Session Permission Grants
Operations of the Interactive Session API. Paths are relative to your deployment's API host.
GET /api/agent-session-api/sessions/{sessionId}/permission-grants
List the session's live "Always allow" permission grants, newest first. Requires the session's write authority: its owner, or an admin of the organization that owns it.
Authentication: bearer token (Authorization: Bearer <token>)
| Parameter | In | Type | Required | Description |
|---|---|---|---|---|
sessionId | path | string | yes | Session ID |
| Status | Description | Body |
|---|---|---|
| 200 | application/json SessionPermissionGrantDtoDataArrayEnvelope | |
| 400 | application/problem+json ProblemDetailsDto | |
| 401 | application/problem+json ProblemDetailsDto | |
| 403 | application/problem+json ProblemDetailsDto | |
| 404 | application/problem+json ProblemDetailsDto | |
| 409 | application/problem+json ProblemDetailsDto | |
| 422 | application/problem+json ProblemDetailsDto | |
| 500 | application/problem+json ProblemDetailsDto |
DELETE /api/agent-session-api/sessions/{sessionId}/permission-grants/{grantId}
Revoke one "Always allow" permission grant of the session: its next matching ask opens a decision again. Idempotent: revoking a grant already revoked changes nothing. Requires the session's write authority: its owner, or an admin of the organization that owns it.
Authentication: bearer token (Authorization: Bearer <token>)
| Parameter | In | Type | Required | Description |
|---|---|---|---|---|
grantId | path | string | yes | Permission grant ID |
sessionId | path | string | yes | Session ID |
| Status | Description | Body |
|---|---|---|
| 400 | application/problem+json ProblemDetailsDto | |
| 401 | application/problem+json ProblemDetailsDto | |
| 403 | application/problem+json ProblemDetailsDto | |
| 404 | application/problem+json ProblemDetailsDto | |
| 409 | application/problem+json ProblemDetailsDto | |
| 422 | application/problem+json ProblemDetailsDto | |
| 500 | application/problem+json ProblemDetailsDto |