Skip to main content
POST
auth.device.approve

Authorizations

Authorization
string
header
required

A Lath API key: lath_live_sk… or lath_test_sk… on a server, lath_live_pk… or lath_test_pk… in a browser.

Headers

Idempotency-Key
string

Replays the stored response for the same key and input; refuses different input.

Body

application/json
userCode
string
required

The code the device displayed, like BDWP-HQPK

Required string length: 8 - 9
accessToken
string
required

The approving person's current access token

Minimum string length: 20
decision
enum<string>
default:approve
Available options:
approve,
deny

Response

{ activityId, result }. activityId is empty for reads.

activityId
string
required

The activity this call created, or empty for a read.

result
object
required
Last modified on September 13, 2026