List pending resource requests (approver-facing)
GET /admin/requests
GET
/admin/requests
Returns the pending resource_request rows, oldest first.
Requires share.grant capability OR system.admin.
Per-approver capability scoping (filtering by which team the
approver actually controls) is a polish-phase follow-up.
Authorizations
Section titled “Authorizations ”Parameters
Section titled “ Parameters ”Query Parameters
Section titled “Query Parameters ” limit
integer
offset
integer
Responses
Section titled “ Responses ”Pending requests
object
items
required
Array<object>
A resource_request row. The state machine is pending → granted / denied (admin decision); granted → expired (CapabilitySweeper cascade). Terminal states admit no further transitions.
object
id
required
string format: uuid
requester_user_ref
required
integer format: int64
target_asset_id
required
string format: uuid
requested_capability
required
string
reason
string
state
required
string
decided_at
string format: date-time
decided_by_user_ref
integer format: int64
decision_reason
string
expires_at
On granted requests, the linked grant’s auto-expiry. Null means permanent.
string format: date-time
requested_at
required
string format: date-time
total
required
Total pending count (badge value).
integer format: int64
Authentication required, missing, or invalid
object
error
required
Human-readable error summary
string
Example
the request could not be completedExample
{ "error": "authentication required: sign in and retry with a valid session or API token"}Authenticated but missing required capabilities
object
error
required
Human-readable error summary
string
Example
the request could not be completed