### Redeem reward points

`POST /api/v1/users/{id}/redeem-points`

- Authentication: manager session (JWT) or API token
- Permission: `prm_users_reward_points` (Redeem reward points)
- Risk: write
- Rate limit bucket: `t_mutate`

_This endpoint has no hand-written reference entry yet. The method, path, authentication, permission and rate limit above are generated from the running router and are accurate; there is no request or response example._