# Create decision — POST /v1/compliance/accreditation/{id}/decision URL: https://docs.hanzo.ai/docs/openapi/compliance/post-compliance-accreditation-by-id-decision > Records an org reviewer's decision on an accreditation record — a reviewer confirmation, a provider verification the reviewer has evidence of (a CPA/attorney letter, a verifier report), a rejection, or an expiry. `POST /v1/compliance/accreditation/{id}/decision` > [Compliance →](https://docs.hanzo.ai/docs/openapi/compliance) · [All API references →](https://docs.hanzo.ai/docs/openapi) · [Get started →](https://docs.hanzo.ai/docs/guides) | | | | ------------- | ---------------------------------------------------------------- | | **Address** | `https://api.hanzo.ai/v1/compliance/accreditation/{id}/decision` | | **Method** | `POST` | | **Operation** | `post_compliance_accreditation_by_id_decision` | | **Auth** | `Authorization: Bearer $HANZO_API_KEY` | Records an org reviewer's decision on an accreditation record — a reviewer confirmation, a provider verification the reviewer has evidence of (a CPA/attorney letter, a verifier report), a rejection, or an expiry. ROLE-GATED (an org admin or platform reviewer) and ATTRIBUTED: the reviewer's identity is recorded as ReviewerSub and audited. Human-in-the-loop: the platform never confirms on its own, and even a provider\_verified state carries the reviewer who recorded it. ## Request 3 fields, body `application/json` (required). | Field | In | Type | Required | Description | | -------- | ---- | ------ | -------- | ----------------------------------------------------------------------------------------------------- | | `id` | path | string | yes | ID is the accreditation record to decide, from the path. | | `id` | body | string | — | ID is the accreditation record to decide, from the path. | | `status` | body | string | — | Status is the decision being recorded: reviewer\_confirmed, provider\_verified, rejected, or expired. | ## Response | Status | Body | Meaning | | --------- | ------------------ | ------- | | `200` | compliance.accView | ok | | `default` | problem-details | refused | `200` body — 11 fields. | Field | In | Type | Always | Description | | --------------- | ---- | --------------- | ------ | ----------------------------------------------------------------------------------------------------- | | `basis` | body | string | — | Basis is the qualification category: income, net\_worth, professional\_license, or entity. | | `createdAt` | body | integer (int64) | — | CreatedAt is the unix second the record was created. | | `evidenceDocId` | body | string | — | EvidenceDocID references an evidence document in the org's sealed data room. | | `expiresAt` | body | integer (int64) | — | ExpiresAt is the unix second a confirmation ages out; 0 means none. | | `id` | body | string | — | ID is the accreditation record's opaque id. | | `method` | body | string | — | Method is how the state was established: self\_attested, third\_party\_letter, or provider\_verified. | | `note` | body | string | — | Note is a non-PII operator note. | | `reviewerSub` | body | string | — | ReviewerSub is the org user who recorded a decision on this record. | | `status` | body | string | — | Status is the tracked state: asserted, provider\_verified, reviewer\_confirmed, rejected, or expired. | | `subjectId` | body | string | — | SubjectID is the opaque id of the subject the record is about. | | `updatedAt` | body | integer (int64) | — | UpdatedAt is the unix second the record last changed. | Failure carries the platform error shape — see [Errors](https://docs.hanzo.ai/docs/errors). ## Examples **CLI** ```bash hanzo compliance accreditation decision ``` **SDK** **.ts** ```ts import { Configuration, ComplianceApi } from 'hanzoai'; const api = new ComplianceApi(new Configuration({ accessToken: process.env.HANZO_API_KEY })); const { data } = await api.postComplianceAccreditationByIdDecision({ id: 'id', id: "", status: "" }); ``` **.py** ```python from hanzoai.cloud import ApiClient, Configuration from hanzoai.cloud.api import ComplianceApi client = ApiClient(Configuration(access_token=os.environ["HANZO_API_KEY"])) result = ComplianceApi(client).post_compliance_accreditation_by_id_decision(id='id', id="", status="") ``` **.go** ```go cfg := hanzoai.NewConfiguration() cfg.AddDefaultHeader("Authorization", "Bearer "+os.Getenv("HANZO_API_KEY")) client := hanzoai.NewAPIClient(cfg) resp, _, err := client.ComplianceAPI.PostComplianceAccreditationByIdDecision(context.Background()).Execute() if err != nil { return err } ``` **.rs** ```rust use hanzo_client::apis::{configuration::Configuration, compliance_api}; let mut cfg = Configuration::new(); cfg.bearer_access_token = std::env::var("HANZO_API_KEY").ok(); let result = compliance_api::post_compliance_accreditation_by_id_decision(&cfg, Default::default()).await?; ``` **.java** ```java import ai.hanzo.cloud.ApiClient; import ai.hanzo.cloud.api.ComplianceApi; ApiClient client = new ApiClient(); client.setBearerToken(System.getenv("HANZO_API_KEY")); var result = new ComplianceApi(client).postComplianceAccreditationByIdDecision(); ``` **HTTP** ```bash curl -X POST https://api.hanzo.ai/v1/compliance/accreditation//decision \ -H "Authorization: Bearer $HANZO_API_KEY" \ -H "Content-Type: application/json" \ -d '{ "id": "", "status": "" }' ``` **MCP** MCP reaches **compliance** through the `compliance` tool, which names its 16 operations with its own verbs — this one among them, under a name only MCP declares. `describe` explains any of them: ```bash curl -X POST https://api.hanzo.ai/v1/mcp \ -H "Content-Type: application/json" \ -d '{ "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "describe", "arguments": { "op": "get_compliance_accreditation" } } }' ``` --- [Compliance API](https://docs.hanzo.ai/docs/openapi/compliance) · [All Hanzo APIs](https://docs.hanzo.ai/docs/openapi) · [Interactive reference](https://docs.hanzo.ai/docs/openapi/reference)