Skip to main content
POST
Atomically replace workspace grants using the expected device revision

Authorizations

Authorization
string
header
required

Bearer JWT token or API Key (sk-*).

Path Parameters

agentTerminalId
string
required

Body

application/json
expectedRevision
number
required
Required range: x >= 1
workspaces
object[]
required
Maximum array length: 64

Response

201 - application/json
agentTerminalId
string<uuid>
required
ownerUserId
string<uuid>
required
name
string
required
workspace
string
required
workspaces
object[]
required

Atomic workspace permission contract under the terminal revision.

status
enum<string>
required
Available options:
pending,
approved
mode
enum<string>
required
Available options:
review,
full
networkMode
enum<string>
required
Available options:
restricted,
sandbox,
external
revision
number
required
connectionRevision
number
required

Runner and conversation connection epoch; command review mode edits keep it unchanged.

createdAt
string<date-time>
required
updatedAt
string<date-time>
required
restricted
boolean
required
users
string[]
required
groups
string[]
required
lastOnlineAt
string<date-time> | null
online
boolean
connectionIp
string | null

Gateway-observed IP of the active runner, visible only to its owner.

canManage
boolean
createdBy
string<uuid>
lastUpdateAt
string<date-time>
lastUpdateBy
string<uuid>
version
number
Last modified on October 1, 2026