# Act on a Facebook Partnership Ads permission (deferred)

> Markdown version of https://docs.postlake.dev/api/post-social-accounts-by-id-partnership-permissions . The canonical page for humans.
> PostLake is the social media API for AI agents: https://postlake.dev/llms.txt

`POST /v1/social-accounts/{id}/partnership-permissions`

Unavailable while PostLake defers Meta advertising features. Returns HTTP 501 with code meta_ads_deferred. No request is sent to Meta and no partner is notified. The former success schema is retained for client compatibility.

## Request

Authenticate with a bearer API key. Agents calling over MCP authorise with OAuth instead and never handle the key.

```bash
curl -X POST https://api.postlake.dev/v1/social-accounts/{id}/partnership-permissions \
  -H "Authorization: Bearer $POSTLAKE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"partnerPageId":"…","action":"…"}'
```

### Parameters

| Field | Type | Required | What it is |
| --- | --- | --- | --- |
| `id` | string | Yes | In the URL. |

### Body

| Field | Type | Required | What it is |
| --- | --- | --- | --- |
| `partnerPageId` | string | Yes |  |
| `action` | string (send-request, cancel-request, accept-request, reject-request, remove-permission) | Yes |  |


## Response

Reserved success shape; unavailable while deferred (`200`).

| Field | Type | Required | What it is |
| --- | --- | --- | --- |
| `partnerPageId` | string | Yes |  |
| `permissionId` | string | Yes |  |
| `status` | integer | Yes |  |
| `action` | string | Yes |  |



### Example

```json
{
  "partnerPageId": "…",
  "permissionId": "…",
  "status": 0,
  "action": "…"
}
```


## Calling this from an agent

Agents do not call REST. They call tools. Over the hosted MCP server this operation is `act_on_facebook_partnership_permission`, and the agent authorises with OAuth so your API key is never pasted into a chat or seen by the model. You control what any one agent may do: which brands it may act for, which networks it may reach, how much a day, and whether it may spend credits bought up front.

## Errors

Every failure uses one shape: a stable `type`, a granular `code`, the field at fault in `param`, and a plain-language `fix`. See https://docs.postlake.dev/errors.md .

Check the result before retrying a write. Only operations that explicitly support idempotency can safely replay an `Idempotency-Key`.

## Common questions

**Can an AI agent do this without the REST API?**

Yes. Over MCP the same job is the act_on_facebook_partnership_permission tool. The agent authorises with OAuth, so no API key is pasted into a chat or seen by the model, and the answer comes back in the same normalised shape.

**Is it safe to retry this call?**

Do not automatically repeat a write after a timeout unless that endpoint explicitly documents idempotency. First read the resulting state; a second request could repeat the action.

**What happens when it fails?**

You get one error shape: a stable type, a granular code you can branch on, the offending field in param, and a fix written so an agent can correct itself rather than stop. Full list on Errors and retries.

## Related

- [Ad account lookup (deferred)](https://docs.postlake.dev/api/get-social-accounts-by-id-ad-accounts.md) `GET /v1/social-accounts/{id}/ad-accounts`
- [Publishing headroom left](https://docs.postlake.dev/api/get-social-accounts-by-id-allowance.md) `GET /v1/social-accounts/{id}/allowance`
- [Facebook branded-content posts (deferred)](https://docs.postlake.dev/api/get-social-accounts-by-id-branded-content-posts.md) `GET /v1/social-accounts/{id}/branded-content-posts`
- [Branded partner lookup (deferred)](https://docs.postlake.dev/api/get-social-accounts-by-id-branded-partners.md) `GET /v1/social-accounts/{id}/branded-partners`