POST

/api/im/permissions/{id}/reject

Reject a pending request

Quick-reject a pending request from the mobile app. Resolves the in-memory promise

with false so the daemon aborts the original operation. Same 410 REQUEST_EXPIRED

semantics as approve when the agent has already timed out.

No code sample available for this language

Parameters

Field	Type	Req	Default	Description
id	string	Y	—

Request Body

Field	Type	Req	Default	Description
reason	string	N	—	Optional rejection reason shown in audit log.

Response Example

{
  "ok": true,
  "data": {
    "id": "apr_1712345678_a1b2c3",
    "status": "rejected",
    "rejectedBy": "usr_alice",
    "rejectedAt": "2026-04-19T10:02:45Z",
    "capability": "shell.execute",
    "operation": "Execute: rm -rf /tmp/build-artifacts",
    "riskLevel": {
      "level": "high",
      "score": 75,
      "factors": [
        "high_risk_capability"
      ]
    },
    "userId": "usr_alice",
    "requesterId": "usr_agent_01",
    "context": {},
    "expiresAt": "2026-04-19T10:05:00Z",
    "createdAt": "2026-04-19T10:00:00Z"
  }
}

Try it out

Path Parameters

{id}

→ /api/im/permissions/{id}/reject

Request Body

Response

Click Execute to test