Skip to main content
POST
Request agent approval
Records a request for independent human review. Does not execute an agent action, grant permissions, or automatically pause or resume a Temporal workflow. See independent agent reviews for the authorization and execution boundaries.

Authorizations

X-API-Key
string
header
required

Body

application/json
agent_id
string
required

An active, uncompromised agent in this authenticated workspace environment.

action
string
required

The intended action; 1–200 UTF-8 bytes. Creating a request does not execute it.

resource
string
required

Specific target resource; 1–2000 UTF-8 bytes.

scope
string
required

Intended permission; 1–200 UTF-8 bytes. Does not grant access.

justification
string

Supporting evidence and purpose; at most 4000 UTF-8 bytes. Never include secrets.

risk_level
enum<string>
default:medium
Available options:
low,
medium,
high,
critical
required_approvals
integer
default:1

Distinct authorized human reviewers; requester excluded.

Required range: 1 <= x <= 10
ttl_minutes
integer
default:60
Required range: 1 <= x <= 10080

Response

Recorded result

id
string<uuid>
required
agent_id
string
required
requested_by
string
required

Authenticated requester: human user UUID or api_key:; never a caller-supplied reviewer.

status
enum<string>
required
Available options:
pending,
approved,
rejected,
expired,
cancelled
expires_at
string<date-time>
required
required_approvals
integer
required
Required range: 1 <= x <= 10
current_approvals
integer
required
Required range: 0 <= x <= 10
decisions
object[]
required

Immutable individual reviews. The queue response leaves this empty; get the request for its complete review history.

tenant_id
string<uuid>
action
string
resource
string
scope
string
justification
string
decision_reason
string
risk_level
enum<string>
Available options:
low,
medium,
high,
critical
created_at
string<date-time>
updated_at
string<date-time>
decided_at
string<date-time>
decided_by
string

Final reviewer or requester cancelling the request; absent while pending.