> ## Documentation Index
> Fetch the complete documentation index at: https://docs.spritz.finance/llms.txt
> Use this file to discover all available pages before exploring further.

# Approve device authorization

> User approves the CLI's device authorization request, selecting permissions and expiry. Mints a scoped API key.



## OpenAPI

````yaml https://platform.spritz.finance/openapi.json post /v1/device/approve
openapi: 3.0.3
info:
  title: Spritz Finance API
  version: 1.0.0
  description: API for the Spritz Finance platform with RFC 9457 error handling
servers:
  - url: https://platform.spritz.finance
    description: Production
  - url: https://sandbox.spritz.finance
    description: Sandbox
security: []
tags:
  - name: Users
    description: User management endpoints
  - name: Bank Accounts
    description: Manage bank accounts for off-ramp destinations
  - name: Bills
    description: Manage bill pay accounts
  - name: Cards
    description: Spritz-issued debit cards
  - name: Auto-Ramp Accounts
    description: Virtual bank accounts that automatically convert fiat deposits to crypto
  - name: Spritz App
    description: >-
      Endpoints used by the Spritz app and internal SDKs. Excluded from the
      public partner spec.
paths:
  /v1/device/approve:
    post:
      tags:
        - Device Authorization
      summary: Approve device authorization
      description: >-
        User approves the CLI's device authorization request, selecting
        permissions and expiry. Mints a scoped API key.
      operationId: postV1DeviceApprove
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                userCode:
                  minLength: 1
                  type: string
                permissions:
                  minItems: 1
                  type: array
                  items:
                    type: string
                    enum:
                      - bank-accounts:read
                      - bank-accounts:write
                      - bank-accounts:delete
                      - bills:read
                      - bills:delete
                      - off-ramp-quotes:read
                      - off-ramp-quotes:write
                      - off-ramps:refund
                expiresAt:
                  format: date-time
                  description: ISO 8601 expiration timestamp
                  type: string
                name:
                  minLength: 1
                  maxLength: 255
                  type: string
              required:
                - userCode
                - permissions
          application/x-www-form-urlencoded:
            schema:
              type: object
              properties:
                userCode:
                  minLength: 1
                  type: string
                permissions:
                  minItems: 1
                  type: array
                  items:
                    type: string
                    enum:
                      - bank-accounts:read
                      - bank-accounts:write
                      - bank-accounts:delete
                      - bills:read
                      - bills:delete
                      - off-ramp-quotes:read
                      - off-ramp-quotes:write
                      - off-ramps:refund
                expiresAt:
                  format: date-time
                  description: ISO 8601 expiration timestamp
                  type: string
                name:
                  minLength: 1
                  maxLength: 255
                  type: string
              required:
                - userCode
                - permissions
          multipart/form-data:
            schema:
              type: object
              properties:
                userCode:
                  minLength: 1
                  type: string
                permissions:
                  minItems: 1
                  type: array
                  items:
                    type: string
                    enum:
                      - bank-accounts:read
                      - bank-accounts:write
                      - bank-accounts:delete
                      - bills:read
                      - bills:delete
                      - off-ramp-quotes:read
                      - off-ramp-quotes:write
                      - off-ramps:refund
                expiresAt:
                  format: date-time
                  description: ISO 8601 expiration timestamp
                  type: string
                name:
                  minLength: 1
                  maxLength: 255
                  type: string
              required:
                - userCode
                - permissions
      responses:
        '200':
          description: Response for status 200
          content:
            application/json:
              schema:
                type: object
                properties:
                  approved:
                    type: boolean
                  clientId:
                    type: string
                  permissions:
                    type: array
                    items:
                      type: string
                  expiresAt:
                    type: string
                    nullable: true
                required:
                  - approved
                  - clientId
                  - permissions
                  - expiresAt
        '401':
          description: Response for status 401
          content:
            application/json:
              schema:
                type: object
                properties:
                  type:
                    default: about:blank
                    description: A URI reference that identifies the problem type
                    type: string
                    example: urn:problem-type:auth:unauthorized
                  title:
                    description: A short, human-readable summary of the problem type
                    type: string
                    example: Unauthorized
                  status:
                    description: The HTTP status code
                    type: number
                    example: 401
                  detail:
                    description: A human-readable explanation specific to this occurrence
                    type: string
                    example: Bearer token required
                  instance:
                    description: A URI reference that identifies the specific occurrence
                    type: string
                  realm:
                    description: The authentication realm
                    type: string
                    example: API
                  scope:
                    description: The required scope for this resource
                    type: string
                    example: read:users
                required:
                  - title
                  - status
                additionalProperties: false
        '500':
          description: Response for status 500
          content:
            application/json:
              schema:
                type: object
                properties:
                  type:
                    default: about:blank
                    description: A URI reference that identifies the problem type
                    type: string
                    example: urn:problem-type:auth:unauthorized
                  title:
                    description: A short, human-readable summary of the problem type
                    type: string
                    example: Unauthorized
                  status:
                    description: The HTTP status code
                    type: number
                    example: 400
                  detail:
                    description: A human-readable explanation specific to this occurrence
                    type: string
                  instance:
                    description: A URI reference that identifies the specific occurrence
                    type: string
                    example: /errors/1234567890
                  code:
                    description: >-
                      Machine-readable cause, present when exactly one thing
                      failed. Branch on this, never on `detail`, which is
                      human-facing copy and may change. For deposit limits the
                      vocabulary matches the `reason` values the limits API
                      returns pre-flight.
                    type: string
                    example: transaction_limit
                  field:
                    description: The offending request field, present alongside `code`.
                    type: string
                    example: amountUsd
                  retryable:
                    description: >-
                      Whether retrying the same request later may succeed
                      without changing its inputs.
                    type: boolean
                    example: true
                required:
                  - title
                  - status
                additionalProperties: false
      security:
        - bearerAuth: []
components:
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: Cognito JWT token for regular user authentication

````