POST /api/v1/smart-accounts/session-reviews

Parameters

Name	Location	Details
`X-Juicebox-Account`	header / required	Enrolled account identity, including authority chain and lowercase owner address. Enrollment derives this identity before the account exists.
`X-Juicebox-Signer`	header / required	Owner wallet or authorized bot address that signed this request.
`X-Juicebox-Issued-At`	header / required	Unix seconds, sent as 1–13 decimal digits without leading zeros; at most 30 seconds ahead of server time.
`X-Juicebox-Expires-At`	header / required	Unix seconds, sent as 1–13 decimal digits without leading zeros; in the future and within 300 seconds of issuedAt.
`X-Juicebox-Nonce`	header / required	Fresh random 32-byte lowercase nonce. A consumed nonce cannot be retried.
`X-Juicebox-Signature`	header / required	EIP-712 CenterRequest signature over every signed field. Contract-owner signatures may vary in length. This is a computed request proof, not a reusable API key.
`X-Juicebox-Grant`	header / optional	Authorized bot grant ID. Required for a bot; omit for the owner, signing grantId as the empty string.
`Idempotency-Key`	header / optional	Signed retry identity. Required on plan creation and transaction submission. Preserve exact method, target, Content-Type, and body bytes; use a fresh request nonce and signature.

Request body

Field Type Details

bindingId string
required

grantId string
required

generation value
required Positive uint256 as an exact decimal string.

nonce value
required

validAfter integer
required Start at or after server time, within the next 86400 seconds. The complete chosen duration must fit the active bot grant's expiry.

durationDays

integer
required

Values: [7,30]

maximumCalls value
required

gasBudget

object
optional

Host-reviewed gas-only paymaster on the wallet chain. Per-operation gas must fit totalGasLimit; priority fee must not exceed fee cap; maxGasPerOperation × maxFeePerGas must fit totalSponsoredCostLimit. No account asset charge or new allowance is authorized.

Fields

Field	Type	Details
`paymaster`	string required
`maxGasPerOperation`	value required
`maxFeePerGas`	value required
`maxPriorityFeePerGas`	string required	uint128 as a lossless decimal string
`totalGasLimit`	value required
`totalSponsoredCostLimit`	value required	Positive uint256 as an exact decimal string.
`maxPaymasterDataLength`	integer required	Values: `[130]`

allocations

array
required

Fields

Field Type Details

id string
required

total value
required Positive uint256 as an exact decimal string.

allocations

array
required

Fields

Field	Type	Details
`id`	string required
`chainId`	integer required
`asset`	string required
`limit`	value required	Positive uint256 as an exact decimal string.

actions

array
required

Fields

Option 1

Field	Type	Details
`kind`	string required	Values: `["v6-project-uri"]`
`controller`	string required
`projectId`	value required	Positive uint256 as an exact decimal string.

Option 2

Field	Type	Details
`kind`	string required	Values: `["erc20-transfer"]`
`allocationId`	string required
`beneficiary`	string required
`perCallLimit`	value required	Positive uint256 as an exact decimal string.
`totalLimit`	value required	Positive uint256 as an exact decimal string.

Option 3

Field	Type	Details
`kind`	string required	Values: `["v6-pay"]`
`allocationId`	string required
`beneficiary`	string required
`perCallLimit`	value required	Positive uint256 as an exact decimal string.
`totalLimit`	value required	Positive uint256 as an exact decimal string.
`terminal`	string required
`projectId`	value required	Positive uint256 as an exact decimal string.
`minReturnedTokens`	string required	uint256 as a lossless decimal string

JSON schema

{
  "type": "object",
  "properties": {
    "bindingId": {
      "$ref": "#/components/schemas/Hash"
    },
    "grantId": {
      "type": "string",
      "pattern": "^[A-Za-z0-9_-]{1,100}$"
    },
    "generation": {
      "$ref": "#/components/schemas/PositiveUint256"
    },
    "nonce": {
      "allOf": [
        {
          "$ref": "#/components/schemas/Hash"
        },
        {
          "not": {
            "const": "0x0000000000000000000000000000000000000000000000000000000000000000"
          }
        }
      ]
    },
    "validAfter": {
      "$ref": "#/components/schemas/UnixSeconds",
      "description": "Start at or after server time, within the next 86400 seconds. The complete chosen duration must fit the active bot grant's expiry."
    },
    "durationDays": {
      "type": "integer",
      "enum": [
        7,
        30
      ]
    },
    "maximumCalls": {
      "$ref": "#/components/schemas/SessionMaximumCalls"
    },
    "gasBudget": {
      "$ref": "#/components/schemas/SessionGasBudget"
    },
    "allocations": {
      "type": "array",
      "items": {
        "$ref": "#/components/schemas/SessionAllocationGroup"
      },
      "maxItems": 16
    },
    "actions": {
      "type": "array",
      "items": {
        "$ref": "#/components/schemas/SessionAction"
      },
      "minItems": 1,
      "maxItems": 16
    }
  },
  "required": [
    "bindingId",
    "grantId",
    "generation",
    "nonce",
    "validAfter",
    "durationDays",
    "maximumCalls",
    "allocations",
    "actions"
  ],
  "additionalProperties": false,
  "description": "Review does not activate authority. The selected grant must be active with read+plan+relay; a bot can review only its own grant. Groups, chain/asset coordinates, allocation IDs and target/selector actions must be unique. Assets require reviewed identities and matching decimals; action caps must fit allocations. URI-only policies can have no asset groups, but executable sessions still require the sponsored gas budget. V6 project URI permission must belong to the smart account."
}

Response 200

Field Type Details

status

string
required

Values: ["reviewable-not-activated"]

policy

object
required

Fields

Field Type Details

schemaVersion

integer
required

Values: [1]

ownerAccountId string
required Authority chain and lowercase owner address; the authority chain is independent of a transaction's destination chain.

bindingId string
required

chainId integer
required

wallet string
required

grantId string (uuid)
required

sessionKey string
required

generation value
required Positive uint256 as an exact decimal string.

nonce value
required

validAfter integer
required Unix timestamp in seconds.

validUntil integer
required Unix timestamp in seconds.

maximumCalls value
required

salt string
required

restrictToActions

boolean
required

Values: [true]

signing

object
required

Fields

Field	Type	Details
`mode`	string required	Values: `["disabled"]`

crossChainPermits

boolean
required

Values: [false]

claimPolicies

boolean
required

Values: [false]

wildcardFallback

boolean
required

Values: [false]

gasBudget

object
optional

Fields

Field	Type	Details
`paymaster`	string required
`maxGasPerOperation`	value required
`maxFeePerGas`	value required
`maxPriorityFeePerGas`	string required	uint128 as a lossless decimal string
`totalGasLimit`	value required
`totalSponsoredCostLimit`	value required	Positive uint256 as an exact decimal string.
`maxPaymasterDataLength`	integer required	Values: `[130]`
`paymasterCodeHash`	string required
`paymasterReviewId`	string required

allocations

array
required

Fields

Field	Type	Details
`id`	string required
`assetIdentity`	string required
`decimals`	integer required
`total`	value required	Positive uint256 as an exact decimal string.
`allocations`	array required

actions

array
required

Fields

See schema

policyHash string
required

walletStateHash string
required

manifestRevision string
required

evidence

object
required

Fields

Field	Type	Details
`chainId`	integer required	Values: `[1,10,8453,42161,84532,421614,11155111,11155420]`
`blockNumber`	string required	uint256 as a lossless decimal string
`blockHash`	string required
`timestamp`	string required	uint256 as a lossless decimal string
`source`	string required	Values: `["onchain"]`

ownerApproval

object
required

Fields

Field	Type	Details
`required`	boolean required	Values: `[true]`
`signerRole`	string required	Values: `["smart-account-owner-threshold"]`
`action`	string required	Values: `["install-or-enable-exact-session-policy"]`
`noPermanentBotProjectPermission`	boolean required	Values: `[true]`

activationRequirements array
required

warnings array
required

JSON schema

{
  "type": "object",
  "properties": {
    "status": {
      "type": "string",
      "const": "reviewable-not-activated"
    },
    "policy": {
      "$ref": "#/components/schemas/ReviewedSessionPolicy"
    },
    "policyHash": {
      "$ref": "#/components/schemas/Hash"
    },
    "walletStateHash": {
      "$ref": "#/components/schemas/Hash"
    },
    "manifestRevision": {
      "$ref": "#/components/schemas/Hash"
    },
    "evidence": {
      "$ref": "#/components/schemas/BlockEvidence"
    },
    "ownerApproval": {
      "type": "object",
      "properties": {
        "required": {
          "type": "boolean",
          "const": true
        },
        "signerRole": {
          "type": "string",
          "const": "smart-account-owner-threshold"
        },
        "action": {
          "type": "string",
          "const": "install-or-enable-exact-session-policy"
        },
        "noPermanentBotProjectPermission": {
          "type": "boolean",
          "const": true
        }
      },
      "required": [
        "required",
        "signerRole",
        "action",
        "noPermanentBotProjectPermission"
      ],
      "additionalProperties": false
    },
    "activationRequirements": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "warnings": {
      "type": "array",
      "items": {
        "type": "string"
      }
    }
  },
  "required": [
    "status",
    "policy",
    "policyHash",
    "walletStateHash",
    "manifestRevision",
    "evidence",
    "ownerApproval",
    "activationRequirements",
    "warnings"
  ],
  "additionalProperties": false
}