Activate authorization
Activate a PENDING authorization, flipping it to ACTIVE and stamping
signedAt. This is the self-service counterpart to back-office signing:
a broker that has captured the customer’s authorization in its own app
(e.g. an in-app consent step) records that attestation here.
Restricted: your organization must be explicitly enabled for
self-activation, and authorizedOrganizationId must be your own org —
you may only activate grants made TO you, never between other parties.
Both fail with 403 forbidden. The PENDING grant itself is created when
the customer org is created under you (POST /v1/organizations).
Idempotent: re-activating an already-ACTIVE grant returns it with
200. A grant that was never created or has been REVOKED returns
404 authorization_not_found.
Effect is immediate — once active, requests with Nxos-On-Behalf-Of
pointing at the granter will succeed for delegated operations.
Headers
Bearer token. Format: Bearer <api_key>
Unique key per logical operation. UUID v4 recommended. Max 255 characters.
Body
Request body for POST /v1/authorizations/activate.
Organization that granted the authorization (the customer).
Organization that received the authorization (the broker). Must equal your API key's organization — you may only activate grants made to you.
Type of grant to activate. Currently always LOA.
LOA Response
The request has succeeded.
A cross-org authorization grant between two organizations.
Object type. Always authorization.
authorization Organization that granted the authorization (the customer).
Organization that received the authorization (the broker / platform).
Type of grant. Currently always LOA.
LOA Current status — PENDING, ACTIVE, or REVOKED.
PENDING, ACTIVE, REVOKED ISO 8601 timestamp when the granter signed. null when the row is still PENDING.
ISO 8601 timestamp when the grant was revoked. null until revocation.
Optional free-form reason captured at revocation time. null when not provided.
ISO 8601 timestamp when the row was first created (usually when the LOA invitation was issued).
ISO 8601 timestamp of the most recent state change (signing or revocation).