Set what Nora may do without asking

PUThttps://api.norreach.app/v1/plans/{id}/autonomy

Sets the plan's autonomy: preset (ask_everything, auto_veto, full_auto) and optionally the per-kind policies (omitted = kept as they are). Quiet hours and AI-call disclosure stay on whatever is sent. Not while Nora is still writing the plan, nor on a finished or failed one (409).

nora:autonomyRole must allow: nora.autonomyOperation id: set_plan_autonomy

PUT/plans/{id}/autonomy

curl -X PUT "https://api.norreach.app/v1/plans/{id}/autonomy" \
  -H "Authorization: Bearer $NORREACH_API_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
  "preset": "ask_everything"
}'

Set what Nora may do without asking

{
  "object": "plan_autonomy",
  "plan_id": "6a7b8c9d-0e1f-4a2b-8c3d-4e5f6a7b8c9d",
  "preset": "ask_everything",
  "policies": {
    "quiet_hours": true,
    "disclosure": true
  }
}

Authorizations

Authorizationstringheaderrequired

Bearer authentication: send Authorization: Bearer <key>, with an API key or an OAuth access token. The key needs the scope nora:autonomy. API keys and scopes

Path parameters

idstring (uuid)pathrequired

An id (UUID).

Headers

Idempotency-Keystringheader

Any unique string (≤ 255). The same key with the same request returns the first answer for 24 hours.

Body

application/json

presetenumrequired

One of:ask_everythingauto_vetofull_auto

policiesobject

Per-kind switches (quiet_hours and disclosure stay on whatever is sent).

Response

200application/json— Set what Nora may do without asking

object"plan_autonomy"required

plan_idstring (uuid)required

An id (UUID).

presetenumrequired

ask_everything = every piece waits for a person; auto_veto = Nora goes ahead unless you stop her; full_auto = Nora runs it.

One of:ask_everythingauto_vetofull_auto

policiesobjectrequired

Per-kind switches. quiet_hours and disclosure are always on.

Errors

Errors are application/problem+json with a stable code.

Status	Code	Meaning
400	`bad_request`	The request couldn't be read.
400	`unknown_field`	The request has a field this operation doesn't know.
401	`unauthorized`	A valid API key is required.
403	`insufficient_scope`	This API key doesn't have the scope this operation needs.
403	`feature_not_enabled`	The API isn't switched on for this workspace.
403	`role_forbidden`	The key's creator's role can't do this.
404	`not_found`	That doesn't exist.
409	`idempotency_in_progress`	A request with this Idempotency-Key is still running.
409	`conflict`	That conflicts with the current state.
413	`too_large`	The request body is too large.
422	`validation_failed`	The request has invalid fields.
422	`idempotency_mismatch`	This Idempotency-Key was used with a different request.
429	`rate_limited`	Too many requests. Slow down and try again.
500	`server_error`	Something went wrong on our side.
503	`unavailable`	The API isn't available right now. Try again shortly.

PUT/plans/{id}/autonomy

curl -X PUT "https://api.norreach.app/v1/plans/{id}/autonomy" \
  -H "Authorization: Bearer $NORREACH_API_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
  "preset": "ask_everything"
}'

Set what Nora may do without asking

{
  "object": "plan_autonomy",
  "plan_id": "6a7b8c9d-0e1f-4a2b-8c3d-4e5f6a7b8c9d",
  "preset": "ask_everything",
  "policies": {
    "quiet_hours": true,
    "disclosure": true
  }
}