Approve or reject an access request

Resolve a pending access request. On approve, a binding is created for the requester with roleSlug: user.

POST /v1/agents/{agentId}/access/requests/{requestId}

Approve or reject an access request

cURL

curl --request POST \
  --url https://{host}/v2/workspaces/slug:agent-factory/webhooks/v1/agents/{agentId}/access/requests/{requestId} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{}'

200

{
  "_id": "<string>",
  "agent_id": "<string>",
  "requester_id": "<string>",
  "requester_email": "<string>",
  "resolved_by": "<string>",
  "rejection_reason": "<string>"
}

Authorizations

BearerAuthOrgApiKeyAuth

Authorization · string · header · required

User-bound credential carrying an identity: either a session JWT or a user access token (at:*) generated from the user settings UI. Send as Authorization: Bearer <token>. Org API keys (iak_*) are not accepted here - they carry no user identity. Use the x-prismeai-api-key header instead (see OrgApiKeyAuth).

Path Parameters

agentId · string · required

Maximum string length: 64

requestId · string · required

Maximum string length: 128

Body

application/json

action · enum<string> · required

Available options: approve, reject

Maximum string length: 16

rejection_reason · string

Maximum string length: 1024

Response

200

application/json

Resolved request.

_id · string

agent_id · string

requester_id · string

requester_email · string

status · enum<string>

Available options: approved, rejected

resolved_by · string

rejection_reason · string