---
title: "Approve or deny a device authorization request"
method: POST
path: "/api/oauth/v2/device_verify"
tags: ["Client Auth"]
---

# Approve or deny a device authorization request

`POST /api/oauth/v2/device_verify`

User-facing endpoint for the device authorization flow. After a CLI displays a user code, the authenticated user visits the verification page and calls this endpoint to approve or deny the request. Requires user authentication via the Privy SDK.

## Headers

- `privy-app-id` string, required — ID of your Privy app.

## Request body

- DeviceVerifyRequestBody — Request body for approving or denying a device authorization request. The user must be authenticated and belong to the target app.
  - `action` 'approve' | 'deny', required — The action to take on the device authorization request.
  - `user_code` string, required — The user code displayed on the CLI device.

## Response `200`

The device authorization action was processed successfully.

- DeviceVerifyResponse — Response indicating the device authorization action was processed.
  - `success` boolean, required — Whether the action was processed successfully.

---

[API](https://skmtc.net/privy-io/apis/privy-api.md) · [All operations](https://skmtc.net/privy-io/apis/privy-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/privy-io/privy-api/revisions/bb2eb34156cc/schema)