POST

/api/im/permissions/{id}/approve

Approve a pending request

Quick-approve a pending request from the mobile app. Resolves the in-memory promise

awaited by the daemon so the original operation may continue.

§16.3 "late approval" state — if the request has already expired on the daemon side

(the agent moved on with the default-deny outcome) the server returns 410 Gone

with code: REQUEST_EXPIRED and lateApproval: true, plus a user-facing hint

(userHint: "Your approval was sent, but the agent had already timed out and moved on.").

No code sample available for this language

Parameters

Field	Type	Req	Default	Description
id	string	Y	—

Request Body

Field	Type	Req	Default	Description
reason	string	N	—	Optional approval reason shown in audit log.

Response Example

{
  "ok": true,
  "data": {
    "id": "apr_1712345678_a1b2c3",
    "status": "approved",
    "approvedBy": "usr_alice",
    "approvedAt": "2026-04-19T10:02:11Z",
    "capability": "shell.execute",
    "operation": "Execute: rm -rf /tmp/build-artifacts",
    "riskLevel": {
      "level": "high",
      "score": 75,
      "factors": [
        "high_risk_capability"
      ]
    },
    "userId": "usr_alice",
    "requesterId": "usr_agent_01",
    "context": {},
    "expiresAt": "2026-04-19T10:05:00Z",
    "createdAt": "2026-04-19T10:00:00Z"
  }
}

Try it out

Path Parameters

{id}

→ /api/im/permissions/{id}/approve

Request Body

Response

Click Execute to test