Skip to main content
POST
Cancel agent approval
Only the authenticated original requester may cancel a pending, unexpired request. Human users and the same original API key can cancel their own requests. Cancellation preserves the record and earlier reviews. See independent agent reviews for the authorization and execution boundaries.

Authorizations

X-API-Key
string
header
required

Path Parameters

approvalID
string<uuid>
required

UUID returned when the approval request was created.

Body

application/json
reason
string
required

Reason for the decision; nonblank and at most 2000 UTF-8 bytes.

Minimum string length: 1

Response

Recorded result

id
string<uuid>
required
agent_id
string
required
requested_by
string
required

Authenticated requester: human user UUID or api_key:; never a caller-supplied reviewer.

status
enum<string>
required
Available options:
pending,
approved,
rejected,
expired,
cancelled
expires_at
string<date-time>
required
required_approvals
integer
required
Required range: 1 <= x <= 10
current_approvals
integer
required
Required range: 0 <= x <= 10
decisions
object[]
required

Immutable individual reviews. The queue response leaves this empty; get the request for its complete review history.

tenant_id
string<uuid>
action
string
resource
string
scope
string
justification
string
decision_reason
string
risk_level
enum<string>
Available options:
low,
medium,
high,
critical
created_at
string<date-time>
updated_at
string<date-time>
decided_at
string<date-time>
decided_by
string

Final reviewer or requester cancelling the request; absent while pending.

approval_id
string<uuid>

Alias of id for compatibility.