Skip to main content
PATCH
Change what a connected agent may do

Authorizations

hookie_session
string
cookie
required

The console's sealed session cookie, set by WorkOS AuthKit. Mutating requests also require the X-Requested-With CSRF header.

Path Parameters

grant_id
string
required

Grant id from listConnectedAgents.

Body

application/json
level
enum<string>

The rung to grant. Takes precedence over scopes.

Available options:
read,
write,
manage
scopes
enum<string>[]

Read by its highest scope. Accepted for existing callers.

Available options:
hookie:read,
hookie:write,
hookie:manage

Response

Grant updated; effective on the agent's very next request (offline JWT verification is not consulted for scopes — this table is).

ok
enum<boolean>
required
Available options:
true
scopes
string[]
required

The scopes now stored: every scope up to the level.

level
enum<string> | null
required

The rung the grant reaches — read < write < manage — or null when it holds no Hookie scope. A higher rung includes the lower ones.

Available options:
read,
write,
manage,
null