---
title: "Update approval policy"
method: PATCH
path: "/v1/approvalPolicy/update"
tags: ["approvalPolicy"]
---

# Update approval policy

`PATCH /v1/approvalPolicy/update`

## Request

- Base URL: `https://api.zevari.ai`
- URL: `https://api.zevari.ai/v1/approvalPolicy/update`
- Auth: HTTP bearer

Transport: call this endpoint with HTTP PATCH and a JSON request body. Create or update approval policy for the active workspace/user/account. Owner/admin only.

## Request body

- object
  - `scope` 'org_default' | 'user_default' | 'account_user'
  - `mode` 'strict' | 'balanced' | 'fast' | 'autopilot' | 'autopilot_limited' | 'autopilot_expanded' | 'autopilot_unattended', required: Four choices: strict, fast, autopilot (with autopilot_campaigns_enabled), autopilot_unattended. Legacy values are still accepted: autopilot_limited is saved as autopilot without campaign launches, autopilot_expanded as autopilot with them; balanced is kept and returned as balanced (canonical_mode strict).
  - `autopilot_campaigns_enabled` boolean: With mode 'autopilot' only: also auto-approve eligible campaign launches and enrollments of any size and action bundles up to 20. Defaults to false. Ignored for other modes.
  - `daily_autopilot_action_limit` integer: Deprecated and ignored: Autopilot has no hourly or daily action cap (551.0).
  - `hourly_autopilot_action_limit` integer: Deprecated and ignored: Autopilot has no hourly or daily action cap (551.0).
  - `accept_unattended_terms` boolean: Required (true) to enable autopilot_unattended: accepts that high-risk outbound actions auto-approve with no browser approval and the org assumes liability.

## Response `200`

Successful Zevari API response.

- ZevariResponseEnvelope
  - `ok` boolean, required: False when the underlying tool reports an error or a partial failure.
  - `method` string, required: Public API method name.
  - `data` unknown, required
  - `request_id` string, required: Request correlation ID. Also returned in X-Zevari-Request-Id.

## Other responses

- `400`: Invalid arguments or method execution error.
- `401`: Missing, invalid, expired, revoked, or unauthorized API key.
- `404`: Unknown or non-public Zevari API method.
- `429`: API key rate limit exceeded.
- `500`: Unhandled server error.

---

[API](https://skmtc.dev/zevari/apis/zevari-public-api.md) · [All operations](https://skmtc.dev/zevari/apis/zevari-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/zevari/apis/zevari-public-api/revisions/a0bc3afac227?raw)