1/applications/app_def456/actions/decide",
  {
    method: "POST",
    headers: {
      Authorization: `Bearer ${process.env.YS_API_KEY}`,
      "Content-Type": "application/json",
      "Idempotency-Key": crypto.randomUUID(),
    },
    body: JSON.stringify({
      decision: "reject",
      note: "Missing required experience",
    }),
  },
);
```

## Headers

- `Idempotency-Key` string
- `X-Request-Id` string

## Request body

- object
  - `decision` 'approve' | 'approve_and_schedule' | 'reject' | 'hold' | 'ask_recruiter', required
  - `note` string
  - `reason_code_ids` string[]

## Response `200`

Success

- object

## Other responses

- `400`: Invalid request
- `401`: Authentication failure
- `403`: Permission denied (scope or feature flag)
- `404`: Resource not found. The error uses the resource-specific code and param names the exact body field or path parameter that referenced it.
- `409`: Conflict (e.g. idempotency key reuse with different body)
- `429`: Rate limited
- `500`: Internal error

---

[API](https://skmtc.dev/yardstick/apis/yardstick-public-api.md) · [All operations](https://skmtc.dev/yardstick/apis/yardstick-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/yardstick/apis/yardstick-public-api/revisions/bef1d2eaaaa1?raw)